$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d03a215c-cd4e-37d2-8a48-2b31308c35d6.roa File: d03a215c-cd4e-37d2-8a48-2b31308c35d6.roa (raw, json) Hash identifier: 7WQwLrWM07wO0sZMqCX8QAWTMFiWHWN1F1BV3GBA8uY= Subject key identifier: E1:77:8A:BE:9B:0D:5E:5F:49:32:09:C2:5B:FA:1C:74:37:F6:8F:2D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849CE9A3448B55BF02BF6AD6580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d03a215c-cd4e-37d2-8a48-2b31308c35d6.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 7029 IP address blocks: 173.189.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:34:48:b5:5b:f0:2b:f6:ad:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=32c24d4d-624c-429f-86d0-7b5b73f5da29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d9:4e:52:6b:22:31:7c:65:e6:7a:2a:73:17: 79:d6:80:7b:29:95:65:ce:ae:e1:d8:61:95:4a:4f: d9:76:0c:1b:3b:fc:55:1f:2a:bc:6c:f9:a1:ae:5a: ec:69:69:3f:04:22:86:66:88:e0:0d:b5:21:9d:b4: 8d:a2:a2:c5:a7:a8:5d:f6:8a:74:85:10:2d:3a:3d: 2f:2d:04:93:9b:ca:49:96:da:c9:2a:89:8f:f3:b4: 20:29:b7:c4:43:25:4f:a6:c2:8c:d0:e2:b4:19:16: 17:51:e9:17:89:af:f3:5f:8e:05:0e:86:76:57:40: 65:63:eb:e5:be:ed:cc:cd:a9:98:f4:7a:9c:bf:d4: 1e:13:23:9a:3e:d4:58:d3:a2:b0:7c:8f:1d:bd:2e: 30:3c:93:22:46:70:f8:34:92:ce:97:00:4e:c5:d9: 12:a3:2b:35:00:21:36:4e:ff:73:c1:9d:43:52:64: 5f:4f:83:81:b2:f5:78:26:e2:a0:bc:1d:73:f7:b3: 61:19:cd:15:5e:72:04:07:8d:47:4a:32:55:5b:ff: 68:ae:69:6b:aa:91:96:2f:36:5e:cc:af:73:19:62: b6:12:24:e0:0b:34:29:32:59:6b:a9:b4:12:a0:6f: c8:0c:4c:58:96:af:8b:cc:43:d6:e6:72:f9:d8:e9: c0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:77:8A:BE:9B:0D:5E:5F:49:32:09:C2:5B:FA:1C:74:37:F6:8F:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d03a215c-cd4e-37d2-8a48-2b31308c35d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:14:01:82:d6:30:06:81:9e:a5:98:17:42:ec:b8:c8:46:db: f0:98:58:a7:7b:4a:02:da:0e:89:ae:89:2b:ca:fe:6d:4c:bd: 1c:19:1a:97:b3:af:3d:7d:f0:27:10:ed:2e:1f:50:72:c7:0d: d0:b5:10:53:8f:d2:de:62:8a:8d:00:15:45:dd:e4:c6:9e:a7: 73:6f:27:f0:6e:82:c7:14:2c:7a:be:4b:98:e8:14:ce:62:4e: 3e:cc:5f:5c:f2:a6:56:28:4b:56:98:ce:53:3a:95:be:b3:56: 21:c7:93:b8:38:08:51:06:03:e0:4b:54:43:ec:af:f7:a1:cc: cb:16:b4:97:cd:e4:64:31:f5:0b:75:f5:c8:b4:a2:f6:8f:37: 6c:b9:4f:06:b6:bd:ff:b6:64:05:d6:0d:f4:6c:02:54:96:07: a8:8d:23:f0:71:9d:d3:76:52:0a:01:1e:09:24:92:11:67:b2: 00:5a:fd:cf:23:d0:3c:67:7f:17:e7:ca:d1:ba:d3:7c:44:72: bf:b9:ba:64:48:78:2c:cc:2d:18:45:15:41:6b:d5:53:6f:28: 9e:fa:47:3b:33:80:af:c6:73:0e:c9:3a:35:2f:0b:e2:85:a8: 09:5f:28:47:a5:ba:84:32:89:22:34:76:ba:6b:76:45:75:e8: 93:3c:6f:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmjRItVvwK/atZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk MzJjMjRkNGQtNjI0Yy00MjlmLTg2ZDAtN2I1YjczZjVkYTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtlOUmsiMXxl5noqcxd51oB7KZVlzq7h2GGV Sk/ZdgwbO/xVHyq8bPmhrlrsaWk/BCKGZojgDbUhnbSNoqLFp6hd9op0hRAtOj0v LQSTm8pJltrJKomP87QgKbfEQyVPpsKM0OK0GRYXUekXia/zX44FDoZ2V0BlY+vl vu3MzamY9Hqcv9QeEyOaPtRY06KwfI8dvS4wPJMiRnD4NJLOlwBOxdkSoys1ACE2 Tv9zwZ1DUmRfT4OBsvV4JuKgvB1z97NhGc0VXnIEB41HSjJVW/9ormlrqpGWLzZe zK9zGWK2EiTgCzQpMllrqbQSoG/IDExYlq+LzEPW5nL52OnATwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOF3ir6bDV5fSTIJwlv6HHQ39o8tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDAzYTIxNWMtY2Q0ZS0z N2QyLThhNDgtMmIzMTMwOGMzNWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrb1oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYUAYLWMAaBnqWYF0LsuMhG2/CYWKd7SgLaDomuiSvK/m1MvRwZGpez rz198CcQ7S4fUHLHDdC1EFOP0t5iio0AFUXd5Maep3NvJ/BugscULHq+S5joFM5i Tj7MX1zyplYoS1aYzlM6lb6zViHHk7g4CFEGA+BLVEPsr/ehzMsWtJfN5GQx9Qt1 9ci0ovaPN2y5Twa2vf+2ZAXWDfRsAlSWB6iNI/BxndN2UgoBHgkkkhFnsgBa/c8j 0DxnfxfnytG603xEcr+5umRIeCzMLRhFFUFr1VNvKJ76RzszgK/Gcw7JOjUvC+KF qAlfKEeluoQyiSI0drprdkV16JM8b8k= -----END CERTIFICATE-----Generated at Sun Jun 15 19:59:34 2025 by rpki-client