$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2cc50ba9-d715-3deb-b0ee-bda4a8ec2b77.roa File: 2cc50ba9-d715-3deb-b0ee-bda4a8ec2b77.roa (raw, json) Hash identifier: uGNP2T5zAfQCmcBILLRLNmPuGW7dl/Hazo3CajXE+B8= Subject key identifier: B5:BD:6D:00:29:D4:77:8B:D5:2E:2A:0F:4F:8A:8D:66:35:52:77:78 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8C70DDA665644094D09B8FA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2cc50ba9-d715-3deb-b0ee-bda4a8ec2b77.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 173.187.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:dd:a6:65:64:40:94:d0:9b:8f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=c5bacf9f-123e-4d86-b2d3-810c1ee7061a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a4:a2:1e:37:52:a6:85:ec:52:ac:dc:c4:65: 68:6a:5b:c7:2f:ca:54:27:f6:a0:ec:a0:af:66:2a: 83:e9:73:6c:46:8c:44:3d:25:82:4a:b7:fe:e1:55: 08:4b:a7:2d:fe:c0:14:32:38:55:68:d8:ed:b0:a4: c3:c4:98:e2:91:c4:e4:ef:f2:17:c0:40:e1:80:49: 67:ef:a8:7e:0c:fe:1f:e5:f7:3c:68:38:e4:70:fa: 9e:a3:02:d6:a9:1f:c1:3d:bd:1f:50:84:a0:2c:ac: e0:68:40:cb:00:60:45:ea:40:f6:ec:be:86:6b:26: d3:ab:d2:b9:2d:2e:55:1c:67:82:0d:be:34:1f:f2: e4:fc:8b:e7:c6:3b:71:5c:c2:78:8d:9c:68:5a:62: ee:b4:2a:9e:a3:06:fb:95:01:43:4a:a2:01:f2:2a: f7:01:2b:48:5b:aa:5a:92:ba:bd:48:13:6b:98:06: 2c:44:8f:a7:67:24:eb:9f:3b:f3:ee:fa:05:13:40: 37:4f:db:47:54:ea:39:ef:5a:05:e2:0a:de:33:db: 3d:cd:09:6b:c1:3e:8b:69:23:4b:85:7e:40:55:d3: 4e:5b:61:55:43:77:f0:a4:51:af:57:9d:f3:81:57: a4:1b:b3:22:66:cd:82:e5:68:ba:ca:4a:13:a4:5b: 30:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BD:6D:00:29:D4:77:8B:D5:2E:2A:0F:4F:8A:8D:66:35:52:77:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2cc50ba9-d715-3deb-b0ee-bda4a8ec2b77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:32:09:e1:9b:98:7a:77:f7:3e:e5:3e:9e:87:19:96:5d:f2: b3:82:82:e8:08:f2:6d:e6:bd:80:4d:a1:f4:08:dd:3f:99:ca: 06:2f:61:e9:db:5f:b6:69:ad:0a:b6:2e:41:82:29:03:42:49: df:4a:37:10:5f:f9:3b:b7:8c:fe:5a:fa:17:2b:0c:aa:7c:61: 5b:ee:21:bb:18:6a:94:0e:da:01:46:04:90:86:34:6a:cb:a2: 83:cf:b8:fc:d7:3c:52:1b:0f:f8:48:2f:eb:b2:e2:22:b4:ca: c0:fc:38:86:e9:9b:87:e8:24:65:eb:14:ce:c0:ae:af:62:c5: fb:9b:4c:e6:d4:ee:71:6f:f0:cf:b1:80:e8:92:85:2b:79:5c: 2b:03:6a:19:fc:9e:14:be:1d:76:7a:7d:fa:7b:68:05:40:f4: 42:15:de:9a:4d:85:f0:77:b4:dd:55:58:eb:5c:02:b3:27:6f: b8:0e:92:dd:ec:41:05:24:04:27:9a:f7:58:db:83:40:61:aa: ef:29:d5:53:39:a6:90:c0:a1:40:8f:8a:6a:22:c4:1e:d3:f4: 09:75:ff:cd:e8:1b:ab:ae:21:37:3e:12:83:09:bd:db:f5:1e: 7f:1a:08:4d:54:2f:f3:fc:b0:0f:b2:7b:a7:03:62:5e:74:76: c2:8a:6c:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcN2mZWRAlNCbj6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk YzViYWNmOWYtMTIzZS00ZDg2LWIyZDMtODEwYzFlZTcwNjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqSiHjdSpoXsUqzcxGVoalvHL8pUJ/ag7KCv ZiqD6XNsRoxEPSWCSrf+4VUIS6ct/sAUMjhVaNjtsKTDxJjikcTk7/IXwEDhgEln 76h+DP4f5fc8aDjkcPqeowLWqR/BPb0fUISgLKzgaEDLAGBF6kD27L6GaybTq9K5 LS5VHGeCDb40H/Lk/IvnxjtxXMJ4jZxoWmLutCqeowb7lQFDSqIB8ir3AStIW6pa krq9SBNrmAYsRI+nZyTrnzvz7voFE0A3T9tHVOo571oF4greM9s9zQlrwT6LaSNL hX5AVdNOW2FVQ3fwpFGvV53zgVekG7MiZs2C5Wi6ykoTpFswJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLW9bQAp1HeL1S4qD0+KjWY1Und4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmNjNTBiYTktZDcxNS0z ZGViLWIwZWUtYmRhNGE4ZWMyYjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbtQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcyCeGbmHp39z7lPp6HGZZd8rOCgugI8m3mvYBNofQI3T+ZygYvYenb X7ZprQq2LkGCKQNCSd9KNxBf+Tu3jP5a+hcrDKp8YVvuIbsYapQO2gFGBJCGNGrL ooPPuPzXPFIbD/hIL+uy4iK0ysD8OIbpm4foJGXrFM7Arq9ixfubTObU7nFv8M+x gOiShSt5XCsDahn8nhS+HXZ6ffp7aAVA9EIV3ppNhfB3tN1VWOtcArMnb7gOkt3s QQUkBCea91jbg0Bhqu8p1VM5ppDAoUCPimoixB7T9Al1/83oG6uuITc+EoMJvdv1 Hn8aCE1UL/P8sA+ye6cDYl50dsKKbI0= -----END CERTIFICATE-----Generated at Tue Aug 5 20:13:24 2025 by rpki-client