$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfb884b1-46ca-3bd1-9fbe-33434208f792.roa File: dfb884b1-46ca-3bd1-9fbe-33434208f792.roa (raw, json) Hash identifier: 85cuZ2Pye3Bb2K9uGjJitZPmIDObBQ7mq5+3/3kfbdI= Subject key identifier: E0:99:38:71:0F:1B:B8:DF:05:58:72:F4:3D:ED:1C:EC:81:C3:E1:75 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A49707C80DCC9697F110556A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfb884b1-46ca-3bd1-9fbe-33434208f792.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 173.191.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:7c:80:dc:c9:69:7f:11:05:56:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=12a55815-16b6-454c-9160-8c49499bedce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6f:a9:bf:4d:52:8f:ba:84:2c:4a:cb:e2:fd: 1a:0a:63:02:26:d7:b6:01:e5:26:1d:47:ed:fe:24: 48:09:1c:2c:f7:a2:d2:1f:d1:c7:8e:54:06:0c:73: 50:f5:8c:4c:39:76:61:85:ed:1b:af:3e:42:9a:b2: 58:97:c6:8e:b9:2b:13:a7:6c:7f:78:68:3b:fc:51: 90:c3:ff:b4:13:8e:f7:0f:b9:78:07:2a:78:a6:c6: 38:d5:b6:86:87:8a:86:e8:4b:2b:a0:fb:0b:eb:dd: 50:48:e6:65:6c:fb:01:cd:62:dd:38:a9:a7:a3:2a: 5b:84:a4:ed:ac:2c:58:99:da:a6:1c:f6:c8:68:47: 83:4f:37:92:55:2a:0d:ab:eb:21:2a:2a:85:13:e7: f9:30:12:89:a1:1b:14:7a:34:09:5e:ea:f9:f8:44: 04:b8:78:79:ab:1c:17:8c:98:8e:4b:5e:37:72:96: 88:9b:6a:d2:58:aa:e9:e2:b0:48:20:e7:6f:e5:94: 1b:60:30:cf:db:b0:65:7e:2e:70:e7:1a:6c:40:36: 43:52:c9:ad:c9:f1:69:c0:97:0b:70:1d:4a:b4:d8: 65:1c:34:9c:af:9d:2c:f9:ae:f0:91:ba:24:45:17: 91:10:a8:55:2b:2e:3e:c1:8a:a6:6e:3b:65:bb:4b: 9a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:99:38:71:0F:1B:B8:DF:05:58:72:F4:3D:ED:1C:EC:81:C3:E1:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfb884b1-46ca-3bd1-9fbe-33434208f792.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:05:fd:79:f5:58:f0:03:cb:27:e0:26:b1:3e:59:58:4c:45: a7:ed:04:50:f1:ed:f3:50:e8:1b:6a:10:b5:87:57:03:74:01: 3e:e7:37:6d:b9:aa:1f:fc:5b:84:29:9e:70:1e:4b:da:f6:34: 76:2a:8b:76:b9:0c:6d:f6:eb:78:f7:79:0c:ae:db:0d:c4:c7: 13:eb:5d:f6:e9:55:f5:70:d0:b7:e8:62:60:9d:06:03:eb:b5: 8e:cf:f7:42:f5:77:82:c0:c3:e4:f3:12:73:90:f7:fe:71:79: f4:e8:f2:88:c7:04:ea:79:38:91:16:2c:e6:8c:7a:97:d6:de: 3f:e4:d8:bf:58:f4:0c:d5:5b:fc:95:9f:e8:f5:7f:b3:10:bc: 33:9e:7b:c6:4f:48:84:55:ed:82:5a:7b:e7:4e:c9:d9:2c:11: b3:13:86:15:1d:fd:24:8e:9a:b6:fa:eb:3a:b7:c8:89:c6:b5: 7f:d6:c0:70:ac:95:86:50:65:fe:ab:65:b6:f6:4a:0a:d1:51: 35:18:aa:25:1c:c5:da:fa:42:76:a5:0d:ed:9b:d6:51:ba:ab: 49:7d:e6:4b:4f:67:6c:13:21:28:96:9b:9a:57:31:fe:b0:84: 4a:96:8f:07:68:e4:7d:c4:75:70:e6:3f:37:0a:b9:4e:6d:11: cf:6c:fc:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHyA3MlpfxEFVqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk MTJhNTU4MTUtMTZiNi00NTRjLTkxNjAtOGM0OTQ5OWJlZGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1W+pv01Sj7qELErL4v0aCmMCJte2AeUmHUft /iRICRws96LSH9HHjlQGDHNQ9YxMOXZhhe0brz5CmrJYl8aOuSsTp2x/eGg7/FGQ w/+0E473D7l4Byp4psY41baGh4qG6EsroPsL691QSOZlbPsBzWLdOKmnoypbhKTt rCxYmdqmHPbIaEeDTzeSVSoNq+shKiqFE+f5MBKJoRsUejQJXur5+EQEuHh5qxwX jJiOS143cpaIm2rSWKrp4rBIIOdv5ZQbYDDP27Blfi5w5xpsQDZDUsmtyfFpwJcL cB1KtNhlHDScr50s+a7wkbokRReREKhVKy4+wYqmbjtlu0uauQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCZOHEPG7jfBVhy9D3tHOyBw+F1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGZiODg0YjEtNDZjYS0z YmQxLTlmYmUtMzM0MzQyMDhmNzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErb+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoF/Xn1WPADyyfgJrE+WVhMRaftBFDx7fNQ6BtqELWHVwN0AT7nN225 qh/8W4QpnnAeS9r2NHYqi3a5DG3263j3eQyu2w3ExxPrXfbpVfVw0LfoYmCdBgPr tY7P90L1d4LAw+TzEnOQ9/5xefTo8ojHBOp5OJEWLOaMepfW3j/k2L9Y9AzVW/yV n+j1f7MQvDOee8ZPSIRV7YJae+dOydksEbMThhUd/SSOmrb66zq3yInGtX/WwHCs lYZQZf6rZbb2SgrRUTUYqiUcxdr6QnalDe2b1lG6q0l95ktPZ2wTISiWm5pXMf6w hEqWjwdo5H3EdXDmPzcKuU5tEc9s/Fw= -----END CERTIFICATE-----Generated at Wed Jul 2 19:39:12 2025 by rpki-client