$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f94b44f-a7be-33b2-9ed9-1c86754ce2aa.roa File: 9f94b44f-a7be-33b2-9ed9-1c86754ce2aa.roa (raw, json) Hash identifier: dVhBmBWE8sWEtgaSeUTg+6SZLyvJ/FON8D7GQRimzfM= Subject key identifier: 5C:71:8F:A1:C2:DD:26:D8:1D:E2:5D:41:5C:7A:47:8E:31:0F:D3:6B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D1654CF75F2F418166F9D220 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f94b44f-a7be-33b2-9ed9-1c86754ce2aa.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 7029 IP address blocks: 173.186.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:4c:f7:5f:2f:41:81:66:f9:d2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=78d5175c-45f8-4dac-8c2f-a75c9f6fc70e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:75:13:d0:49:b0:66:22:f1:d8:16:c8:9b:24: e5:e5:fc:39:5c:d6:28:72:f8:f2:05:e1:ac:f0:fc: a4:57:4f:d2:17:d7:dd:d8:5e:3e:21:6b:67:19:ed: 72:43:45:98:4b:51:d6:96:f1:e2:55:ea:c3:2c:a0: 55:86:32:02:35:76:e9:89:ab:72:7e:b1:28:2d:75: 86:4b:49:6d:c3:ed:9d:8a:d5:70:35:a9:8c:0b:f3: a2:18:4f:f3:68:9a:f2:f8:ce:ee:e3:c8:2e:f2:b5: 10:0f:e7:89:ee:70:01:c4:df:70:96:2e:e2:2e:85: 44:07:ab:5e:2e:15:2a:df:b9:f7:70:c8:71:1d:d6: 64:16:d6:62:cc:90:8d:04:ab:a9:8a:04:0f:88:fe: f1:4a:dc:91:86:50:cc:d8:38:f9:0a:66:36:4c:09: 2d:d0:80:03:3d:b2:c3:c0:9c:94:7d:d9:ff:61:17: a1:56:f4:4e:45:13:b9:11:dd:79:b2:62:bf:66:6e: 6d:f9:12:ee:96:e8:a1:50:03:49:e5:d9:b0:39:9d: 75:0b:a0:39:cc:a1:25:ba:6c:f3:ef:dc:68:ba:dd: ff:21:a5:49:d0:7c:d2:76:ab:f0:c3:cf:cb:9e:4c: 8b:29:1d:ac:4f:e5:57:c8:99:40:66:5d:e5:d3:b6: e0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:71:8F:A1:C2:DD:26:D8:1D:E2:5D:41:5C:7A:47:8E:31:0F:D3:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f94b44f-a7be-33b2-9ed9-1c86754ce2aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:e2:76:a0:fe:9a:5f:37:4a:b7:76:66:0e:e8:21:31:a1:fe: 70:f4:32:0f:85:a8:86:7c:3f:32:0e:ab:11:b5:65:02:73:95: 80:0d:9f:93:c3:3e:6c:12:fb:c3:78:2e:4a:77:0e:93:04:fa: ff:51:bd:7a:61:32:1a:5c:ad:95:ac:1e:9c:f1:6d:28:cd:35: ab:d7:ce:2a:83:88:1f:dd:16:0a:25:6e:f3:2e:f8:27:13:d0: 24:2d:82:93:63:1e:15:81:35:7d:60:4e:87:66:37:44:86:ef: e5:f5:4c:27:47:0f:f1:b4:b2:4a:79:de:ab:a1:25:f4:67:2e: 6a:21:84:29:1b:78:05:b5:10:57:a5:4a:73:17:68:de:2c:46: 75:f6:74:49:61:e1:6b:85:88:d3:b0:01:6e:85:e1:a9:ac:2d: 10:16:62:91:08:61:29:aa:1c:10:81:be:e9:72:49:66:9d:f6: 7a:24:27:8e:ba:29:96:4f:be:aa:7b:91:a7:dd:8e:4e:77:37: f6:6e:73:15:4f:64:0e:7b:ce:85:d0:2b:c7:bf:e6:d6:25:e3: bf:be:d9:1f:10:79:99:02:37:99:7f:0a:72:ac:e1:05:b7:e9: dc:65:65:cf:ad:57:37:56:47:89:3b:5c:b0:a9:56:d6:9b:5c: 9a:69:03:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZUz3Xy9BgWb50iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk NzhkNTE3NWMtNDVmOC00ZGFjLThjMmYtYTc1YzlmNmZjNzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3UT0EmwZiLx2BbImyTl5fw5XNYocvjyBeGs 8PykV0/SF9fd2F4+IWtnGe1yQ0WYS1HWlvHiVerDLKBVhjICNXbpiatyfrEoLXWG S0ltw+2ditVwNamMC/OiGE/zaJry+M7u48gu8rUQD+eJ7nABxN9wli7iLoVEB6te LhUq37n3cMhxHdZkFtZizJCNBKupigQPiP7xStyRhlDM2Dj5CmY2TAkt0IADPbLD wJyUfdn/YRehVvRORRO5Ed15smK/Zm5t+RLuluihUANJ5dmwOZ11C6A5zKElumzz 79xout3/IaVJ0HzSdqvww8/LnkyLKR2sT+VXyJlAZl3l07bgMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxxj6HC3SbYHeJdQVx6R44xD9NrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWY5NGI0NGYtYTdiZS0z M2IyLTllZDktMWM4Njc1NGNlMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/idqD+ml83Srd2Zg7oITGh/nD0Mg+FqIZ8PzIOqxG1ZQJzlYANn5PD PmwS+8N4Lkp3DpME+v9RvXphMhpcrZWsHpzxbSjNNavXziqDiB/dFgolbvMu+CcT 0CQtgpNjHhWBNX1gTodmN0SG7+X1TCdHD/G0skp53quhJfRnLmohhCkbeAW1EFel SnMXaN4sRnX2dElh4WuFiNOwAW6F4amsLRAWYpEIYSmqHBCBvulySWad9nokJ466 KZZPvqp7kafdjk53N/ZucxVPZA57zoXQK8e/5tYl47++2R8QeZkCN5l/CnKs4QW3 6dxlZc+tVzdWR4k7XLCpVtabXJppA50= -----END CERTIFICATE-----Generated at Sun Jun 15 13:09:06 2025 by rpki-client