$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c828da5-1267-35f9-8fb4-cc0366b86208.roa File: 5c828da5-1267-35f9-8fb4-cc0366b86208.roa (raw, json) Hash identifier: 9Fa7cKsvP0rOvMqEAcxJkQMeTlRQ+ReAnnVHW8ISFf0= Subject key identifier: C0:3A:55:41:D0:25:22:33:4F:8A:D8:C4:68:68:F6:3A:F7:86:2D:66 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E60689A9A27B78CE4B4F400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c828da5-1267-35f9-8fb4-cc0366b86208.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 173.191.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:68:9a:9a:27:b7:8c:e4:b4:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=ccfc57c2-2dd4-44ea-942e-72d286bc10d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:69:74:33:25:4d:ad:70:c8:02:b8:58:40:d0: 37:31:c7:bd:13:bd:ba:8d:71:9c:c6:3a:76:48:51: 59:55:aa:bd:31:03:4e:92:05:34:c7:17:67:b8:06: 84:46:51:db:01:88:c7:67:2c:d8:1b:37:93:ce:98: 5f:03:ce:21:37:62:4d:80:67:a6:a5:b9:f4:3a:b4: 3a:29:95:08:ef:f8:83:0c:fe:a0:c6:76:84:c0:bf: f5:72:4f:a1:00:66:6d:61:a1:15:ca:f9:c9:32:8f: df:b3:c0:52:42:10:31:38:44:94:3d:a2:3c:2b:ab: 79:99:41:af:7e:9c:08:2a:8c:98:6f:f6:98:92:fd: 42:73:4e:f0:27:e1:a5:9d:28:d0:63:d0:3e:f7:60: 10:ea:71:4e:47:e0:e7:9a:c3:bd:f1:cc:7b:05:cb: 91:27:b3:be:6d:55:c7:26:8f:73:cf:db:d3:dd:3c: 8a:17:48:43:c0:92:b1:65:20:89:9e:2b:21:dc:d5: 69:be:f9:82:c8:12:a3:cc:14:56:c4:d9:09:97:86: 31:a0:a7:21:d4:13:1c:79:5f:6c:54:1a:2d:e3:58: 12:a5:fb:91:b9:64:d3:37:e1:67:53:10:fb:8a:32: ea:64:8d:9b:4c:b4:37:7b:3c:38:4b:16:e6:b8:11: ff:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:3A:55:41:D0:25:22:33:4F:8A:D8:C4:68:68:F6:3A:F7:86:2D:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c828da5-1267-35f9-8fb4-cc0366b86208.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:16:80:43:ab:05:ab:59:e4:97:be:48:c5:3f:96:25:5f:9d: 2f:03:7e:27:36:39:23:b8:84:68:ee:57:5c:97:56:3d:a1:24: b7:53:1d:ae:c3:9a:25:28:6f:a9:f5:df:c7:7b:28:01:79:4d: 5f:24:eb:fe:33:71:3b:a4:46:f0:9c:aa:2d:d1:0d:3c:75:a4: 4a:41:9b:d9:b6:7e:c7:96:95:a2:cb:e3:5e:82:04:46:ed:e1: 88:ea:6c:77:5f:08:71:0d:b9:67:cb:f4:ff:48:0c:72:66:73: 32:e5:f9:71:65:41:ab:15:aa:6c:68:d1:2f:7d:16:e3:75:ee: 02:84:cc:b9:fd:6d:4f:14:b8:7d:1a:47:07:a5:ef:0a:96:f5: fc:6a:94:77:76:0d:fc:f9:97:ed:7a:46:42:09:b8:a0:6c:de: 1d:c7:be:51:ac:5c:4a:64:3e:ab:25:25:4b:47:a0:0e:2a:57: b9:d8:8e:01:d8:de:07:da:a1:92:37:44:ff:f7:85:4a:06:9f: af:f1:44:01:52:df:f8:5d:52:74:0b:dd:ec:c0:e4:0e:87:4a: 77:ee:aa:fc:77:1a:af:81:4d:90:5c:2d:d1:d2:a4:2f:3f:a4: ea:af:a6:e2:07:4b:37:fc:8a:35:39:ca:1e:ae:97:91:83:1b: 51:9d:cb:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYGiamie3jOS09AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk Y2NmYzU3YzItMmRkNC00NGVhLTk0MmUtNzJkMjg2YmMxMGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGl0MyVNrXDIArhYQNA3Mce9E726jXGcxjp2 SFFZVaq9MQNOkgU0xxdnuAaERlHbAYjHZyzYGzeTzphfA84hN2JNgGempbn0OrQ6 KZUI7/iDDP6gxnaEwL/1ck+hAGZtYaEVyvnJMo/fs8BSQhAxOESUPaI8K6t5mUGv fpwIKoyYb/aYkv1Cc07wJ+GlnSjQY9A+92AQ6nFOR+DnmsO98cx7BcuRJ7O+bVXH Jo9zz9vT3TyKF0hDwJKxZSCJnish3NVpvvmCyBKjzBRWxNkJl4YxoKch1BMceV9s VBot41gSpfuRuWTTN+FnUxD7ijLqZI2bTLQ3ezw4SxbmuBH/BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMA6VUHQJSIzT4rYxGho9jr3hi1mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWM4MjhkYTUtMTI2Ny0z NWY5LThmYjQtY2MwMzY2Yjg2MjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb+SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYWgEOrBatZ5Je+SMU/liVfnS8Dfic2OSO4hGjuV1yXVj2hJLdTHa7D miUob6n138d7KAF5TV8k6/4zcTukRvCcqi3RDTx1pEpBm9m2fseWlaLL416CBEbt 4YjqbHdfCHENuWfL9P9IDHJmczLl+XFlQasVqmxo0S99FuN17gKEzLn9bU8UuH0a Rwel7wqW9fxqlHd2Dfz5l+16RkIJuKBs3h3HvlGsXEpkPqslJUtHoA4qV7nYjgHY 3gfaoZI3RP/3hUoGn6/xRAFS3/hdUnQL3ezA5A6HSnfuqvx3Gq+BTZBcLdHSpC8/ pOqvpuIHSzf8ijU5yh6ul5GDG1Gdy4g= -----END CERTIFICATE-----Generated at Wed Aug 6 05:24:52 2025 by rpki-client