$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/207c7919-0890-33d1-8bed-b4b3f71de305.roa File: 207c7919-0890-33d1-8bed-b4b3f71de305.roa (raw, json) Hash identifier: Me/gnkrMFVz3wuVj8BXOoPq5/FrCsxXK+k4nGkh4GDU= Subject key identifier: 77:93:ED:B8:70:05:26:16:54:A5:AE:2F:54:3C:00:65:CF:8F:09:51 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A35E593210020CF27875B8F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/207c7919-0890-33d1-8bed-b4b3f71de305.roa Signing time: Mon 16 Jun 2025 13:01:03 +0000 ROA not before: Mon 16 Jun 2025 13:01:03 +0000 ROA not after: Sun 14 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 173.185.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:35:e5:93:21:00:20:cf:27:87:5b:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 16 13:01:03 2025 GMT Not After : Sep 14 13:01:03 2025 GMT Subject: CN=512f2e53-85e3-44ae-8ff8-95cdfdc63e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:11:2d:e2:fb:7f:54:3b:5b:76:03:04:3e:69: 8f:ce:d8:d7:2c:8b:60:54:28:47:36:0a:78:a1:ed: 60:8b:bb:50:92:95:81:89:de:a6:23:2e:ea:94:1a: cc:e0:54:cd:8b:83:96:57:94:60:a4:15:aa:d3:7c: e7:6c:cd:a0:1b:14:c6:0a:41:14:20:24:87:48:de: e5:4b:89:69:4f:75:67:e5:48:10:59:d7:cf:41:2b: d0:b4:f5:8c:60:d1:c3:ae:2f:8b:e2:28:85:59:66: 6e:80:b9:4e:eb:52:ca:2c:81:ae:96:43:ea:72:44: 29:f1:8c:03:36:39:d9:68:b1:e5:a8:48:52:4e:54: 5d:8d:f9:1e:3b:19:46:e7:1a:f4:9b:5d:d6:ee:74: 57:ca:10:37:b2:f6:b3:4b:4c:95:a8:2c:2b:0c:e9: 9d:ce:d4:b6:d1:b3:ed:d1:c2:5d:41:05:02:89:82: dd:be:b2:67:4f:43:6f:94:63:d8:10:8d:45:bf:eb: 14:55:0e:2c:b2:af:11:1a:49:15:9c:80:82:12:29: 31:81:d3:30:3f:5f:61:89:04:81:a5:c0:bc:6a:47: 00:14:b3:7b:0c:bb:db:01:8a:75:1e:38:20:17:2b: 1a:56:26:5b:66:e3:64:03:3b:6e:88:2c:64:8e:25: 49:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:93:ED:B8:70:05:26:16:54:A5:AE:2F:54:3C:00:65:CF:8F:09:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/207c7919-0890-33d1-8bed-b4b3f71de305.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:c2:da:7a:a3:7e:4d:ff:ef:ea:bc:9e:4b:f3:6a:c5:45:fc: 75:39:3e:79:33:48:81:4a:cb:34:ed:2c:91:0c:e6:e0:f1:44: 68:4c:af:c8:da:7c:c3:36:7c:82:f8:a7:cc:5a:70:75:45:92: 15:83:37:e0:69:e7:60:5b:59:7d:df:f1:f3:f6:49:8f:65:96: 6a:73:e2:12:53:14:c7:a2:c6:42:32:49:a6:fd:18:25:1f:99: 72:da:f8:23:2c:ca:c8:ba:94:ca:8d:4d:52:f6:b7:3d:b5:29: 77:ae:b9:b4:ec:6d:75:26:65:c8:6a:e2:ab:9b:b2:8e:6c:ee: b7:48:75:4e:35:b3:7e:a1:1f:e5:76:c3:b3:46:54:7c:e1:b6: 26:0f:2e:66:81:83:cd:ac:43:9d:fa:87:f1:03:1f:f1:51:d4: 29:34:a2:2c:07:fb:46:22:2e:f8:5d:cf:f1:f3:c2:f9:15:38: f5:cd:7a:e4:d5:8d:9e:cf:a8:08:bf:0d:24:48:76:54:46:b8: 82:6c:02:4f:81:bc:70:55:b0:a5:54:07:b7:7b:10:45:c0:f4: 42:c0:18:d7:56:f8:21:21:b4:67:5a:01:ee:5d:97:e5:4e:79: ea:dc:ae:d3:04:d5:ab:2e:ba:9c:e0:29:74:6f:0e:a4:bf:fd: 6c:15:9b:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo15ZMhACDPJ4dbj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYxNjEzMDEwM1oXDTI1MDkxNDEzMDEwM1owLzEtMCsGA1UEAxMk NTEyZjJlNTMtODVlMy00NGFlLThmZjgtOTVjZGZkYzYzZTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBEt4vt/VDtbdgMEPmmPztjXLItgVChHNgp4 oe1gi7tQkpWBid6mIy7qlBrM4FTNi4OWV5RgpBWq03znbM2gGxTGCkEUICSHSN7l S4lpT3Vn5UgQWdfPQSvQtPWMYNHDri+L4iiFWWZugLlO61LKLIGulkPqckQp8YwD NjnZaLHlqEhSTlRdjfkeOxlG5xr0m13W7nRXyhA3svazS0yVqCwrDOmdztS20bPt 0cJdQQUCiYLdvrJnT0NvlGPYEI1Fv+sUVQ4ssq8RGkkVnICCEikxgdMwP19hiQSB pcC8akcAFLN7DLvbAYp1HjggFysaViZbZuNkAztuiCxkjiVJgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHeT7bhwBSYWVKWuL1Q8AGXPjwlRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjA3Yzc5MTktMDg5MC0z M2QxLThiZWQtYjRiM2Y3MWRlMzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErblQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDC2nqjfk3/7+q8nkvzasVF/HU5PnkzSIFKyzTtLJEM5uDxRGhMr8ja fMM2fIL4p8xacHVFkhWDN+Bp52BbWX3f8fP2SY9llmpz4hJTFMeixkIySab9GCUf mXLa+CMsysi6lMqNTVL2tz21KXeuubTsbXUmZchq4qubso5s7rdIdU41s36hH+V2 w7NGVHzhtiYPLmaBg82sQ536h/EDH/FR1Ck0oiwH+0YiLvhdz/HzwvkVOPXNeuTV jZ7PqAi/DSRIdlRGuIJsAk+BvHBVsKVUB7d7EEXA9ELAGNdW+CEhtGdaAe5dl+VO eercrtME1asuupzgKXRvDqS//WwVm+U= -----END CERTIFICATE-----Generated at Wed Jun 18 01:16:45 2025 by rpki-client