$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0722c62d-81d2-3e55-afbb-1a92a0bc8c6b.roa File: 0722c62d-81d2-3e55-afbb-1a92a0bc8c6b.roa (raw, json) Hash identifier: buwYszZFTOe8tsV0PJgRJFOUHV+dofCbhIB+Selo4uI= Subject key identifier: BD:67:DC:91:69:22:15:81:04:D1:D9:02:6A:EA:81:EC:86:33:7D:DB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849CE9A3315E53E5D736A762780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0722c62d-81d2-3e55-afbb-1a92a0bc8c6b.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 7029 IP address blocks: 173.187.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:33:15:e5:3e:5d:73:6a:76:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=b3a25e25-c6b6-4878-9f80-e999b9d08e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:97:df:a3:f5:c9:2e:f7:9f:d1:ab:a4:3e:e2: f3:43:7a:35:0e:49:16:2c:f7:4c:68:29:16:19:55: 1a:9e:5e:6d:d5:e9:3b:98:b1:27:37:34:be:0b:62: 97:a6:24:8f:36:71:94:1f:c2:f4:f3:76:eb:8f:49: 61:c5:30:22:f7:eb:14:0b:0d:b6:d1:45:ce:5f:4c: 5d:d8:5e:2e:ea:98:85:ae:0f:94:72:46:24:e7:63: 87:8b:ee:54:56:5a:b4:0f:ff:86:18:12:7a:2d:8a: 49:f3:12:5e:de:0e:e5:5d:27:b4:65:6e:08:f4:8d: 70:e5:9c:9f:81:ce:47:e3:38:c4:7c:0f:ba:d5:18: 94:c8:44:de:9f:f5:73:81:5b:33:e1:42:03:c0:7e: 9a:29:a5:ce:1c:fa:aa:e3:2a:72:2e:ea:9d:c6:2e: f5:49:f1:22:b8:0b:9c:ea:f7:3a:29:83:0b:fc:3d: d1:f1:94:74:9a:3f:88:af:1b:b9:8e:d8:6f:11:3a: f6:f0:ee:77:b9:09:16:43:ad:e8:e8:79:48:3d:24: e9:38:87:1b:35:c1:fb:8a:e3:fe:bb:4a:c5:ba:c1: 04:66:d3:94:b9:80:92:3b:59:4f:ca:c7:9b:b2:83: 3a:5b:11:4f:a6:00:be:23:4b:87:0b:f9:bf:f4:da: 48:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:67:DC:91:69:22:15:81:04:D1:D9:02:6A:EA:81:EC:86:33:7D:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0722c62d-81d2-3e55-afbb-1a92a0bc8c6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:3b:5d:97:5d:d7:34:7a:c1:21:cb:c2:d9:0a:0c:4d:5f:f0: 8b:4d:de:35:dc:a1:1f:0e:5f:12:e3:31:fb:cd:8f:00:f5:87: 0b:e7:c8:d0:61:26:34:33:f2:c4:b6:22:1e:7c:d5:c8:2e:e6: cc:46:c5:69:0f:bd:c1:b2:9e:01:80:1e:ec:62:06:30:cb:1f: 11:b8:d4:45:d0:58:ed:62:c6:3b:ff:f9:e0:1b:11:da:92:4f: 15:4d:3c:ea:57:d9:53:2e:c0:67:91:20:7a:c2:f7:38:eb:e8: 57:a6:7a:7f:84:48:26:33:28:68:62:55:5a:e9:82:58:65:c4: 57:d8:94:9d:83:5e:c4:47:c2:4f:0f:35:9e:10:2c:27:7b:24: 47:58:4c:09:f8:fe:ff:b9:3c:48:91:12:96:7e:15:13:34:9a: cb:4b:6b:31:58:09:71:65:78:0a:2f:81:e2:1f:b5:93:c9:d7: 81:93:62:e3:7f:c3:d9:07:13:ea:8d:28:9c:0a:cd:c8:c0:e6: f3:dd:13:71:d1:d2:49:3e:72:c7:b3:c4:86:32:a6:fa:34:79: 6e:6f:2b:50:e9:a4:89:09:36:86:42:d5:21:53:e1:ad:41:a4: 27:31:94:bc:90:41:a7:6a:57:a7:86:1d:ab:d4:79:fc:ab:fc: cc:fe:e1:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmjMV5T5dc2p2J4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk YjNhMjVlMjUtYzZiNi00ODc4LTlmODAtZTk5OWI5ZDA4ZTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpffo/XJLvef0aukPuLzQ3o1DkkWLPdMaCkW GVUanl5t1ek7mLEnNzS+C2KXpiSPNnGUH8L083brj0lhxTAi9+sUCw220UXOX0xd 2F4u6piFrg+UckYk52OHi+5UVlq0D/+GGBJ6LYpJ8xJe3g7lXSe0ZW4I9I1w5Zyf gc5H4zjEfA+61RiUyETen/VzgVsz4UIDwH6aKaXOHPqq4ypyLuqdxi71SfEiuAuc 6vc6KYML/D3R8ZR0mj+Irxu5jthvETr28O53uQkWQ63o6HlIPSTpOIcbNcH7iuP+ u0rFusEEZtOUuYCSO1lPysebsoM6WxFPpgC+I0uHC/m/9NpItQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1n3JFpIhWBBNHZAmrqgeyGM33bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDcyMmM2MmQtODFkMi0z ZTU1LWFmYmItMWE5MmEwYmM4YzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbt0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIc7XZdd1zR6wSHLwtkKDE1f8ItN3jXcoR8OXxLjMfvNjwD1hwvnyNBh JjQz8sS2Ih581cgu5sxGxWkPvcGyngGAHuxiBjDLHxG41EXQWO1ixjv/+eAbEdqS TxVNPOpX2VMuwGeRIHrC9zjr6Femen+ESCYzKGhiVVrpglhlxFfYlJ2DXsRHwk8P NZ4QLCd7JEdYTAn4/v+5PEiREpZ+FRM0mstLazFYCXFleAovgeIftZPJ14GTYuN/ w9kHE+qNKJwKzcjA5vPdE3HR0kk+csezxIYypvo0eW5vK1DppIkJNoZC1SFT4a1B pCcxlLyQQadqV6eGHavUefyr/Mz+4Q8= -----END CERTIFICATE-----Generated at Sun Jun 15 11:41:50 2025 by rpki-client