$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b1222bb9-d943-3bbd-9659-732a45246c51.roa File: b1222bb9-d943-3bbd-9659-732a45246c51.roa (raw, json) Hash identifier: tdU+GpuL6isovi4ox1/xbMC41ZYszlE26MBX7+SbJQk= Subject key identifier: 1C:D3:D8:CD:A3:9D:89:02:71:B1:88:33:B4:1D:B8:67:38:98:88:4A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3FD18FF138D2FB339940 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b1222bb9-d943-3bbd-9659-732a45246c51.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 173.186.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3f:d1:8f:f1:38:d2:fb:33:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=e25305c4-fa2b-4076-99e7-c08ffb12ab42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:82:e9:ab:e3:5d:20:d8:1e:89:cb:02:e7:d5: 09:7f:7f:41:bb:69:75:2a:e3:41:b6:2b:57:d1:df: 2a:b9:84:94:f0:1e:a4:e3:2d:59:c0:eb:c7:a1:65: cc:b4:46:a1:06:4c:d3:45:b7:6f:41:ff:dc:5f:c2: 42:65:7d:a9:a2:f8:48:ee:7b:a0:b0:11:25:8c:55: 33:e8:f9:00:7d:87:42:b2:e4:f3:83:62:f9:28:47: aa:b7:c9:ea:0f:90:d6:70:96:d4:a7:f2:dd:70:a8: 45:64:7a:59:12:52:1b:77:56:09:9d:fc:d3:60:e9: 56:24:62:f3:0e:bb:7e:66:36:1b:df:96:fe:87:80: 19:ac:80:c9:bb:99:df:07:d3:1a:f7:e6:d1:a3:43: e7:1f:09:f0:82:6b:50:64:57:ad:7c:fb:85:54:0d: 47:db:af:3b:0e:1c:cd:81:8b:dc:6f:69:55:f0:c2: 87:1f:d1:09:bb:b0:14:eb:fb:c8:58:ac:e2:0b:11: c3:4a:e7:59:b6:23:9c:4a:4e:5a:64:e0:94:88:ee: 80:33:06:1a:d0:88:20:a5:ac:b3:08:89:b8:e1:f1: 94:c6:04:f8:bb:6f:a6:c3:3c:f3:13:5e:13:57:d9: 07:db:11:b6:fe:ba:09:96:6d:eb:8f:bc:41:09:8a: fe:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D3:D8:CD:A3:9D:89:02:71:B1:88:33:B4:1D:B8:67:38:98:88:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b1222bb9-d943-3bbd-9659-732a45246c51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:7d:8a:57:44:22:16:b6:8c:d1:86:30:4c:c8:db:f0:94:f8: a7:5e:ec:ef:d5:c2:4f:b7:91:d2:ce:67:b0:77:9b:10:2e:d3: 8b:ea:4b:cc:1c:7a:86:1a:cb:dc:24:ee:c0:fb:86:58:69:1e: 37:20:66:d6:98:88:34:56:79:93:28:44:2b:42:ac:2b:e5:e1: 28:32:de:9d:11:8b:88:c7:0c:bf:80:f3:09:60:d9:d5:df:bc: 3d:bc:f2:c7:ea:3e:f6:38:bf:07:b1:36:7c:7f:18:e2:eb:6b: 9a:b9:04:3a:82:96:69:be:aa:d1:33:a0:e5:99:2c:cf:33:86: 52:77:32:c0:89:00:ac:e6:a8:5f:40:0f:af:c7:c7:31:75:ed: d4:d6:00:10:47:1a:b5:df:4f:f2:1a:2f:f3:01:10:c0:5b:5e: 0b:78:86:44:8f:ae:e3:53:54:f7:a7:e8:4f:3c:9b:11:3c:0a: f3:3d:e1:c8:1d:45:6d:93:3b:95:00:77:8c:db:11:32:c7:19: ad:38:96:4f:19:63:6b:7f:55:3b:21:8c:77:aa:1b:86:60:b7: d0:35:31:c3:d8:9e:c7:aa:03:79:64:20:28:20:30:41:34:43: 05:e8:ed:3d:e2:90:22:d2:ed:b9:e9:3e:84:e3:94:cf:a7:f0: f7:9e:c6:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSj/Rj/E40vszmUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZTI1MzA1YzQtZmEyYi00MDc2LTk5ZTctYzA4ZmZiMTJhYjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4Lpq+NdINgeicsC59UJf39Bu2l1KuNBtitX 0d8quYSU8B6k4y1ZwOvHoWXMtEahBkzTRbdvQf/cX8JCZX2povhI7nugsBEljFUz 6PkAfYdCsuTzg2L5KEeqt8nqD5DWcJbUp/LdcKhFZHpZElIbd1YJnfzTYOlWJGLz Drt+ZjYb35b+h4AZrIDJu5nfB9Ma9+bRo0PnHwnwgmtQZFetfPuFVA1H2687DhzN gYvcb2lV8MKHH9EJu7AU6/vIWKziCxHDSudZtiOcSk5aZOCUiO6AMwYa0Iggpayz CIm44fGUxgT4u2+mwzzzE14TV9kH2xG2/roJlm3rj7xBCYr+kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzT2M2jnYkCcbGIM7QduGc4mIhKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjEyMjJiYjktZDk0My0z YmJkLTk2NTktNzMyYTQ1MjQ2YzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbq0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFx9ildEIha2jNGGMEzI2/CU+Kde7O/Vwk+3kdLOZ7B3mxAu04vqS8wc eoYay9wk7sD7hlhpHjcgZtaYiDRWeZMoRCtCrCvl4Sgy3p0Ri4jHDL+A8wlg2dXf vD288sfqPvY4vwexNnx/GOLra5q5BDqClmm+qtEzoOWZLM8zhlJ3MsCJAKzmqF9A D6/HxzF17dTWABBHGrXfT/IaL/MBEMBbXgt4hkSPruNTVPen6E88mxE8CvM94cgd RW2TO5UAd4zbETLHGa04lk8ZY2t/VTshjHeqG4Zgt9A1McPYnseqA3lkICggMEE0 QwXo7T3ikCLS7bnpPoTjlM+n8PeexoA= -----END CERTIFICATE-----Generated at Tue Jun 17 14:40:41 2025 by rpki-client