$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9c930b9d-7bf1-371f-b5fd-ffcada2b8d8d.roa File: 9c930b9d-7bf1-371f-b5fd-ffcada2b8d8d.roa (raw, json) Hash identifier: r4any11Xp0jCPLSstWdFhaQQUoopC9s8PEcw+pnnCNc= Subject key identifier: 06:01:CB:5A:62:6B:6B:90:DF:E8:C5:21:63:CC:71:15:46:6E:D4:2B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849F9DFB8510F9DDD884C1E3F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9c930b9d-7bf1-371f-b5fd-ffcada2b8d8d.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 173.187.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:b8:51:0f:9d:dd:88:4c:1e:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=68bc7ea4-dc88-42f0-a090-876b559bc053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d6:cb:fe:38:07:01:9f:f2:c0:4a:ef:cf:34: f1:f4:09:fa:33:57:73:cb:33:34:94:b1:b3:13:bd: 8e:8e:36:07:96:be:4d:7a:fb:a7:2b:ac:3c:92:d7: 2e:02:8b:19:c6:5b:e3:c0:b5:d3:b1:4b:0b:e4:ae: 4b:b9:65:9e:27:db:e5:45:cf:db:ef:42:7d:a6:3d: b1:7b:00:fa:51:c3:c6:2c:a4:64:22:2c:dc:00:b1: 97:b2:08:66:66:57:a0:7a:3f:35:26:4a:72:a3:82: fa:47:9f:80:a7:9a:29:15:2d:36:11:b8:95:2d:4e: 9a:34:58:82:32:d6:28:c5:1b:de:9c:cf:58:a2:00: 34:99:5d:fa:ef:76:1b:76:92:d0:db:da:9b:4d:3d: 3a:3e:be:a1:ec:d4:4a:d4:bd:21:69:02:bf:99:3b: ab:b3:87:16:c9:59:17:59:29:89:6a:19:96:cb:0b: 0f:8c:e6:da:41:33:20:70:81:dc:40:7b:dd:e2:1c: 31:e2:f8:f2:e8:51:22:b9:5f:cc:b3:36:4a:02:7c: 7b:5a:a8:dd:93:b1:c6:39:1f:d7:b3:53:ca:4a:40: 71:d1:56:1f:32:85:02:02:bb:49:7f:0b:97:be:99: 0c:81:50:fd:89:6e:fb:64:38:64:c7:52:92:88:b4: 1a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:01:CB:5A:62:6B:6B:90:DF:E8:C5:21:63:CC:71:15:46:6E:D4:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9c930b9d-7bf1-371f-b5fd-ffcada2b8d8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:82:2a:1a:33:8e:0a:17:2d:2a:25:86:b2:f0:7a:70:25:e3: 3b:b2:bf:7a:1e:ab:23:17:f4:4b:ca:a9:16:79:c2:59:12:ff: db:9c:d0:3f:4b:64:60:35:9d:87:de:e5:e9:b9:aa:18:cc:67: 3f:b1:fa:86:2d:74:dc:7c:03:2b:e2:55:de:a2:2e:a1:4f:b3: ac:9b:27:8a:60:60:63:64:7e:9a:ea:39:56:01:5f:67:40:30: 36:d1:78:f3:f3:76:74:4c:46:cd:fd:85:51:0d:30:1b:d8:31: 6f:73:af:ab:05:7a:d1:20:96:d7:5b:d1:72:d7:96:25:b6:ee: 4e:20:bb:43:49:79:5e:ee:eb:31:ba:3b:39:d8:14:93:61:20: 1e:20:3b:7f:eb:08:4c:4b:64:09:3e:e7:6f:a6:76:b0:07:88: 7b:3f:35:a1:c9:62:5c:da:00:e1:84:3e:2a:61:e3:77:18:cc: 6f:b1:f4:6e:89:3b:1a:47:34:18:ad:65:d0:44:f2:a7:a6:f4: 45:e5:1c:1e:14:eb:8a:00:23:76:a8:8a:5a:11:21:9a:61:7e: b6:71:6b:63:ab:22:55:05:90:2c:3d:06:ba:d4:08:6e:8e:b3: 8a:01:c9:8e:a9:91:d1:b0:68:26:9a:e4:81:6c:e3:58:86:f1: 6c:b5:80:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn537hRD53diEweP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk NjhiYzdlYTQtZGM4OC00MmYwLWEwOTAtODc2YjU1OWJjMDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNbL/jgHAZ/ywErvzzTx9An6M1dzyzM0lLGz E72OjjYHlr5NevunK6w8ktcuAosZxlvjwLXTsUsL5K5LuWWeJ9vlRc/b70J9pj2x ewD6UcPGLKRkIizcALGXsghmZlegej81Jkpyo4L6R5+Ap5opFS02EbiVLU6aNFiC MtYoxRvenM9YogA0mV3673YbdpLQ29qbTT06Pr6h7NRK1L0haQK/mTurs4cWyVkX WSmJahmWywsPjObaQTMgcIHcQHvd4hwx4vjy6FEiuV/MszZKAnx7Wqjdk7HGOR/X s1PKSkBx0VYfMoUCArtJfwuXvpkMgVD9iW77ZDhkx1KSiLQabwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYBy1pia2uQ3+jFIWPMcRVGbtQrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWM5MzBiOWQtN2JmMS0z NzFmLWI1ZmQtZmZjYWRhMmI4ZDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbt2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmCKhozjgoXLSolhrLwenAl4zuyv3oeqyMX9EvKqRZ5wlkS/9uc0D9L ZGA1nYfe5em5qhjMZz+x+oYtdNx8AyviVd6iLqFPs6ybJ4pgYGNkfprqOVYBX2dA MDbRePPzdnRMRs39hVENMBvYMW9zr6sFetEgltdb0XLXliW27k4gu0NJeV7u6zG6 OznYFJNhIB4gO3/rCExLZAk+52+mdrAHiHs/NaHJYlzaAOGEPiph43cYzG+x9G6J OxpHNBitZdBE8qem9EXlHB4U64oAI3aoiloRIZphfrZxa2OrIlUFkCw9BrrUCG6O s4oByY6pkdGwaCaa5IFs41iG8Wy1gB4= -----END CERTIFICATE-----Generated at Sun Jun 15 11:45:08 2025 by rpki-client