$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e5e19ec4-5d27-3935-8928-71c90f78d2a3.roa File: e5e19ec4-5d27-3935-8928-71c90f78d2a3.roa (raw, json) Hash identifier: i+sA9VFvjTNh0frVrqQtdffhn+bVTpPL0wx6PVDw+Lc= Subject key identifier: 13:B8:99:62:4D:22:37:7B:1F:C5:B3:0A:C1:F4:62:8B:89:32:74:AF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A35E593336E5B4E121E7F1F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e5e19ec4-5d27-3935-8928-71c90f78d2a3.roa Signing time: Mon 16 Jun 2025 13:01:03 +0000 ROA not before: Mon 16 Jun 2025 13:01:03 +0000 ROA not after: Sun 14 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 173.187.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:35:e5:93:33:6e:5b:4e:12:1e:7f:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 16 13:01:03 2025 GMT Not After : Sep 14 13:01:03 2025 GMT Subject: CN=ee29d34a-663e-496e-a5f5-4a624bff4bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1b:d2:97:3d:e5:78:d5:fd:1d:e7:fa:29:00: 7e:56:2a:53:e7:ff:cb:49:59:f6:11:b9:b4:0a:2a: ac:92:51:ea:40:2d:71:c3:c5:a7:8b:45:f0:47:39: 21:7f:4b:17:a4:aa:fb:64:29:50:3a:ee:66:2f:e1: 4f:cd:6e:ec:90:38:c5:a4:9a:f4:35:68:f0:78:d6: 5d:34:10:dd:cb:82:cc:42:53:e6:27:72:6a:c5:2b: 67:c2:d9:8d:3e:bd:be:3c:7a:9c:02:29:9f:29:51: 28:21:ed:56:89:b0:34:79:a7:e1:19:a6:a7:83:72: 5f:92:78:49:20:ce:70:d9:db:55:24:a1:82:5a:ba: 66:f9:32:63:a9:eb:63:3b:8f:72:f8:db:29:f5:a2: f0:c8:01:b7:4d:d9:4d:54:43:1c:2b:f9:c3:5e:94: 20:c5:d4:ee:5b:27:d6:0b:58:a2:6d:ba:de:63:b5: ee:c1:ac:2c:9d:be:03:e6:2e:17:37:a5:b8:d8:c9: b6:bc:05:c5:98:f9:87:fc:30:80:58:cd:bf:1d:06: a3:5c:12:1b:5a:4c:0b:a7:37:bd:17:cb:8f:63:4f: 69:cc:ba:cc:f0:da:7b:e2:1f:62:53:bd:28:58:3b: 56:03:7e:b4:c5:00:68:32:5e:d9:6e:45:6d:f9:c4: f5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B8:99:62:4D:22:37:7B:1F:C5:B3:0A:C1:F4:62:8B:89:32:74:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e5e19ec4-5d27-3935-8928-71c90f78d2a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:a1:27:5e:5c:8b:94:80:f1:8c:92:46:fc:0e:1e:d3:2b:79: c7:19:cf:09:fe:f7:5f:83:d4:23:c3:e7:7a:04:ce:4c:59:72: e2:cc:79:42:a7:36:17:86:df:f2:9d:13:95:ff:cd:d4:02:01: fd:77:bf:a7:d1:28:b0:b7:d6:52:fc:82:26:73:17:bf:ad:a2: c2:13:b5:66:40:09:cb:d6:6d:8e:21:be:b3:3a:f7:05:f1:23: 84:06:9a:c4:45:2e:c4:cc:b8:b3:67:59:fa:46:de:66:fb:49: 74:05:2d:15:35:c1:ea:23:e6:96:d2:94:a2:2d:c0:a9:d2:5e: aa:f9:9c:4d:9b:9c:f3:25:fa:6a:ce:13:63:58:c6:7b:60:31: 35:d7:13:02:88:74:fb:a5:20:33:bc:2e:23:8d:d7:ab:66:19: 68:d9:5d:bb:7e:a0:36:7b:8e:10:f8:45:79:f6:08:b2:4c:5d: a2:96:1a:ca:91:c0:f0:09:0e:81:e3:29:16:cf:75:e0:1b:e8: 75:c7:52:19:89:ef:ce:84:12:9f:42:0f:d6:97:cb:93:39:3e: 8c:bb:27:90:60:c2:e9:ef:9b:92:48:c2:44:67:a6:4a:d7:28: 16:72:88:a5:20:e3:40:1c:04:8f:34:79:1e:4b:87:95:29:b0: c9:fc:31:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo15ZMzbltOEh5/HwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYxNjEzMDEwM1oXDTI1MDkxNDEzMDEwM1owLzEtMCsGA1UEAxMk ZWUyOWQzNGEtNjYzZS00OTZlLWE1ZjUtNGE2MjRiZmY0YmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBvSlz3leNX9Hef6KQB+VipT5//LSVn2Ebm0 CiqsklHqQC1xw8Wni0XwRzkhf0sXpKr7ZClQOu5mL+FPzW7skDjFpJr0NWjweNZd NBDdy4LMQlPmJ3JqxStnwtmNPr2+PHqcAimfKVEoIe1WibA0eafhGaang3JfknhJ IM5w2dtVJKGCWrpm+TJjqetjO49y+Nsp9aLwyAG3TdlNVEMcK/nDXpQgxdTuWyfW C1iibbreY7Xuwawsnb4D5i4XN6W42Mm2vAXFmPmH/DCAWM2/HQajXBIbWkwLpze9 F8uPY09pzLrM8Np74h9iU70oWDtWA360xQBoMl7ZbkVt+cT1jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBO4mWJNIjd7H8WzCsH0YouJMnSvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTVlMTllYzQtNWQyNy0z OTM1LTg5MjgtNzFjOTBmNzhkMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6hJ15ci5SA8YySRvwOHtMreccZzwn+91+D1CPD53oEzkxZcuLMeUKn NheG3/KdE5X/zdQCAf13v6fRKLC31lL8giZzF7+tosITtWZACcvWbY4hvrM69wXx I4QGmsRFLsTMuLNnWfpG3mb7SXQFLRU1weoj5pbSlKItwKnSXqr5nE2bnPMl+mrO E2NYxntgMTXXEwKIdPulIDO8LiON16tmGWjZXbt+oDZ7jhD4RXn2CLJMXaKWGsqR wPAJDoHjKRbPdeAb6HXHUhmJ786EEp9CD9aXy5M5Poy7J5Bgwunvm5JIwkRnpkrX KBZyiKUg40AcBI80eR5Lh5UpsMn8McU= -----END CERTIFICATE-----Generated at Tue Jul 1 09:16:04 2025 by rpki-client