$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f2756625-3400-3b21-b99a-4860555ace81.roa File: f2756625-3400-3b21-b99a-4860555ace81.roa (raw, json) Hash identifier: g1B+ZbyqU6SNSrlEBoHcaMWtyNUoeOppYH5Hq9yyceo= Subject key identifier: 47:96:02:37:CD:41:7C:7E:B6:E7:6B:75:FC:D2:AA:4F:14:83:50:F9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E605C83364BDB352442E980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f2756625-3400-3b21-b99a-4860555ace81.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 173.187.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:5c:83:36:4b:db:35:24:42:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=623195e1-151f-46bd-85a0-9e7540b4a6d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b3:9f:9d:4f:03:17:82:01:20:9f:a1:87:26: d4:59:73:3d:81:d4:17:b1:19:49:2b:d5:0a:71:de: a3:41:20:29:4d:74:11:da:60:bc:14:dd:a4:7b:e7: 3b:a8:33:85:fe:ba:ac:da:f0:2d:4f:a5:6f:0e:99: 53:91:5c:ba:47:1e:3f:b3:5b:21:3a:f0:52:94:28: 5c:66:64:f4:02:0d:c2:2e:6c:54:a9:c8:7a:01:e3: 38:e9:c4:b4:a7:a9:4b:13:e8:d9:c5:26:0a:fc:8b: 01:69:94:5d:07:92:b4:a4:29:d9:ca:35:a7:3d:5d: b1:e0:52:04:02:e1:1a:0d:d5:94:db:b1:3f:66:4c: 87:dc:17:6f:e6:61:61:6a:9a:ea:e2:5e:67:0a:46: b8:ff:96:0e:9c:7d:ca:d3:ff:11:e6:8a:91:b0:bd: 68:42:31:10:8e:4d:bf:41:1a:94:65:84:23:59:f1: 7c:6d:f5:b9:b3:35:c5:54:1e:0c:43:1d:a2:22:b5: 20:6c:ae:69:a6:e1:df:16:a5:a2:dc:41:e9:ac:03: 68:f5:5c:8b:af:ef:72:62:18:bd:31:76:d5:12:a2: c2:e8:b0:83:ba:9d:ef:56:a2:71:ea:ed:a6:5a:84: a3:22:ec:29:cf:1c:15:6a:61:7a:4b:51:ee:cc:35: ba:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:96:02:37:CD:41:7C:7E:B6:E7:6B:75:FC:D2:AA:4F:14:83:50:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f2756625-3400-3b21-b99a-4860555ace81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:ff:2b:0e:2f:b0:c8:38:86:06:3e:27:e8:d5:f6:48:42:63: 9c:5d:b9:4c:15:71:68:fd:f8:71:f5:06:cf:ab:aa:dd:92:06: 66:85:dd:b6:cb:85:da:16:73:dc:bf:3b:3c:a8:40:cc:70:19: 87:16:31:b7:ad:5d:66:f9:16:04:23:90:d2:a6:01:bb:6d:64: 0f:23:28:aa:01:67:ee:29:77:d6:9d:7e:bb:8e:23:10:03:c5: ef:5a:06:f4:23:d1:68:c4:5f:11:f0:0b:eb:d8:c5:c7:49:b9: 1e:02:51:3c:8f:1a:8a:4b:20:d7:4d:a7:45:e4:b5:84:6b:8c: 24:af:46:a1:af:86:e1:16:88:85:4b:cf:22:d0:ad:dc:68:f2: ad:9b:6c:48:fe:3b:76:d5:e1:27:5f:62:2f:db:b1:50:11:0d: 05:9c:58:f1:f3:4d:f9:0d:d1:57:c0:98:4c:2f:57:c9:47:12: 7e:22:24:ad:33:03:3a:7c:ea:00:92:05:f7:49:91:1b:16:52: 3c:30:0c:93:e5:83:b2:a0:56:b5:7f:38:ee:9d:ed:30:1d:c4: 1d:6c:ec:73:5e:34:d9:b8:7f:9b:eb:b4:62:b2:90:a7:90:b3: bb:aa:1b:a9:cb:4f:2d:03:13:9f:38:5c:1e:5b:2e:1e:2c:f8: 3a:16:f3:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYFyDNkvbNSRC6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk NjIzMTk1ZTEtMTUxZi00NmJkLTg1YTAtOWU3NTQwYjRhNmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbOfnU8DF4IBIJ+hhybUWXM9gdQXsRlJK9UK cd6jQSApTXQR2mC8FN2ke+c7qDOF/rqs2vAtT6VvDplTkVy6Rx4/s1shOvBSlChc ZmT0Ag3CLmxUqch6AeM46cS0p6lLE+jZxSYK/IsBaZRdB5K0pCnZyjWnPV2x4FIE AuEaDdWU27E/ZkyH3Bdv5mFhaprq4l5nCka4/5YOnH3K0/8R5oqRsL1oQjEQjk2/ QRqUZYQjWfF8bfW5szXFVB4MQx2iIrUgbK5ppuHfFqWi3EHprANo9VyLr+9yYhi9 MXbVEqLC6LCDup3vVqJx6u2mWoSjIuwpzxwVamF6S1HuzDW6NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEeWAjfNQXx+tudrdfzSqk8Ug1D5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjI3NTY2MjUtMzQwMC0z YjIxLWI5OWEtNDg2MDU1NWFjZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEH/Kw4vsMg4hgY+J+jV9khCY5xduUwVcWj9+HH1Bs+rqt2SBmaF3bbL hdoWc9y/OzyoQMxwGYcWMbetXWb5FgQjkNKmAbttZA8jKKoBZ+4pd9adfruOIxAD xe9aBvQj0WjEXxHwC+vYxcdJuR4CUTyPGopLINdNp0XktYRrjCSvRqGvhuEWiIVL zyLQrdxo8q2bbEj+O3bV4SdfYi/bsVARDQWcWPHzTfkN0VfAmEwvV8lHEn4iJK0z Azp86gCSBfdJkRsWUjwwDJPlg7KgVrV/OO6d7TAdxB1s7HNeNNm4f5vrtGKykKeQ s7uqG6nLTy0DE584XB5bLh4s+DoW8+8= -----END CERTIFICATE-----Generated at Sat Aug 9 05:43:52 2025 by rpki-client