$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/071fe070-3f07-3acc-a49f-b95d8e1f3979.roa File: 071fe070-3f07-3acc-a49f-b95d8e1f3979.roa (raw, json) Hash identifier: 48AEYR3pZ+6AYgrpt+QUT1/lXPIqq2NYrPjgfDuXUXo= Subject key identifier: 9D:57:72:BA:24:5A:80:95:2E:BF:46:17:19:9C:79:D7:E5:24:07:0B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B9AA0CAB4012885878DD55C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/071fe070-3f07-3acc-a49f-b95d8e1f3979.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 173.185.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:0c:ab:40:12:88:58:78:dd:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=8630095f-2d8f-4fce-b40e-f3c8d526fe61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a8:76:5d:03:ff:bd:cb:11:95:32:13:0c:4c: 81:08:d3:f9:73:b7:ca:32:ff:8b:a7:78:af:cf:47: 5f:36:df:5f:4c:0e:74:d9:f5:7a:ce:03:81:b1:67: ed:30:95:10:8f:6f:4c:33:12:36:e0:ce:09:f2:7f: ab:72:d6:29:fb:02:20:a0:8a:57:32:06:27:99:83: 76:3a:fb:40:e3:8f:61:ac:bb:16:a4:d4:27:e8:b3: 6e:3d:8f:57:b3:52:b5:13:08:14:df:da:64:40:08: 22:33:98:31:f1:75:4b:09:aa:75:cd:45:ca:3c:11: 2b:5e:54:17:f4:59:45:77:bb:ff:6a:92:d1:cc:80: 30:91:c1:d4:5f:bc:64:d5:aa:d2:af:89:65:39:6d: 16:3d:0c:f6:e7:e8:e0:36:07:4d:1b:ef:41:f7:f8: e2:a0:74:97:20:b5:49:c9:94:b1:95:7d:31:68:7d: 35:6b:70:70:45:79:7e:2d:6b:a9:31:56:36:4c:c8: 31:e2:07:cc:6a:89:98:ec:d8:ff:11:68:c6:3b:04: ee:1e:7f:3a:ad:40:1f:d4:ce:a8:f1:a7:93:4c:7f: bb:b2:63:84:d6:8a:93:a0:c3:04:ae:c4:57:86:14: 18:ef:89:ef:77:69:c3:a3:34:c7:0a:01:9f:1d:59: 82:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:57:72:BA:24:5A:80:95:2E:BF:46:17:19:9C:79:D7:E5:24:07:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/071fe070-3f07-3acc-a49f-b95d8e1f3979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:62:d7:d2:12:79:31:71:d1:07:b4:08:bb:df:a3:e4:a6:e3: e2:c9:3b:1a:75:e0:77:5a:42:e4:4d:c7:c0:fd:12:c2:30:6f: e9:88:a5:2b:9f:64:d1:b6:b1:4e:0d:a0:1d:e1:39:a7:de:9e: 5b:93:37:54:ed:4d:33:4e:f1:55:86:88:6c:90:96:60:f5:c3: dc:b8:48:6b:93:ef:5b:40:60:95:24:12:08:fe:44:f3:2d:2f: c2:c4:6a:6e:f9:aa:d5:13:b9:b3:a1:e5:e5:c7:13:d0:3b:af: 58:ab:2d:69:8f:38:01:34:6e:b9:62:53:a0:f2:7c:ec:ff:e9: c6:9f:9e:42:1c:df:9b:68:09:b0:0d:b0:d1:4e:d3:9f:17:19: ef:41:42:d4:67:a9:3a:25:5d:fc:57:c9:7d:82:95:3b:97:45: a5:fc:7a:08:a3:49:8e:5a:64:71:4f:5f:24:05:2e:c8:65:06: f7:61:ba:01:69:11:61:03:a5:a1:23:58:80:ba:ba:41:33:5f: fe:b7:8c:e1:7a:87:fd:f9:dd:55:8e:dc:74:e9:df:bf:88:39: 44:9f:71:72:f9:18:7d:52:02:d1:6f:32:ed:9f:9a:45:57:10: 07:67:f7:b2:ad:2e:75:62:3b:8d:6b:86:2b:32:71:a3:81:b2: 5d:b6:7a:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgyrQBKIWHjdVcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk ODYzMDA5NWYtMmQ4Zi00ZmNlLWI0MGUtZjNjOGQ1MjZmZTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Kh2XQP/vcsRlTITDEyBCNP5c7fKMv+Lp3iv z0dfNt9fTA502fV6zgOBsWftMJUQj29MMxI24M4J8n+rctYp+wIgoIpXMgYnmYN2 OvtA449hrLsWpNQn6LNuPY9Xs1K1EwgU39pkQAgiM5gx8XVLCap1zUXKPBErXlQX 9FlFd7v/apLRzIAwkcHUX7xk1arSr4llOW0WPQz25+jgNgdNG+9B9/jioHSXILVJ yZSxlX0xaH01a3BwRXl+LWupMVY2TMgx4gfMaomY7Nj/EWjGOwTuHn86rUAf1M6o 8aeTTH+7smOE1oqToMMErsRXhhQY74nvd2nDozTHCgGfHVmCUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1XcrokWoCVLr9GFxmcedflJAcLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDcxZmUwNzAtM2YwNy0z YWNjLWE0OWYtYjk1ZDhlMWYzOTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBi19ISeTFx0Qe0CLvfo+Sm4+LJOxp14HdaQuRNx8D9EsIwb+mIpSuf ZNG2sU4NoB3hOafenluTN1TtTTNO8VWGiGyQlmD1w9y4SGuT71tAYJUkEgj+RPMt L8LEam75qtUTubOh5eXHE9A7r1irLWmPOAE0brliU6DyfOz/6cafnkIc35toCbAN sNFO058XGe9BQtRnqTolXfxXyX2ClTuXRaX8egijSY5aZHFPXyQFLshlBvdhugFp EWEDpaEjWIC6ukEzX/63jOF6h/353VWO3HTp37+IOUSfcXL5GH1SAtFvMu2fmkVX EAdn97KtLnViO41rhisycaOBsl22emg= -----END CERTIFICATE-----Generated at Sun Jun 15 11:44:06 2025 by rpki-client