$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c091f183-d340-37c1-8dcb-aea2eac1fbc6.roa File: c091f183-d340-37c1-8dcb-aea2eac1fbc6.roa (raw, json) Hash identifier: vwyLRy2r7gUSN4bpsEBSr2Y+9t1zQ0nnCZpOdB7ZZRo= Subject key identifier: 67:7F:3C:30:9F:F1:C0:1D:E1:B1:D3:A6:A6:AE:20:E7:C0:56:DC:A2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8C70DB6CADD0B66873132D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c091f183-d340-37c1-8dcb-aea2eac1fbc6.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 173.184.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:db:6c:ad:d0:b6:68:73:13:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=e49d4085-9df6-4a42-a87e-6adc58de86d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f1:b7:dc:e3:e4:92:b6:92:a4:f1:6d:6b:03: 99:44:ce:26:65:1a:f3:d9:11:ef:fe:9f:2b:40:ef: 53:52:55:4d:91:6c:3d:43:cd:e3:d6:60:4b:ed:30: 7b:eb:ae:7e:28:aa:c5:69:f3:1f:95:e8:00:ae:0a: 71:56:13:23:62:ed:2a:eb:89:fa:76:ed:bf:8e:14: 5a:a7:a0:44:10:2f:79:9d:fc:3e:d7:e3:1e:50:65: 49:4e:10:62:2d:cc:0a:3d:31:6d:85:c0:17:14:1c: 23:80:78:b3:18:e5:81:a0:8b:28:06:c0:c0:c1:54: 2f:a9:12:a3:d7:43:2a:96:c9:18:0d:68:1e:44:00: 4a:c1:2d:67:88:00:ea:69:dc:46:1c:38:5d:ef:53: 3f:76:4c:e0:92:3a:76:97:9f:56:ec:76:31:18:aa: 33:c8:ed:53:82:fd:7d:ed:fb:ad:a3:29:42:ca:ed: c1:1f:c2:8b:8c:54:14:0d:ff:34:da:da:cc:ea:8e: b2:4e:04:64:b7:07:52:b2:83:62:8c:65:82:89:53: 12:ac:93:15:83:50:6f:7f:84:7c:97:f1:a6:ec:fb: cf:f0:a8:08:82:5f:6a:20:16:71:0b:12:dc:cc:5d: ba:58:dc:bd:6f:3c:bb:f9:e3:ba:55:2c:0f:fe:ce: c4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7F:3C:30:9F:F1:C0:1D:E1:B1:D3:A6:A6:AE:20:E7:C0:56:DC:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c091f183-d340-37c1-8dcb-aea2eac1fbc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.184.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:26:6a:8e:20:bb:67:09:19:ee:09:d8:f0:67:36:8c:60:84: 47:cf:e3:0a:b2:73:6e:b2:31:85:07:43:9d:d2:96:07:3d:80: fd:36:d0:b2:4e:19:6d:02:30:b8:7f:65:e3:c8:08:79:ac:71: 9c:93:ed:59:41:1d:2a:83:6b:36:84:90:21:be:37:0c:a2:94: 12:db:8f:f7:06:ca:79:6a:30:73:60:30:74:76:8f:12:f7:10: 92:46:fc:f4:ee:98:be:e2:a6:a5:16:82:90:ae:08:75:34:b3: 8f:0b:f5:68:24:df:9e:ad:a0:7d:da:51:b8:a8:d2:08:72:b3: d4:95:16:1e:6f:47:8e:fb:da:e3:1d:48:7c:5e:27:0a:17:70: 71:e1:5a:ca:df:18:b5:3c:e2:e3:9b:c2:ee:3f:01:af:f7:45: 8d:7d:0e:87:a1:5c:ac:e9:ed:6b:4c:45:60:bd:16:c8:5a:d9: ee:88:9e:31:54:00:4c:90:22:a5:dc:a6:7c:49:ce:23:56:bd: a4:be:c0:a1:c1:05:30:fd:5e:8b:0c:4e:81:e8:ee:9a:f4:63: 15:b4:57:bb:4d:57:d1:d8:82:5c:0e:d0:d9:c6:55:f8:4a:07: 8f:22:d6:6f:0e:44:d5:11:c0:d9:87:cb:30:8a:da:a9:2a:14: 80:f2:8d:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcNtsrdC2aHMTLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk ZTQ5ZDQwODUtOWRmNi00YTQyLWE4N2UtNmFkYzU4ZGU4NmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/G33OPkkraSpPFtawOZRM4mZRrz2RHv/p8r QO9TUlVNkWw9Q83j1mBL7TB7665+KKrFafMflegArgpxVhMjYu0q64n6du2/jhRa p6BEEC95nfw+1+MeUGVJThBiLcwKPTFthcAXFBwjgHizGOWBoIsoBsDAwVQvqRKj 10MqlskYDWgeRABKwS1niADqadxGHDhd71M/dkzgkjp2l59W7HYxGKozyO1Tgv19 7futoylCyu3BH8KLjFQUDf802trM6o6yTgRktwdSsoNijGWCiVMSrJMVg1Bvf4R8 l/Gm7PvP8KgIgl9qIBZxCxLczF26WNy9bzy7+eO6VSwP/s7EdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGd/PDCf8cAd4bHTpqauIOfAVtyiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzA5MWYxODMtZDM0MC0z N2MxLThkY2ItYWVhMmVhYzFmYmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEmao4gu2cJGe4J2PBnNoxghEfP4wqyc26yMYUHQ53Slgc9gP020LJO GW0CMLh/ZePICHmscZyT7VlBHSqDazaEkCG+NwyilBLbj/cGynlqMHNgMHR2jxL3 EJJG/PTumL7ipqUWgpCuCHU0s48L9Wgk356toH3aUbio0ghys9SVFh5vR4772uMd SHxeJwoXcHHhWsrfGLU84uObwu4/Aa/3RY19DoehXKzp7WtMRWC9Fsha2e6InjFU AEyQIqXcpnxJziNWvaS+wKHBBTD9XosMToHo7pr0YxW0V7tNV9HYglwO0NnGVfhK B48i1m8ORNURwNmHyzCK2qkqFIDyjaU= -----END CERTIFICATE-----Generated at Wed Aug 6 09:32:04 2025 by rpki-client