$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/527cea57-c4b1-379b-8cc5-c6c287dac29b.roa File: 527cea57-c4b1-379b-8cc5-c6c287dac29b.roa (raw, json) Hash identifier: S37vk9PiTHfZBH4KR/5QH9c6iTVFBDDpmP1taPodws4= Subject key identifier: 83:A6:51:1A:F0:17:19:DA:96:99:45:1A:8F:BC:51:07:66:E1:8B:E2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A2C200EC39BD262CB5B545A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/527cea57-c4b1-379b-8cc5-c6c287dac29b.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 7029 IP address blocks: 207.188.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:0e:c3:9b:d2:62:cb:5b:54:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=e49d51d3-4bce-49f5-94f9-efb0b6a1d0bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bd:d7:10:54:dc:18:89:b8:51:6a:ec:7c:42: f9:5d:3d:ad:09:b1:9f:12:18:e7:6a:37:dc:9b:73: 49:42:25:fb:4d:d4:89:1a:73:72:6a:26:8d:51:d7: b6:ce:9e:a2:33:e7:6a:a4:59:ea:f0:ca:2c:a3:07: 72:73:7b:09:ac:73:60:64:ea:79:ac:19:c5:43:e5: f6:06:55:ab:cf:06:60:c5:5b:53:f8:e9:08:36:ec: 8e:da:fc:b5:e1:d5:2b:8f:33:ee:d4:10:e9:ad:b3: bb:61:76:16:67:bc:ed:20:61:7f:cc:ac:b5:a5:da: 92:17:db:1e:cf:9e:8c:63:6c:ce:68:d5:12:a8:6c: f4:50:10:e5:5e:80:f7:34:a6:fb:77:7c:77:c7:5f: 2b:61:72:fb:5d:39:48:27:a5:88:20:60:94:92:03: 1d:dc:98:d6:80:13:a3:5d:3f:da:3e:25:09:8c:8e: 67:d5:bb:70:58:1d:9b:67:12:25:c8:2c:b4:57:14: cc:f9:66:85:e8:e4:3b:e9:f4:14:a7:1f:9a:18:d7: 95:9d:e7:c7:12:13:21:17:50:d9:0c:ba:28:cf:fb: a9:5c:3c:05:64:f5:98:63:f6:53:c6:90:1b:96:8a: 1f:f4:88:29:03:75:52:a6:12:00:83:97:76:ce:57: a1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A6:51:1A:F0:17:19:DA:96:99:45:1A:8F:BC:51:07:66:E1:8B:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/527cea57-c4b1-379b-8cc5-c6c287dac29b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.188.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:f1:03:ff:96:ba:4d:0d:fd:c3:8f:b1:2e:55:bc:f1:c2:56: 75:6a:ac:fc:96:82:e6:a2:13:6b:67:32:21:6e:72:ed:f8:32: 6b:08:2f:f4:b2:02:a3:4e:97:9e:b8:8a:72:e9:8b:9b:94:98: 5b:3b:b5:32:78:11:75:7b:d5:c0:47:4e:5e:97:41:cd:9c:c9: 6b:b8:25:ae:06:bf:07:17:d9:c3:4b:5a:70:fc:c2:88:56:ed: 51:1f:9c:83:b1:aa:63:5c:f5:4b:fd:57:55:21:84:cc:65:78: 0c:f6:eb:c3:fe:0f:81:6e:04:b2:09:8d:36:01:73:2e:a3:d2: 9d:d8:c2:ba:d9:fe:af:04:5a:44:fa:63:ac:95:4d:1a:49:66: c5:e4:4b:72:e4:21:0a:b6:27:e7:c4:15:9c:ef:07:ff:d7:35: 09:7e:18:89:3f:63:d0:06:3f:f0:83:dd:1c:14:41:d6:29:15: a9:ac:47:fc:c2:0e:d8:fe:57:c3:ae:52:3a:ae:88:86:eb:74: 2f:1c:1d:3c:a3:32:d1:6d:20:17:14:32:11:40:62:94:5e:03: 3c:8f:96:8e:c5:2d:30:9f:25:f3:d2:23:28:99:97:69:2e:69: 19:4f:4e:9f:26:9c:67:66:ed:d1:9b:31:b4:9f:8a:ee:e3:08: 76:fe:96:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosIA7Dm9Jiy1tUWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk ZTQ5ZDUxZDMtNGJjZS00OWY1LTk0ZjktZWZiMGI2YTFkMGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb3XEFTcGIm4UWrsfEL5XT2tCbGfEhjnajfc m3NJQiX7TdSJGnNyaiaNUde2zp6iM+dqpFnq8Mosowdyc3sJrHNgZOp5rBnFQ+X2 BlWrzwZgxVtT+OkINuyO2vy14dUrjzPu1BDprbO7YXYWZ7ztIGF/zKy1pdqSF9se z56MY2zOaNUSqGz0UBDlXoD3NKb7d3x3x18rYXL7XTlIJ6WIIGCUkgMd3JjWgBOj XT/aPiUJjI5n1btwWB2bZxIlyCy0VxTM+WaF6OQ76fQUpx+aGNeVnefHEhMhF1DZ DLooz/upXDwFZPWYY/ZTxpAbloof9IgpA3VSphIAg5d2zlehKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOmURrwFxnalplFGo+8UQdm4YviMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTI3Y2VhNTctYzRiMS0z NzliLThjYzUtYzZjMjg3ZGFjMjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz7x1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHxA/+Wuk0N/cOPsS5VvPHCVnVqrPyWguaiE2tnMiFucu34MmsIL/Sy AqNOl564inLpi5uUmFs7tTJ4EXV71cBHTl6XQc2cyWu4Ja4GvwcX2cNLWnD8wohW 7VEfnIOxqmNc9Uv9V1UhhMxleAz268P+D4FuBLIJjTYBcy6j0p3YwrrZ/q8EWkT6 Y6yVTRpJZsXkS3LkIQq2J+fEFZzvB//XNQl+GIk/Y9AGP/CD3RwUQdYpFamsR/zC Dtj+V8OuUjquiIbrdC8cHTyjMtFtIBcUMhFAYpReAzyPlo7FLTCfJfPSIyiZl2ku aRlPTp8mnGdm7dGbMbSfiu7jCHb+lig= -----END CERTIFICATE-----Generated at Sun Jun 15 12:42:34 2025 by rpki-client