$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1de2955a-2d09-31d2-89d1-1e9f05fa16fe.roa File: 1de2955a-2d09-31d2-89d1-1e9f05fa16fe.roa (raw, json) Hash identifier: 0ErzXoPIyXjIl5tPfJdNFlqlfFaMv57ZomLYMRwx0ac= Subject key identifier: 22:73:5F:B7:D6:27:13:76:7B:FD:5D:F0:24:C6:63:BE:66:9C:6B:70 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A1A0B793BB78697D52080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1de2955a-2d09-31d2-89d1-1e9f05fa16fe.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 173.187.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:1a:0b:79:3b:b7:86:97:d5:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=b089266e-2e4f-474c-b5e8-82c2d724f212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:48:59:66:b9:19:ba:7e:90:9a:d1:c3:48:97: fe:5c:83:5b:f6:48:96:12:39:09:1f:1b:4a:3a:ce: 7c:35:0b:a4:a3:69:3f:21:9f:1f:58:cb:53:7f:06: 88:a2:f1:47:b5:53:ca:8a:00:73:79:4e:f1:d6:d5: ca:96:44:e9:93:dd:2a:91:64:09:54:70:e3:44:59: a5:53:16:4c:94:9b:ea:ed:c4:32:9e:e3:7a:7d:aa: 4d:4a:39:98:0d:0f:46:4b:38:94:01:64:1c:20:6d: 3f:88:6c:16:a9:eb:78:a8:89:c7:fe:5f:c3:35:76: 5e:85:e4:14:0b:0b:f7:c3:87:43:35:a1:6e:2a:de: 2e:2f:45:de:98:fc:27:07:b0:ec:98:bb:1b:8c:e0: 38:34:2a:ee:39:90:28:96:0b:50:f6:c2:c3:e9:36: 43:cd:71:0f:23:84:11:d5:4b:68:fc:74:e6:29:4d: 00:a1:da:2a:1d:61:60:2c:7f:1e:86:38:70:3f:2e: 3d:b7:c0:8c:ab:7b:4f:1c:b0:40:7b:52:e6:61:5f: 73:f1:06:28:46:cf:dc:3a:f6:de:22:a3:ab:63:f1: a9:e1:c2:4f:88:f0:28:83:e4:74:ad:39:ed:60:db: 22:ff:af:46:23:01:ab:f1:db:8b:2e:cc:02:20:66: ed:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:73:5F:B7:D6:27:13:76:7B:FD:5D:F0:24:C6:63:BE:66:9C:6B:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1de2955a-2d09-31d2-89d1-1e9f05fa16fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:ba:f2:f9:2c:56:2a:82:c6:75:49:27:d5:0c:1c:96:60:e0: 9e:2d:bd:e5:00:48:0d:28:4f:42:09:31:ec:46:98:60:e3:4e: 30:56:23:d3:ef:af:be:f1:5c:0f:dc:42:b1:21:be:57:60:98: 2d:95:d4:31:30:f4:52:a3:b9:5c:a1:75:3c:3d:31:0f:a9:ef: da:c0:d0:7b:b5:9f:7e:c9:1f:90:36:70:35:32:04:16:09:9f: e2:6d:21:65:46:f8:b3:19:bf:a8:83:cc:86:6a:ca:81:04:e7: 91:dc:2f:b3:58:47:ad:22:2e:5e:e4:07:ae:a7:a1:16:ae:0d: 7f:6c:40:21:66:bc:d4:e8:f0:c6:86:83:60:df:af:c0:94:f1: 14:bb:42:6c:e3:dc:3e:31:27:59:98:1d:ce:d9:25:58:84:c6: 32:3b:88:fe:79:83:30:fd:d7:35:65:c5:74:13:d2:43:e0:8a: a4:5f:e9:7d:ce:40:52:a6:9d:84:eb:53:6d:a3:4c:ad:1f:69: 90:40:cd:db:1a:fc:c1:35:6e:92:2a:85:26:b3:df:51:a3:7d: a1:f6:60:9f:6d:d2:63:9a:3c:7b:b2:08:d9:cb:fd:83:f4:e4: 95:22:67:35:cc:15:d0:a1:e0:a9:c5:85:cc:6a:9b:06:22:a1: 93:6f:89:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhoLeTu3hpfVIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk YjA4OTI2NmUtMmU0Zi00NzRjLWI1ZTgtODJjMmQ3MjRmMjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUhZZrkZun6QmtHDSJf+XINb9kiWEjkJHxtK Os58NQuko2k/IZ8fWMtTfwaIovFHtVPKigBzeU7x1tXKlkTpk90qkWQJVHDjRFml UxZMlJvq7cQynuN6fapNSjmYDQ9GSziUAWQcIG0/iGwWqet4qInH/l/DNXZeheQU Cwv3w4dDNaFuKt4uL0XemPwnB7DsmLsbjOA4NCruOZAolgtQ9sLD6TZDzXEPI4QR 1Uto/HTmKU0AodoqHWFgLH8ehjhwPy49t8CMq3tPHLBAe1LmYV9z8QYoRs/cOvbe IqOrY/Gp4cJPiPAog+R0rTntYNsi/69GIwGr8duLLswCIGbtdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJzX7fWJxN2e/1d8CTGY75mnGtwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWRlMjk1NWEtMmQwOS0z MWQyLTg5ZDEtMWU5ZjA1ZmExNmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbvIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFy68vksViqCxnVJJ9UMHJZg4J4tveUASA0oT0IJMexGmGDjTjBWI9Pv r77xXA/cQrEhvldgmC2V1DEw9FKjuVyhdTw9MQ+p79rA0Hu1n37JH5A2cDUyBBYJ n+JtIWVG+LMZv6iDzIZqyoEE55HcL7NYR60iLl7kB66noRauDX9sQCFmvNTo8MaG g2Dfr8CU8RS7Qmzj3D4xJ1mYHc7ZJViExjI7iP55gzD91zVlxXQT0kPgiqRf6X3O QFKmnYTrU22jTK0faZBAzdsa/ME1bpIqhSaz31GjfaH2YJ9t0mOaPHuyCNnL/YP0 5JUiZzXMFdCh4KnFhcxqmwYioZNvif0= -----END CERTIFICATE-----Generated at Sun Jun 15 11:41:47 2025 by rpki-client