$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9c1c13d6-ea63-3a65-a0e6-34319d779258.roa File: 9c1c13d6-ea63-3a65-a0e6-34319d779258.roa (raw, json) Hash identifier: B4nFqJDQmJMuiUK7o9N8EVIamat1YyoYafCoMwlXxGc= Subject key identifier: 00:2F:FD:3C:16:0C:AB:C3:F3:59:98:08:67:E5:D4:FC:69:1D:01:2D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A144D4E9F5E5B1437C740 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9c1c13d6-ea63-3a65-a0e6-34319d779258.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 173.191.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:14:4d:4e:9f:5e:5b:14:37:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=90586245-ac47-42a4-bee2-46c782e8e399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:04:69:49:e9:74:fa:7b:4c:5f:77:56:35:1b: b6:f0:66:ee:7f:2d:a7:56:c6:71:ac:2b:73:9d:98: c4:bf:b7:7c:33:56:6d:5e:95:2f:ab:64:d5:3d:0f: 25:20:02:e9:99:4d:d5:01:dd:57:17:61:11:cd:e6: e6:9c:5a:ed:33:38:41:12:55:d7:41:9c:d0:21:5b: 5d:9c:fb:a2:cd:46:70:56:6e:49:76:36:be:d0:0d: 3b:2d:4d:fd:81:61:aa:bb:59:36:66:4e:7b:81:e7: 7c:04:84:c4:d0:2a:6e:73:4d:14:df:7b:8b:79:08: 5c:80:95:96:56:92:ee:5f:1d:0e:86:1e:35:dc:4f: 85:8e:a1:8f:81:ac:ab:8a:28:d2:af:26:74:7d:56: 8a:e3:b9:4e:29:b9:7b:ee:29:ec:80:08:47:17:f1: 4f:25:a2:6c:7a:8e:f7:a0:0b:b6:e5:56:7a:91:e3: ec:78:b7:29:98:85:f9:e2:e4:34:f3:7c:9a:be:ff: 96:81:87:aa:62:6e:cf:e0:43:f6:c7:e4:cb:b8:83: e9:c3:e7:d3:bc:07:23:76:0c:89:11:2a:72:47:d6: 41:90:ac:e2:a6:84:16:dd:14:c1:f9:06:6b:f2:87: c1:fa:2e:72:5b:e6:32:6f:6e:5b:8c:d4:b2:98:04: 99:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2F:FD:3C:16:0C:AB:C3:F3:59:98:08:67:E5:D4:FC:69:1D:01:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9c1c13d6-ea63-3a65-a0e6-34319d779258.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:d6:25:d9:88:6d:a6:7b:42:9e:74:c7:20:8d:06:38:23:8c: ee:31:a6:c9:bb:a8:98:96:7c:81:8b:55:7c:47:35:b1:41:ba: ec:a2:42:3c:bd:1d:a7:00:38:cd:f9:2c:66:6f:64:bd:7d:2f: 07:56:8c:a2:6c:6d:49:11:be:c3:ac:ad:0e:f1:ef:59:46:61: a8:ec:7d:07:bc:1d:ad:1a:8f:27:dd:84:b1:28:6e:81:42:5f: 6b:99:b8:a1:be:60:9a:78:32:8b:02:d6:b7:73:f7:4c:11:c6: 05:9c:9f:12:7c:de:12:26:18:6d:b6:a7:23:49:38:4e:7e:88: 1e:a5:6a:78:cf:3e:e7:75:bd:d7:a9:d6:8f:f7:b0:4f:b1:b4: 9f:20:58:9c:0f:c2:1b:52:33:d8:db:a9:29:88:53:a5:c9:d1: e4:e2:10:01:6a:4b:d5:bc:f7:23:50:e7:5b:ad:f9:c4:5a:87: 2f:c7:d0:de:da:20:e9:c0:17:96:73:87:1d:61:e2:43:28:25: 4d:a3:36:35:0c:74:ea:cb:2a:93:b3:e0:af:0b:46:e9:1c:57: fb:40:f2:d5:38:88:2a:d4:60:d9:65:29:a7:3d:7a:a3:e4:93: c1:e0:42:db:30:03:ca:13:eb:47:ea:95:b7:f8:91:d7:30:4d: 6b:07:3f:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhRNTp9eWxQ3x0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk OTA1ODYyNDUtYWM0Ny00MmE0LWJlZTItNDZjNzgyZThlMzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wRpSel0+ntMX3dWNRu28Gbufy2nVsZxrCtz nZjEv7d8M1ZtXpUvq2TVPQ8lIALpmU3VAd1XF2ERzebmnFrtMzhBElXXQZzQIVtd nPuizUZwVm5Jdja+0A07LU39gWGqu1k2Zk57ged8BITE0Cpuc00U33uLeQhcgJWW VpLuXx0Ohh413E+FjqGPgayriijSryZ0fVaK47lOKbl77insgAhHF/FPJaJseo73 oAu25VZ6kePseLcpmIX54uQ083yavv+WgYeqYm7P4EP2x+TLuIPpw+fTvAcjdgyJ ESpyR9ZBkKzipoQW3RTB+QZr8ofB+i5yW+Yyb25bjNSymASZFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAv/TwWDKvD81mYCGfl1PxpHQEtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWMxYzEzZDYtZWE2My0z YTY1LWEwZTYtMzQzMTlkNzc5MjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErb8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvWJdmIbaZ7Qp50xyCNBjgjjO4xpsm7qJiWfIGLVXxHNbFBuuyiQjy9 HacAOM35LGZvZL19LwdWjKJsbUkRvsOsrQ7x71lGYajsfQe8Ha0ajyfdhLEoboFC X2uZuKG+YJp4MosC1rdz90wRxgWcnxJ83hImGG22pyNJOE5+iB6lanjPPud1vdep 1o/3sE+xtJ8gWJwPwhtSM9jbqSmIU6XJ0eTiEAFqS9W89yNQ51ut+cRahy/H0N7a IOnAF5Zzhx1h4kMoJU2jNjUMdOrLKpOz4K8LRukcV/tA8tU4iCrUYNllKac9eqPk k8HgQtswA8oT60fqlbf4kdcwTWsHPwc= -----END CERTIFICATE-----Generated at Sun Jun 15 13:14:38 2025 by rpki-client