$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8c7de1ab-fa4e-36d9-9bb1-a46e7969f43b.roa File: 8c7de1ab-fa4e-36d9-9bb1-a46e7969f43b.roa (raw, json) Hash identifier: UQa24fG2LDJwxkbqcD8FAtoQXOPfdrSa9HuXj9OkYNQ= Subject key identifier: D4:1E:07:8F:B1:0A:29:3B:A8:1A:B3:32:97:52:3D:6A:50:A8:2D:44 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA893FBBBAEE63564F9E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8c7de1ab-fa4e-36d9-9bb1-a46e7969f43b.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 173.191.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:89:3f:bb:ba:ee:63:56:4f:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=f0f03d98-f0b4-4bc0-b695-c7793dc614be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4c:d0:c2:c4:e0:80:ae:d7:2b:d3:1e:dc:f2: 7b:e6:27:79:ff:17:61:6b:a5:3e:b3:88:45:ba:1a: 7e:e9:05:d1:cd:6f:d7:72:fd:3a:8f:c7:ab:36:99: a9:77:42:08:37:a2:f2:5e:b5:98:15:16:6e:bd:6f: 60:42:16:1e:28:b7:35:76:86:47:be:d7:c5:96:95: ee:be:75:a7:5a:7c:5f:50:58:40:9b:54:2c:1b:07: 29:0d:64:ae:83:70:cb:db:c0:ee:85:62:ce:02:9c: 82:c2:9c:4c:a7:aa:1c:b0:3f:a7:e2:09:9a:ac:e6: eb:6a:30:11:d5:cc:08:16:35:d0:bf:5e:bc:74:37: f4:6c:ac:d0:49:71:31:1d:b7:2b:92:a8:b0:e9:ca: f7:3c:7b:60:ef:60:a7:2a:d1:d4:a9:5f:0f:70:01: cc:87:5f:7d:09:4f:47:2e:23:39:1d:f4:64:6b:3b: e8:3d:c0:cc:3d:0c:79:f1:0f:e2:9d:9d:8a:6b:f1: 27:11:ef:e3:8a:5b:8f:5e:36:09:94:7b:31:4c:08: cc:d3:85:44:15:e2:a0:fe:3d:61:97:0a:06:3e:41: 60:56:6a:05:d2:1d:2f:fc:c7:5f:62:25:bb:d5:89: 27:ce:18:5d:95:59:bd:0d:7b:8a:ad:c5:e5:89:a1: d6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:1E:07:8F:B1:0A:29:3B:A8:1A:B3:32:97:52:3D:6A:50:A8:2D:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8c7de1ab-fa4e-36d9-9bb1-a46e7969f43b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:58:34:bc:4b:66:6b:8c:9a:b1:51:2a:a3:c1:ab:f4:b5:ca: e2:96:d4:8c:04:7e:69:ff:64:5f:36:32:4a:f4:88:19:b6:34: c3:94:1f:8f:d6:b1:49:a8:22:c8:d6:cf:fc:e8:1a:dd:1d:85: ad:7d:da:d4:8d:aa:3a:90:8a:28:c9:e9:3d:b3:29:db:b7:0e: bb:18:32:d9:e6:5f:29:43:e0:db:e4:f9:5d:ad:92:46:86:51: 60:63:09:cd:04:1a:54:f9:94:72:c9:7f:26:73:2d:a6:e0:21: e3:59:f8:49:72:16:45:c7:cf:2b:66:f7:f5:bc:5e:e7:56:f6: 44:4b:1b:8a:e2:de:2e:39:2b:73:59:01:ef:ed:d8:f9:a9:69: ea:b5:50:a9:a0:19:ba:20:b4:f9:11:97:ae:e3:ab:78:45:4d: 8f:c6:71:f0:9f:9d:38:78:c4:8a:be:c3:a9:46:49:91:da:5c: a7:c7:8a:6a:2a:ce:75:48:f9:63:97:7d:45:08:9e:ce:9d:23: 7a:55:5a:54:5b:a1:bf:06:91:ff:34:f6:42:55:dd:35:b0:ed: c1:72:1e:7e:9b:7e:05:2e:c6:4f:39:38:f0:6f:00:07:9e:bd: 9c:bb:98:dd:b6:93:c7:c7:51:fd:5b:e7:f7:b6:50:b1:18:e7: 50:7b:c9:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qok/u7ruY1ZPnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk ZjBmMDNkOTgtZjBiNC00YmMwLWI2OTUtYzc3OTNkYzYxNGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUzQwsTggK7XK9Me3PJ75id5/xdha6U+s4hF uhp+6QXRzW/Xcv06j8erNpmpd0IIN6LyXrWYFRZuvW9gQhYeKLc1doZHvtfFlpXu vnWnWnxfUFhAm1QsGwcpDWSug3DL28DuhWLOApyCwpxMp6ocsD+n4gmarObrajAR 1cwIFjXQv168dDf0bKzQSXExHbcrkqiw6cr3PHtg72CnKtHUqV8PcAHMh199CU9H LiM5HfRkazvoPcDMPQx58Q/inZ2Ka/EnEe/jiluPXjYJlHsxTAjM04VEFeKg/j1h lwoGPkFgVmoF0h0v/MdfYiW71YknzhhdlVm9DXuKrcXliaHWLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQeB4+xCik7qBqzMpdSPWpQqC1EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGM3ZGUxYWItZmE0ZS0z NmQ5LTliYjEtYTQ2ZTc5NjlmNDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErb8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9YNLxLZmuMmrFRKqPBq/S1yuKW1IwEfmn/ZF82Mkr0iBm2NMOUH4/W sUmoIsjWz/zoGt0dha192tSNqjqQiijJ6T2zKdu3DrsYMtnmXylD4Nvk+V2tkkaG UWBjCc0EGlT5lHLJfyZzLabgIeNZ+ElyFkXHzytm9/W8XudW9kRLG4ri3i45K3NZ Ae/t2Pmpaeq1UKmgGbogtPkRl67jq3hFTY/GcfCfnTh4xIq+w6lGSZHaXKfHimoq znVI+WOXfUUIns6dI3pVWlRbob8Gkf809kJV3TWw7cFyHn6bfgUuxk85OPBvAAee vZy7mN22k8fHUf1b5/e2ULEY51B7yYU= -----END CERTIFICATE-----Generated at Sun Jun 15 11:42:43 2025 by rpki-client