$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/810a915d-1f99-3fb4-b020-a6a8f0fd67b4.roa File: 810a915d-1f99-3fb4-b020-a6a8f0fd67b4.roa (raw, json) Hash identifier: V0tKqlaYyihwcKOcF5c7UX5ioQoL+rE59XS/uAfu758= Subject key identifier: 8E:93:38:D9:F2:13:A4:8E:BD:27:B5:4E:56:43:CE:89:7D:02:15:CE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3FA15171C68F947DAA80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/810a915d-1f99-3fb4-b020-a6a8f0fd67b4.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 173.184.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3f:a1:51:71:c6:8f:94:7d:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=15fa9d9c-d7ae-4335-aa94-ab054f77922f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:47:7a:28:72:2a:14:a1:78:52:9a:fd:55:c8: 0e:58:e5:5c:21:c9:34:93:9e:74:a9:cc:9d:38:78: e4:ce:57:f9:74:52:cb:b4:43:c0:ca:90:5c:e4:0f: 12:21:a0:63:27:74:02:9c:d8:2d:9d:c0:66:2f:fa: 26:e7:d7:e7:9e:0b:05:0e:78:af:f5:df:f8:03:77: e8:09:ef:f3:da:f2:19:7a:c0:49:9e:b5:07:59:b4: c8:00:71:d1:86:7f:67:fd:e0:47:96:98:9f:ac:7b: 73:df:54:ce:88:fd:34:9a:62:5e:06:cc:5b:36:97: 66:25:87:d4:07:1d:a6:dd:41:42:b4:c1:ba:cb:ae: 0d:32:dc:91:19:c9:b2:32:8d:17:94:3d:09:b7:76: 9e:43:7b:f6:46:a1:0d:f1:66:f1:ba:a3:b4:18:32: a9:7a:ac:b5:11:e7:ce:d0:e7:07:51:cc:e1:51:55: 0f:ff:9f:0c:e5:a2:e0:ab:df:e9:4c:46:2f:ad:38: 83:b9:df:d1:08:3d:02:af:45:ed:73:05:bb:67:67: db:52:e7:c5:75:5c:3f:54:c6:41:c4:b3:2c:5b:c9: 05:74:b4:4c:22:e5:f4:49:b6:81:62:88:e9:67:78: 65:6a:71:64:a1:4c:eb:ea:5a:66:3c:89:97:54:e2: 2f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:93:38:D9:F2:13:A4:8E:BD:27:B5:4E:56:43:CE:89:7D:02:15:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/810a915d-1f99-3fb4-b020-a6a8f0fd67b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.184.0.0/13 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:da:c5:c8:ec:24:44:db:9b:24:2a:00:6a:bd:88:8a:9b:36: e4:6b:2d:51:06:c8:a2:60:0b:97:08:0f:72:6e:73:a1:06:03: 33:fe:0d:bd:bf:f3:89:c6:17:66:8a:6e:91:c8:f2:b8:6d:d8: 81:d1:ab:ae:2f:84:e6:a8:75:8f:7c:17:8f:89:69:44:68:55: 9e:49:d9:12:38:14:da:52:3c:68:a0:87:bd:bf:a7:0f:e5:41: 31:d6:45:44:0e:63:6c:f9:49:90:ce:98:14:2e:00:ac:ec:25: 1e:1c:b0:d7:2a:db:1f:46:49:02:16:41:35:87:87:1f:b1:88: 3a:06:8a:b5:4c:a4:a3:7f:ed:41:b2:5c:91:13:8b:ea:45:ed: ed:72:5e:af:f9:83:9b:f9:84:ee:67:f9:7b:fa:ac:d7:54:19: 04:ca:01:22:92:5c:ec:a5:0d:b7:3a:e5:64:2d:18:e7:75:15: 45:16:d9:ee:a7:11:b2:1b:9f:e7:36:af:15:66:bc:de:aa:b1: 85:f4:b3:38:ef:4a:a1:8b:8d:bb:0e:47:b2:e2:b0:dd:cb:c0: 02:1f:cd:ab:3b:44:bf:ba:c5:08:08:47:df:94:70:60:41:0b: 8e:fc:f8:6e:78:82:38:e1:57:ef:27:2c:73:fa:73:7f:0b:a4: 24:75:48:3f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmxSj+hUXHGj5R9qoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MTVmYTlkOWMtZDdhZS00MzM1LWFhOTQtYWIwNTRmNzc5MjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkd6KHIqFKF4Upr9VcgOWOVcIck0k550qcyd OHjkzlf5dFLLtEPAypBc5A8SIaBjJ3QCnNgtncBmL/om59fnngsFDniv9d/4A3fo Ce/z2vIZesBJnrUHWbTIAHHRhn9n/eBHlpifrHtz31TOiP00mmJeBsxbNpdmJYfU Bx2m3UFCtMG6y64NMtyRGcmyMo0XlD0Jt3aeQ3v2RqEN8WbxuqO0GDKpeqy1EefO 0OcHUczhUVUP/58M5aLgq9/pTEYvrTiDud/RCD0Cr0XtcwW7Z2fbUufFdVw/VMZB xLMsW8kFdLRMIuX0SbaBYojpZ3hlanFkoUzr6lpmPImXVOIvlwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFI6TONnyE6SOvSe1TlZDzol9AhXOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODEwYTkxNWQtMWY5OS0z ZmI0LWIwMjAtYTZhOGYwZmQ2N2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDrbgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEALdrFyOwkRNubJCoAar2Iips25GstUQbIomALlwgPcm5zoQYDM/4Nvb/z icYXZopukcjyuG3YgdGrri+E5qh1j3wXj4lpRGhVnknZEjgU2lI8aKCHvb+nD+VB MdZFRA5jbPlJkM6YFC4ArOwlHhyw1yrbH0ZJAhZBNYeHH7GIOgaKtUyko3/tQbJc kROL6kXt7XJer/mDm/mE7mf5e/qs11QZBMoBIpJc7KUNtzrlZC0Y53UVRRbZ7qcR shuf5zavFWa83qqxhfSzOO9KoYuNuw5HsuKw3cvAAh/NqztEv7rFCAhH35RwYEEL jvz4bniCOOFX7ycsc/pzfwukJHVIPw== -----END CERTIFICATE-----Generated at Sun Jun 15 11:46:33 2025 by rpki-client