$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/789fd90b-0242-3510-a897-d82a8d84d6e7.roa File: 789fd90b-0242-3510-a897-d82a8d84d6e7.roa (raw, json) Hash identifier: UD93tERa7s/6958TtNyjOD6bCkFV/MS9yyOBImZOi3c= Subject key identifier: 49:FE:2B:42:1F:F0:9D:1E:A4:22:5E:4B:60:F6:D6:BD:A1:77:32:75 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A13D12B75CD3C746F6340 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/789fd90b-0242-3510-a897-d82a8d84d6e7.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 173.185.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:13:d1:2b:75:cd:3c:74:6f:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=a38cc9c2-1021-4486-a537-cf3867707ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:59:e2:d2:45:92:6a:57:73:69:99:50:d3:b9: 48:3a:ec:7e:5d:5c:61:91:dc:d4:fd:3b:ac:a3:07: 6e:5d:2d:d7:06:d0:7c:2c:85:8a:2c:52:f1:20:c5: 5c:e9:d1:5c:81:f4:6b:33:5e:0c:c7:bc:6d:03:c4: cb:76:70:c0:25:3c:83:71:93:fd:5d:69:5f:86:48: cc:5a:fc:db:9f:2e:24:6f:ea:20:32:75:f7:28:3d: 48:ca:d0:91:e3:ec:55:f3:6a:bc:b4:8b:26:5f:dd: 15:10:a1:1a:21:8e:2c:69:09:42:08:69:03:98:c9: fc:e4:eb:e2:bd:69:1f:02:22:65:b1:ab:83:46:32: 5c:bb:e9:73:ec:31:f5:1a:86:ad:92:97:2a:45:c5: 4c:79:85:08:70:52:a4:ba:a2:0c:1c:bd:77:66:53: cd:f6:14:b1:5a:58:2e:f9:2c:f7:03:a3:8f:90:f5: 23:95:a6:5e:83:f2:32:28:fe:9d:82:f6:70:3b:c0: e7:fe:87:29:67:98:ab:b6:55:0a:cd:42:c7:35:d7: 85:64:85:fa:9c:cf:f0:15:bb:a5:85:06:ac:62:db: e2:52:c3:b1:b0:70:ce:4e:8f:01:f7:15:25:c6:cf: 61:bf:3f:74:fc:60:4e:15:f0:d5:bb:c5:fb:ce:03: 8f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FE:2B:42:1F:F0:9D:1E:A4:22:5E:4B:60:F6:D6:BD:A1:77:32:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/789fd90b-0242-3510-a897-d82a8d84d6e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:56:91:08:8c:7c:a4:d1:c8:5e:e0:0f:03:93:e9:5b:3d:68: f3:eb:8d:b4:1a:82:c3:ea:a9:7f:24:22:f1:da:f1:a3:d5:c4: 94:3c:53:df:82:94:50:80:c3:10:56:74:86:b0:d2:16:96:d3: d0:ab:29:87:d1:ce:76:f7:c3:99:f4:34:db:a0:dd:c4:09:77: 0b:d8:b3:d6:f2:19:06:a7:e4:5f:d7:ef:85:30:b3:7f:c0:b7: cb:ba:bd:f4:70:86:25:ba:ca:93:29:09:1e:d9:28:2b:91:c8: 25:20:de:27:c4:70:f4:06:34:9f:7f:d2:b8:ef:83:15:a9:6d: 14:19:55:ab:d3:de:03:9a:68:6a:d1:27:92:a3:1d:9b:27:c1: 3b:9a:e5:11:69:72:a9:af:83:48:1b:af:c2:2e:8b:14:e9:b7: 70:35:9d:5a:2b:25:56:24:2f:11:3c:72:6d:63:05:6f:06:39: a0:de:ea:91:34:73:a4:30:db:a6:57:c3:37:7b:a8:e9:08:fb: 35:ce:70:e0:23:c5:9c:0a:69:1f:9f:51:cb:59:ea:1c:67:4e: 56:02:8e:e9:62:a7:1a:db:ef:86:21:50:e4:dd:4b:21:17:e8: 9f:c9:34:80:68:1c:fc:cb:76:dd:11:29:f7:03:44:98:b1:f6: cf:f5:8e:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhPRK3XNPHRvY0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk YTM4Y2M5YzItMTAyMS00NDg2LWE1MzctY2YzODY3NzA3ZWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVni0kWSaldzaZlQ07lIOux+XVxhkdzU/Tus owduXS3XBtB8LIWKLFLxIMVc6dFcgfRrM14Mx7xtA8TLdnDAJTyDcZP9XWlfhkjM Wvzbny4kb+ogMnX3KD1IytCR4+xV82q8tIsmX90VEKEaIY4saQlCCGkDmMn85Ovi vWkfAiJlsauDRjJcu+lz7DH1GoatkpcqRcVMeYUIcFKkuqIMHL13ZlPN9hSxWlgu +Sz3A6OPkPUjlaZeg/IyKP6dgvZwO8Dn/ocpZ5irtlUKzULHNdeFZIX6nM/wFbul hQasYtviUsOxsHDOTo8B9xUlxs9hvz90/GBOFfDVu8X7zgOPBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEn+K0If8J0epCJeS2D21r2hdzJ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzg5ZmQ5MGItMDI0Mi0z NTEwLWE4OTctZDgyYThkODRkNmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbloMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpWkQiMfKTRyF7gDwOT6Vs9aPPrjbQagsPqqX8kIvHa8aPVxJQ8U9+C lFCAwxBWdIaw0haW09CrKYfRznb3w5n0NNug3cQJdwvYs9byGQan5F/X74Uws3/A t8u6vfRwhiW6ypMpCR7ZKCuRyCUg3ifEcPQGNJ9/0rjvgxWpbRQZVavT3gOaaGrR J5KjHZsnwTua5RFpcqmvg0gbr8IuixTpt3A1nVorJVYkLxE8cm1jBW8GOaDe6pE0 c6Qw26ZXwzd7qOkI+zXOcOAjxZwKaR+fUctZ6hxnTlYCjulipxrb74YhUOTdSyEX 6J/JNIBoHPzLdt0RKfcDRJix9s/1juA= -----END CERTIFICATE-----Generated at Mon Jun 16 02:22:52 2025 by rpki-client