$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5296b952-e20a-395e-87fb-f67bf024bf41.roa File: 5296b952-e20a-395e-87fb-f67bf024bf41.roa (raw, json) Hash identifier: V1puXNvyqPYqYKrzPHFzE44rsgLpIKpFLg9enDaCzws= Subject key identifier: 44:69:C2:05:0D:F2:B6:57:19:6D:44:C9:C7:FC:90:BE:E4:D8:84:65 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E60697B8A4C744FAE305980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5296b952-e20a-395e-87fb-f67bf024bf41.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 173.186.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:69:7b:8a:4c:74:4f:ae:30:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=6e7899c8-5b5d-4280-a0a1-7d4f33aa9d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3e:bd:09:f6:ca:01:95:7e:8f:83:bd:d8:87: f7:f9:c2:96:b1:cf:95:1d:57:39:81:b1:b6:ec:4a: d0:14:07:03:f7:45:24:a6:c0:7a:dd:71:a3:09:44: b5:10:07:46:ec:a4:a9:38:cc:25:f3:b1:8d:f5:9a: 88:d1:08:55:ce:7a:98:f2:8c:eb:32:f4:3e:66:b6: 77:1f:b8:c1:a7:70:be:96:8b:ac:a8:13:b3:a4:5e: 34:84:90:23:98:8d:43:7c:f8:cc:57:47:95:43:82: 94:35:02:01:a8:09:22:38:da:0e:31:9f:da:6e:fd: b9:12:56:db:e8:69:97:ca:cf:91:26:89:9e:75:7f: 0a:2e:88:a0:b5:6e:89:92:b5:60:7c:8f:06:a1:47: 4f:d6:0c:0f:d2:66:95:36:bb:7a:a5:b1:31:92:82: d1:f4:0f:fc:d3:31:63:ce:29:9e:25:e3:46:4e:2b: e4:8d:60:cf:ef:54:24:40:01:e4:df:90:8e:df:68: 7c:88:d0:fb:b8:41:b3:1d:43:ee:2a:3e:ba:cf:f1: 48:da:ff:33:31:79:e5:b2:4a:a2:d3:2f:68:77:16: 00:96:76:ca:5b:87:f5:1c:41:1c:eb:dd:7e:50:b1: 2c:4b:73:6f:91:f5:34:f1:81:8b:e7:4e:8b:c2:9e: ff:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:69:C2:05:0D:F2:B6:57:19:6D:44:C9:C7:FC:90:BE:E4:D8:84:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5296b952-e20a-395e-87fb-f67bf024bf41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:82:6d:9b:28:be:10:15:b6:b2:f1:65:eb:e5:7b:08:dc:13: 7b:7a:95:a7:01:5a:13:61:4a:12:d6:71:fb:f0:51:2f:29:83: 2a:52:eb:20:af:d8:e5:55:fc:5b:e5:f3:78:9a:74:7d:50:4d: 10:d0:13:e4:07:cf:3c:63:42:e0:17:14:f6:22:a3:5a:22:26: d0:74:f8:05:07:84:4d:75:aa:1b:0b:31:0b:01:45:5b:1c:82: ef:8d:9a:fa:01:6e:df:b5:5d:4a:f5:94:ac:ba:34:28:f2:e1: ca:17:54:83:ae:94:eb:6a:28:b0:8d:85:91:37:14:49:98:f0: 4a:b9:86:7a:72:e9:70:ae:3d:54:bd:83:31:55:01:e5:55:b0: 20:58:f5:59:72:55:6c:17:a2:05:86:3e:d3:d9:29:7b:b6:13: 06:2e:fd:c9:ca:e9:10:73:13:5d:11:8c:04:7a:ac:68:fe:4c: e5:fa:f3:62:68:d2:0a:5f:0e:1c:c3:df:74:62:15:fe:31:ce: 83:77:81:6b:22:19:78:b3:fb:45:c5:aa:1d:8c:ab:1c:a0:60: 50:ae:2b:5e:64:cb:04:7e:e2:df:87:36:8a:52:87:3e:6a:f3: d5:68:bf:d8:b6:8f:7d:31:07:28:d0:0a:cb:5b:ff:e9:c7:25: 1e:12:c8:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYGl7ikx0T64wWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk NmU3ODk5YzgtNWI1ZC00MjgwLWEwYTEtN2Q0ZjMzYWE5ZDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj69CfbKAZV+j4O92If3+cKWsc+VHVc5gbG2 7ErQFAcD90UkpsB63XGjCUS1EAdG7KSpOMwl87GN9ZqI0QhVznqY8ozrMvQ+ZrZ3 H7jBp3C+lousqBOzpF40hJAjmI1DfPjMV0eVQ4KUNQIBqAkiONoOMZ/abv25Elbb 6GmXys+RJomedX8KLoigtW6JkrVgfI8GoUdP1gwP0maVNrt6pbExkoLR9A/80zFj zimeJeNGTivkjWDP71QkQAHk35CO32h8iND7uEGzHUPuKj66z/FI2v8zMXnlskqi 0y9odxYAlnbKW4f1HEEc691+ULEsS3NvkfU08YGL506Lwp7/4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERpwgUN8rZXGW1Eycf8kL7k2IRlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTI5NmI5NTItZTIwYS0z OTVlLTg3ZmItZjY3YmYwMjRiZjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbrYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2CbZsovhAVtrLxZevlewjcE3t6lacBWhNhShLWcfvwUS8pgypS6yCv 2OVV/Fvl83iadH1QTRDQE+QHzzxjQuAXFPYio1oiJtB0+AUHhE11qhsLMQsBRVsc gu+NmvoBbt+1XUr1lKy6NCjy4coXVIOulOtqKLCNhZE3FEmY8Eq5hnpy6XCuPVS9 gzFVAeVVsCBY9VlyVWwXogWGPtPZKXu2EwYu/cnK6RBzE10RjAR6rGj+TOX682Jo 0gpfDhzD33RiFf4xzoN3gWsiGXiz+0XFqh2MqxygYFCuK15kywR+4t+HNopShz5q 89Vov9i2j30xByjQCstb/+nHJR4SyPQ= -----END CERTIFICATE-----Generated at Wed Aug 6 00:42:39 2025 by rpki-client