$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37011cf7-93bf-3f24-a66a-48d124c2519a.roa File: 37011cf7-93bf-3f24-a66a-48d124c2519a.roa (raw, json) Hash identifier: 3iVI7eLsTd0KeCUcc/qI7r87fBbipW+dN5k0bqtdJpQ= Subject key identifier: 37:40:24:BD:F0:A1:0B:9E:AD:F4:69:28:38:8E:B0:83:59:EA:BB:1C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D1654BEF5E07E7D12ED3A4C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37011cf7-93bf-3f24-a66a-48d124c2519a.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 7029 IP address blocks: 173.187.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:4b:ef:5e:07:e7:d1:2e:d3:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=f935fabb-392e-474f-b2d2-0780b4d4ea45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2d:b3:9d:a9:f5:71:41:dc:29:bf:a9:ac:3e: fa:ad:e2:56:2c:3a:a4:bb:c3:42:cb:cd:ff:e5:20: a8:a3:ba:40:63:aa:f2:c8:59:44:f8:21:99:cc:28: 6c:27:0b:d6:c9:9c:ef:cd:05:8c:6e:04:db:4f:44: 28:21:29:3b:70:90:6c:78:74:5d:28:36:e7:85:b3: d4:50:0d:76:f1:ce:92:1d:21:58:91:cc:75:6d:0c: 78:b6:7e:76:4e:73:75:34:7a:2b:1a:2f:3e:e5:b2: 26:f1:c2:0a:f5:64:70:5b:32:eb:47:73:cd:9a:a0: 52:82:52:b0:6b:0d:66:1a:9a:b9:c8:23:54:85:56: b0:96:2e:c8:72:5b:46:d9:62:3a:5f:a4:f2:d8:ab: 58:8f:88:76:f6:65:49:ea:24:63:ae:c4:99:cc:3c: 88:ce:7d:8e:0c:c6:de:96:a9:ce:f7:9b:51:26:de: 09:a0:05:46:bd:c1:fa:72:9a:1e:22:8c:d1:1f:43: 25:f2:f7:1d:80:1b:03:a8:04:63:3f:5a:f7:e9:4d: e4:ff:c7:5c:b2:e0:98:3a:69:e2:89:ca:16:3c:4a: fc:0b:04:c6:b8:72:aa:d9:eb:8b:85:ea:fc:b5:dc: af:2d:25:03:45:6e:c6:2e:3d:0c:02:79:a8:ef:da: 80:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:40:24:BD:F0:A1:0B:9E:AD:F4:69:28:38:8E:B0:83:59:EA:BB:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37011cf7-93bf-3f24-a66a-48d124c2519a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:2a:01:a8:22:02:f1:a8:49:24:73:ce:3e:dd:95:4d:b0:e8: e9:bf:b7:82:68:d5:54:a3:c7:d6:de:07:07:25:92:f8:4b:37: fd:08:96:72:fb:f0:41:6c:f4:5a:2b:93:c8:9b:1d:0f:3b:33: 42:6a:56:c4:d5:ea:ea:ec:63:d8:bd:77:06:d9:e9:b3:5b:3f: 24:0c:1c:df:82:cc:87:70:b5:85:a8:23:99:39:af:3d:d7:da: 49:10:9d:ec:77:44:ca:fb:48:1f:0d:c0:e7:9e:95:a2:1c:07: 49:72:b8:16:fb:cc:42:62:d5:32:bb:00:8f:b8:b5:75:94:58: 72:57:e5:f0:07:35:f3:e5:88:19:33:f8:c8:22:59:b4:32:61: 28:a0:2d:1e:33:15:04:29:84:87:ad:ec:e2:23:8c:24:67:39: c1:bd:e8:49:af:a8:d9:73:9c:80:49:ee:9b:0f:be:94:8e:19: 40:75:78:74:5d:28:34:c9:c1:f8:18:1b:d7:0f:54:3e:ca:84: 3a:5e:3e:52:98:55:5e:2a:c3:bb:8c:87:cb:f6:c9:ba:4b:65: 30:1a:6c:45:e7:cf:96:b2:8f:6a:a4:d6:db:1d:c5:56:88:64: d6:82:15:2d:3d:33:c5:e2:fd:6b:eb:b1:dd:ae:71:39:ce:74: b7:f4:5e:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZUvvXgfn0S7TpMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk ZjkzNWZhYmItMzkyZS00NzRmLWIyZDItMDc4MGI0ZDRlYTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS2znan1cUHcKb+prD76reJWLDqku8NCy83/ 5SCoo7pAY6ryyFlE+CGZzChsJwvWyZzvzQWMbgTbT0QoISk7cJBseHRdKDbnhbPU UA128c6SHSFYkcx1bQx4tn52TnN1NHorGi8+5bIm8cIK9WRwWzLrR3PNmqBSglKw aw1mGpq5yCNUhVawli7IcltG2WI6X6Ty2KtYj4h29mVJ6iRjrsSZzDyIzn2ODMbe lqnO95tRJt4JoAVGvcH6cpoeIozRH0Ml8vcdgBsDqARjP1r36U3k/8dcsuCYOmni icoWPEr8CwTGuHKq2euLher8tdyvLSUDRW7GLj0MAnmo79qA2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdAJL3woQuerfRpKDiOsINZ6rscMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzcwMTFjZjctOTNiZi0z ZjI0LWE2NmEtNDhkMTI0YzI1MTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUqAagiAvGoSSRzzj7dlU2w6Om/t4Jo1VSjx9beBwclkvhLN/0IlnL7 8EFs9Fork8ibHQ87M0JqVsTV6ursY9i9dwbZ6bNbPyQMHN+CzIdwtYWoI5k5rz3X 2kkQnex3RMr7SB8NwOeelaIcB0lyuBb7zEJi1TK7AI+4tXWUWHJX5fAHNfPliBkz +MgiWbQyYSigLR4zFQQphIet7OIjjCRnOcG96EmvqNlznIBJ7psPvpSOGUB1eHRd KDTJwfgYG9cPVD7KhDpePlKYVV4qw7uMh8v2ybpLZTAabEXnz5ayj2qk1tsdxVaI ZNaCFS09M8Xi/Wvrsd2ucTnOdLf0Xno= -----END CERTIFICATE-----Generated at Sun Jun 15 13:08:14 2025 by rpki-client