$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64f7c3b3-99f4-3d27-a8d9-0162ba6ae154.roa File: 64f7c3b3-99f4-3d27-a8d9-0162ba6ae154.roa (raw, json) Hash identifier: TYTWpVUrxnz/asBANorTtnnsH821pqwN6K8ElXnlR9s= Subject key identifier: 4A:48:34:66:DA:2A:DD:80:34:6C:A8:EC:33:2E:23:E2:27:7C:2B:23 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D1658684A246628CF5FB4C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64f7c3b3-99f4-3d27-a8d9-0162ba6ae154.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 7029 IP address blocks: 173.190.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:86:84:a2:46:62:8c:f5:fb:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=4fc4222b-9ebc-456c-bd50-8c3f8d3bb571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bb:d9:e1:20:e1:26:95:9a:60:a3:5e:28:ba: 5d:20:c1:2e:a7:38:cc:30:94:f0:b0:80:64:9a:84: 7f:ea:4e:22:c3:ff:26:2b:d3:29:31:f5:d9:af:6a: a7:ea:08:ad:84:29:28:ea:54:a6:19:c3:dd:15:23: c6:54:a1:52:fa:59:82:51:75:77:30:ca:9d:3d:f9: 53:bb:9f:2e:60:7a:e3:59:fb:0f:01:83:9b:eb:a2: fa:8a:29:78:a7:7f:1a:b4:d2:bc:53:fb:43:40:5c: 32:c0:1f:2d:a9:70:9a:22:e2:bf:7c:7a:54:83:f2: ce:c2:df:85:35:d7:38:e7:15:7d:15:2b:b8:71:05: 88:8d:3d:83:e8:0f:0e:d3:b6:e4:e7:7c:80:de:44: 4b:96:0b:30:8f:15:7b:29:3a:78:44:fc:f4:a4:55: e9:5e:ac:94:22:f4:fb:67:c1:21:f1:c1:fe:4f:a5: e6:43:88:c3:60:18:15:b8:a7:72:0f:69:f6:aa:eb: d5:fa:28:21:76:cf:91:77:43:2d:6d:aa:ba:41:14: 53:46:42:8b:53:9c:15:c4:df:73:5e:fc:cb:30:6f: 23:2c:f3:dc:03:1c:a6:57:ca:c8:e0:17:7c:1e:4a: 36:3f:aa:55:2a:e5:16:e8:d9:86:23:d3:af:0d:c7: 88:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:48:34:66:DA:2A:DD:80:34:6C:A8:EC:33:2E:23:E2:27:7C:2B:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64f7c3b3-99f4-3d27-a8d9-0162ba6ae154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:41:2c:b6:81:63:e9:91:3e:17:fb:81:70:cf:2f:89:58:65: b5:03:7f:03:0b:14:67:ca:6b:f5:77:41:3f:83:11:b3:5a:09: 81:60:f4:47:cb:d8:8b:0a:b4:51:76:3c:fa:d2:d7:6f:c0:78: 1c:b3:7c:2c:e8:3d:67:0c:f6:42:8a:de:a8:fc:9a:12:15:5f: cb:76:cd:96:e0:9a:cc:ac:7d:9f:f7:86:27:90:df:d1:17:61: 81:41:58:7c:85:84:5a:03:2f:26:06:e6:34:84:1f:57:df:08: e0:97:c5:e1:21:6a:37:d3:96:fd:56:d7:d6:7a:c6:f3:93:cd: 7d:36:19:c5:2d:c3:0e:04:f7:1e:02:94:20:e7:3a:00:d5:b6: a9:ca:66:fa:b4:51:92:f8:14:78:0e:21:ad:5f:23:af:30:cb: e9:11:26:e7:aa:9a:96:b0:22:bc:0e:f9:c2:ee:26:24:f2:4c: 21:28:66:35:5a:0b:a4:66:6e:f8:8e:65:d2:83:f5:b7:87:84: 86:8b:dc:92:3e:35:86:cb:e3:4c:6f:b7:bf:ce:1b:67:53:77: a4:86:96:02:4b:a4:f5:89:15:ae:2d:df:d3:cb:b9:74:0e:3e: 0d:4e:b2:60:39:32:a1:56:98:e9:ff:50:fb:51:ab:99:50:c1: 4e:5e:93:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZYaEokZijPX7TAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk NGZjNDIyMmItOWViYy00NTZjLWJkNTAtOGMzZjhkM2JiNTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprvZ4SDhJpWaYKNeKLpdIMEupzjMMJTwsIBk moR/6k4iw/8mK9MpMfXZr2qn6githCko6lSmGcPdFSPGVKFS+lmCUXV3MMqdPflT u58uYHrjWfsPAYOb66L6iil4p38atNK8U/tDQFwywB8tqXCaIuK/fHpUg/LOwt+F Ndc45xV9FSu4cQWIjT2D6A8O07bk53yA3kRLlgswjxV7KTp4RPz0pFXpXqyUIvT7 Z8Eh8cH+T6XmQ4jDYBgVuKdyD2n2quvV+ighds+Rd0Mtbaq6QRRTRkKLU5wVxN9z XvzLMG8jLPPcAxymV8rI4Bd8Hko2P6pVKuUW6NmGI9OvDceIHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpINGbaKt2ANGyo7DMuI+InfCsjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjRmN2MzYjMtOTlmNC0z ZDI3LWE4ZDktMDE2MmJhNmFlMTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErb4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFBLLaBY+mRPhf7gXDPL4lYZbUDfwMLFGfKa/V3QT+DEbNaCYFg9EfL 2IsKtFF2PPrS12/AeByzfCzoPWcM9kKK3qj8mhIVX8t2zZbgmsysfZ/3hieQ39EX YYFBWHyFhFoDLyYG5jSEH1ffCOCXxeEhajfTlv1W19Z6xvOTzX02GcUtww4E9x4C lCDnOgDVtqnKZvq0UZL4FHgOIa1fI68wy+kRJueqmpawIrwO+cLuJiTyTCEoZjVa C6RmbviOZdKD9beHhIaL3JI+NYbL40xvt7/OG2dTd6SGlgJLpPWJFa4t39PLuXQO Pg1OsmA5MqFWmOn/UPtRq5lQwU5ek+Q= -----END CERTIFICATE-----Generated at Sun Jun 15 12:34:48 2025 by rpki-client