$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/971a1bb8-fab1-32e9-b5c0-df09785da9e3.roa File: 971a1bb8-fab1-32e9-b5c0-df09785da9e3.roa (raw, json) Hash identifier: Emicbevwq13Q9rdlMOF49SX2ShmTFNaKziyQcmA0XT0= Subject key identifier: 9F:06:58:01:2C:7E:64:37:20:AD:22:2E:02:2D:F1:CE:1E:EA:D3:27 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A268AD21C8AB748291DDAB300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/971a1bb8-fab1-32e9-b5c0-df09785da9e3.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 173.187.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:d2:1c:8a:b7:48:29:1d:da:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=3ef95861-e022-47f1-b52f-75da62b3f5a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d8:ab:cb:41:14:47:56:86:e5:bb:b1:53:20: bd:be:af:99:3b:5f:55:1a:1c:57:d1:a3:79:e8:36: 2e:6d:6b:d4:f6:09:df:c9:74:50:78:93:95:8c:14: dc:98:16:24:54:8a:8b:5f:39:2f:ec:70:fd:ec:86: 5b:27:ef:28:1d:07:91:eb:80:3c:67:d7:ae:58:7c: b5:f0:a7:01:43:dd:a8:41:2c:55:74:fe:0a:87:6a: 47:b9:ff:0f:2e:8f:28:26:7e:3b:11:e2:95:fb:69: 44:b5:0a:68:ee:63:73:53:e4:44:07:81:f4:88:16: 95:f7:58:e6:9c:36:ad:cd:2a:3c:3d:5f:2f:f4:61: 4e:0f:b6:39:91:bf:4b:c8:ae:48:f6:46:06:6e:98: fc:30:71:ac:61:3a:cd:6b:a8:d1:5a:9c:15:b3:76: db:ae:5e:6a:97:c5:f1:34:a6:df:fd:47:d5:2b:61: 40:0c:43:6d:4a:73:fd:39:75:e8:94:73:96:6e:e3: e4:18:ad:55:2e:33:a7:50:f3:db:0a:c9:24:97:16: 02:2f:80:07:51:bc:ae:1c:2a:56:e3:4c:d2:7f:ec: 9e:1b:a8:28:6d:2e:9a:66:b5:d7:f1:c1:f7:c5:b9: a5:10:6a:6c:08:12:57:95:c3:b0:d5:f4:f2:66:f5: 00:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:06:58:01:2C:7E:64:37:20:AD:22:2E:02:2D:F1:CE:1E:EA:D3:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/971a1bb8-fab1-32e9-b5c0-df09785da9e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:d4:f0:85:28:c1:7d:e7:bc:9e:ac:55:e3:66:c8:1f:bd:0c: 90:88:ba:64:c2:6a:1e:02:11:32:b6:45:2a:58:74:43:42:fd: 4d:40:23:2d:5e:54:c1:bd:c7:2a:d1:b3:21:75:f4:42:83:b1: e5:25:e6:2f:54:3e:b6:40:4e:6a:7e:9d:17:d6:f6:7d:45:7e: db:57:35:db:b8:a4:e3:fa:12:a0:3f:21:19:91:93:95:8f:01: 93:3e:93:6a:60:66:18:99:b0:15:1f:a9:65:be:77:f6:d0:72: 87:df:b8:cd:c7:38:ad:39:59:85:5f:ae:17:66:c0:47:3e:87: 9e:2d:cd:98:37:c8:7f:af:0a:1f:21:44:54:3b:4c:9f:9f:08: 01:71:bd:51:a2:ac:8a:e2:b1:b3:91:99:ca:e2:82:1f:ad:da: 87:ad:0c:d2:6a:36:a7:eb:af:47:3a:51:65:5e:b0:32:90:db: 26:76:ed:3c:c2:42:6d:be:35:49:fb:57:21:28:6f:0f:69:35: 85:c5:38:95:47:13:a9:35:29:67:03:cc:f2:0a:dc:1a:f2:20: ff:fa:16:5a:4e:e1:1f:ea:73:6e:eb:83:37:6b:26:13:f1:28: 2f:ee:13:4f:83:e7:e7:0a:9b:31:77:cb:8e:15:32:e7:66:8f: 30:7c:05:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomitIcirdIKR3aswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk M2VmOTU4NjEtZTAyMi00N2YxLWI1MmYtNzVkYTYyYjNmNWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutiry0EUR1aG5buxUyC9vq+ZO19VGhxX0aN5 6DYubWvU9gnfyXRQeJOVjBTcmBYkVIqLXzkv7HD97IZbJ+8oHQeR64A8Z9euWHy1 8KcBQ92oQSxVdP4Kh2pHuf8PLo8oJn47EeKV+2lEtQpo7mNzU+REB4H0iBaV91jm nDatzSo8PV8v9GFOD7Y5kb9LyK5I9kYGbpj8MHGsYTrNa6jRWpwVs3bbrl5ql8Xx NKbf/UfVK2FADENtSnP9OXXolHOWbuPkGK1VLjOnUPPbCskklxYCL4AHUbyuHCpW 40zSf+yeG6gobS6aZrXX8cH3xbmlEGpsCBJXlcOw1fTyZvUAIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8GWAEsfmQ3IK0iLgIt8c4e6tMnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTcxYTFiYjgtZmFiMS0z MmU5LWI1YzAtZGYwOTc4NWRhOWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvU8IUowX3nvJ6sVeNmyB+9DJCIumTCah4CETK2RSpYdENC/U1AIy1e VMG9xyrRsyF19EKDseUl5i9UPrZATmp+nRfW9n1FfttXNdu4pOP6EqA/IRmRk5WP AZM+k2pgZhiZsBUfqWW+d/bQcoffuM3HOK05WYVfrhdmwEc+h54tzZg3yH+vCh8h RFQ7TJ+fCAFxvVGirIrisbORmcrigh+t2oetDNJqNqfrr0c6UWVesDKQ2yZ27TzC Qm2+NUn7VyEobw9pNYXFOJVHE6k1KWcDzPIK3BryIP/6FlpO4R/qc27rgzdrJhPx KC/uE0+D5+cKmzF3y44VMudmjzB8BYs= -----END CERTIFICATE-----Generated at Sun Jun 15 11:38:23 2025 by rpki-client