$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2765b7d9-24f7-34f7-879c-3d7364c034cd.roa File: 2765b7d9-24f7-34f7-879c-3d7364c034cd.roa (raw, json) Hash identifier: Iny8njztbE2gBplM0pu3mTnsmpRcs9V8pz6M/jPkfww= Subject key identifier: 0D:D6:09:89:9F:76:81:A5:E8:CC:60:BA:B8:6C:85:BC:41:24:5B:44 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA8BBB9B43720B8661DC00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2765b7d9-24f7-34f7-879c-3d7364c034cd.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 173.189.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:8b:bb:9b:43:72:0b:86:61:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=fdb7a2fe-3ae3-46db-9ff9-ddd84ec638cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dd:b0:a7:32:bc:9a:b2:c0:d9:ed:6b:b1:3e: 9f:9e:0a:63:fe:39:12:62:07:f6:86:5e:d4:85:94: f1:9e:cb:3b:f9:11:5d:a8:15:d9:77:aa:27:12:fa: cc:5b:0e:89:c8:1b:26:3f:b5:f8:44:72:2f:b7:cd: 1e:ee:17:0a:04:53:ee:6d:b0:40:97:fe:68:70:d2: ee:7b:4a:5b:e1:98:7b:ac:bb:3a:ca:d4:fe:06:90: 58:cc:8a:77:be:73:67:00:3f:a5:f8:c9:25:9a:55: f7:74:ff:77:80:5b:b3:40:6f:f4:d4:9c:16:75:e8: 44:72:60:98:59:3f:c2:76:93:9e:12:af:a4:17:65: 99:6e:9f:10:87:9a:82:ba:71:f1:be:6b:75:a4:19: 45:e9:4d:da:76:92:44:fd:12:ac:e2:f3:02:ba:6a: 0c:d8:bf:c0:cb:c1:7c:04:c2:d8:54:d7:d0:8c:33: 53:c3:9a:fa:3a:8a:5f:e3:21:d4:d8:b6:cb:89:97: d3:26:01:af:3c:cb:9e:cf:dc:e0:e4:5d:c9:17:be: 65:fc:ac:f3:16:b5:45:f3:22:80:f7:34:53:78:78: 58:a0:a2:20:45:50:8d:9f:4d:98:2d:98:63:35:33: ef:c9:31:0e:52:f4:19:6e:1d:67:2f:cd:94:2f:b8: ba:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D6:09:89:9F:76:81:A5:E8:CC:60:BA:B8:6C:85:BC:41:24:5B:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2765b7d9-24f7-34f7-879c-3d7364c034cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:2d:7a:18:27:2a:a5:6b:f4:72:17:79:17:89:b6:07:84:bd: 1d:83:41:28:be:9a:68:32:4c:7c:8d:eb:70:34:e3:85:8a:9b: a6:16:8b:d6:0f:66:d7:b8:a3:26:c9:33:99:b8:74:9c:db:01: 6b:e3:38:0a:99:dd:16:05:9b:c1:34:fd:9e:80:b6:80:40:63: 9b:44:86:8c:bd:03:a6:71:79:c3:00:cc:9e:e8:a6:a4:b1:48: 41:96:16:6f:74:81:87:87:c1:1a:2c:ec:43:34:bc:11:6f:15: 0c:82:53:ff:5d:fa:92:dd:c3:59:b7:97:81:b9:8a:b5:b4:d8: c1:1e:c0:de:b3:10:c6:5d:f7:46:9f:e5:c9:d9:c5:6a:f3:ed: 0e:a6:62:97:24:b2:61:69:77:b2:72:cc:1d:31:b1:a5:ae:16: 97:a6:ed:e9:2b:43:f6:a4:2d:8c:c9:91:9d:90:d6:9c:98:93: 3b:66:73:eb:da:6d:66:44:45:78:4e:7d:bc:82:f9:87:eb:b2: d3:ac:d3:e3:ed:df:de:6f:97:cc:a7:a7:d9:7a:bf:46:c7:c6: f0:c8:08:98:9d:c1:c3:c3:4d:ed:03:6b:63:27:5d:b9:e4:0d: 65:2b:60:67:3f:45:d7:8b:80:91:65:7e:a6:14:5e:94:47:dd: c1:46:b1:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qou7m0NyC4Zh3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk ZmRiN2EyZmUtM2FlMy00NmRiLTlmZjktZGRkODRlYzYzOGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt2wpzK8mrLA2e1rsT6fngpj/jkSYgf2hl7U hZTxnss7+RFdqBXZd6onEvrMWw6JyBsmP7X4RHIvt80e7hcKBFPubbBAl/5ocNLu e0pb4Zh7rLs6ytT+BpBYzIp3vnNnAD+l+MklmlX3dP93gFuzQG/01JwWdehEcmCY WT/CdpOeEq+kF2WZbp8Qh5qCunHxvmt1pBlF6U3adpJE/RKs4vMCumoM2L/Ay8F8 BMLYVNfQjDNTw5r6Oopf4yHU2LbLiZfTJgGvPMuez9zg5F3JF75l/KzzFrVF8yKA 9zRTeHhYoKIgRVCNn02YLZhjNTPvyTEOUvQZbh1nL82UL7i6RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3WCYmfdoGl6MxgurhshbxBJFtEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjc2NWI3ZDktMjRmNy0z NGY3LTg3OWMtM2Q3MzY0YzAzNGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQtehgnKqVr9HIXeReJtgeEvR2DQSi+mmgyTHyN63A044WKm6YWi9YP Zte4oybJM5m4dJzbAWvjOAqZ3RYFm8E0/Z6AtoBAY5tEhoy9A6ZxecMAzJ7opqSx SEGWFm90gYeHwRos7EM0vBFvFQyCU/9d+pLdw1m3l4G5irW02MEewN6zEMZd90af 5cnZxWrz7Q6mYpcksmFpd7JyzB0xsaWuFpem7ekrQ/akLYzJkZ2Q1pyYkztmc+va bWZERXhOfbyC+YfrstOs0+Pt395vl8ynp9l6v0bHxvDICJidwcPDTe0Da2MnXbnk DWUrYGc/RdeLgJFlfqYUXpRH3cFGsZQ= -----END CERTIFICATE-----Generated at Sun Jun 15 11:26:13 2025 by rpki-client