$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5db1942c-5cb2-39e9-aaae-55c8bb7e49b3.roa File: 5db1942c-5cb2-39e9-aaae-55c8bb7e49b3.roa (raw, json) Hash identifier: 89WlzL99g6T5i7iLFU2SzQ4GM1LAT4aHc9IFLobXIAU= Subject key identifier: 25:5D:80:55:D9:36:B1:2D:B1:33:80:E8:E3:D4:8C:62:74:75:B0:70 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A7E7B9F80790FF372DEA520C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5db1942c-5cb2-39e9-aaae-55c8bb7e49b3.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 173.188.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:9f:80:79:0f:f3:72:de:a5:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=67702bd9-5613-4410-b2fb-69ebd9da1359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:32:a0:a1:06:38:7c:ae:2f:9c:51:7c:fe:ff: 1a:3f:ca:24:6a:79:2d:7d:f5:e8:78:0a:ee:74:f1: f1:c5:ce:58:b9:84:2e:87:2b:22:69:c0:14:22:63: a4:60:6b:ec:a2:13:57:6e:7e:69:e4:2e:d7:7b:72: 56:54:89:ea:9c:1b:ad:6a:e4:96:d3:82:01:d1:4f: 08:fc:5c:c1:7d:f6:1a:dc:5f:e6:15:8a:67:9a:ef: 5b:fc:86:84:0f:a6:85:98:27:8e:fc:fc:d4:8b:6c: 3d:5d:a6:d8:fe:e6:cf:34:26:e6:72:1b:0c:b3:b0: c0:28:ff:95:41:d7:e1:1f:86:f5:57:f7:9f:90:b5: ec:5c:58:24:2b:28:f4:e8:03:9d:db:f8:9a:b9:42: d2:f8:a1:11:3c:11:85:e9:11:0c:5e:a9:af:b2:35: b9:03:5a:ed:34:f7:fa:13:7e:3f:bc:69:97:ae:39: dc:a6:ef:b6:7f:17:c1:3d:57:2e:73:7e:4a:12:52: c1:43:b1:83:95:c0:0e:6b:90:a4:3e:16:66:d4:92: 53:3a:66:c5:8c:3e:c1:bd:1a:50:3f:1d:07:e7:23: 1a:e5:db:20:3b:0e:97:15:f3:c0:3b:6a:3d:c0:d1: 70:ef:c2:78:c8:5e:1e:14:ab:50:cd:89:d9:88:35: d9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:5D:80:55:D9:36:B1:2D:B1:33:80:E8:E3:D4:8C:62:74:75:B0:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5db1942c-5cb2-39e9-aaae-55c8bb7e49b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:66:d8:12:01:31:0f:6e:73:df:18:04:29:0c:49:e3:83:e1: 6a:74:d5:7c:36:69:eb:ce:0c:7e:74:99:49:85:df:81:ba:0b: af:b4:ab:0e:b3:08:21:fc:f4:26:e5:8d:65:8c:f7:87:0f:b9: 7f:8a:83:e5:39:4d:a5:50:97:ae:8d:37:a1:a6:ad:71:7f:81: 5f:fc:4c:e1:fb:1f:2c:cc:f2:0a:29:4e:85:bd:84:60:ac:17: cd:e0:ff:5d:0b:fd:1b:d1:3d:89:7b:a6:c9:d3:53:18:e2:c8: 9a:bc:67:b7:ca:c3:fb:6c:b1:5e:a8:21:bc:2c:41:35:47:4a: 3a:2b:11:30:07:d3:2c:fe:19:19:1d:35:6d:46:3d:16:04:a5: 03:c6:e9:a9:91:01:aa:56:fe:cf:8d:a0:09:17:19:bc:24:0f: 64:53:fa:ba:54:64:ae:0d:5b:63:76:c1:60:af:dc:9f:6d:5c: 66:ab:41:48:b4:9a:18:60:e6:62:29:ad:31:16:0a:c6:d6:b4: 6d:0e:af:e2:05:33:0b:84:25:62:60:52:f7:97:39:76:35:00: 19:7d:23:5f:5e:cd:59:6d:90:5a:fd:f0:2d:f6:7b:10:3e:4d: dd:f2:2f:f4:3c:d4:05:5c:8c:d4:a0:fb:aa:fa:fd:9d:d1:f8: 25:23:af:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5+AeQ/zct6lIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk Njc3MDJiZDktNTYxMy00NDEwLWIyZmItNjllYmQ5ZGExMzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzKgoQY4fK4vnFF8/v8aP8okanktffXoeAru dPHxxc5YuYQuhysiacAUImOkYGvsohNXbn5p5C7Xe3JWVInqnButauSW04IB0U8I /FzBffYa3F/mFYpnmu9b/IaED6aFmCeO/PzUi2w9XabY/ubPNCbmchsMs7DAKP+V QdfhH4b1V/efkLXsXFgkKyj06AOd2/iauULS+KERPBGF6REMXqmvsjW5A1rtNPf6 E34/vGmXrjncpu+2fxfBPVcuc35KElLBQ7GDlcAOa5CkPhZm1JJTOmbFjD7BvRpQ Px0H5yMa5dsgOw6XFfPAO2o9wNFw78J4yF4eFKtQzYnZiDXZYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVdgFXZNrEtsTOA6OPUjGJ0dbBwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWRiMTk0MmMtNWNiMi0z OWU5LWFhYWUtNTVjOGJiN2U0OWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtm2BIBMQ9uc98YBCkMSeOD4Wp01Xw2aevODH50mUmF34G6C6+0qw6z CCH89CbljWWM94cPuX+Kg+U5TaVQl66NN6GmrXF/gV/8TOH7HyzM8gopToW9hGCs F83g/10L/RvRPYl7psnTUxjiyJq8Z7fKw/tssV6oIbwsQTVHSjorETAH0yz+GRkd NW1GPRYEpQPG6amRAapW/s+NoAkXGbwkD2RT+rpUZK4NW2N2wWCv3J9tXGarQUi0 mhhg5mIprTEWCsbWtG0Or+IFMwuEJWJgUveXOXY1ABl9I19ezVltkFr98C32exA+ Td3yL/Q81AVcjNSg+6r6/Z3R+CUjrww= -----END CERTIFICATE-----Generated at Mon Aug 4 22:27:26 2025 by rpki-client