$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1359896e-50e4-34a1-9043-424e4c0414c3.roa File: 1359896e-50e4-34a1-9043-424e4c0414c3.roa (raw, json) Hash identifier: Ki8WuXDoarMlkx/5ag4ErfhfpS6ywL1rNIcnDjc0ZBA= Subject key identifier: 86:56:15:FA:97:63:3D:88:FF:A9:07:53:5B:F8:86:FD:62:D3:38:32 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D2CA2429C662A124F8D81280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1359896e-50e4-34a1-9043-424e4c0414c3.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 173.187.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:24:29:c6:62:a1:24:f8:d8:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=d2577083-f07e-4899-bd96-6a5a09b73eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:75:5e:37:a4:64:36:a9:b9:cc:c2:88:58:e9: a4:7d:4d:f4:60:a4:4a:df:6f:da:fe:98:1e:99:ea: a2:f7:7d:a5:87:1d:0e:d2:96:88:1b:e9:54:44:38: fa:31:74:88:dd:2c:2c:6d:97:c2:d6:c9:03:c2:59: f9:12:18:6c:e0:07:44:10:a2:b3:4f:ba:b0:a9:8b: 86:aa:4a:9e:9d:91:b3:4b:4a:4d:5a:63:05:40:0b: 38:6c:d4:d6:f6:21:ad:53:46:69:16:3c:f3:e9:33: b1:c9:9e:16:27:a6:72:3a:94:7f:cc:59:0e:7d:55: cc:b7:eb:d3:d7:63:2d:21:9e:9d:49:8d:a5:4c:27: 72:3e:02:d1:d8:df:02:11:53:ab:78:43:56:f6:ef: 5a:f4:fc:d1:f6:ef:01:80:b6:59:86:59:8e:1a:35: 36:ba:3b:9b:9f:b6:dc:9b:87:69:68:73:ee:d5:fd: 2e:ce:4e:1a:14:88:95:68:84:14:c3:58:fc:57:2c: 60:95:fc:2f:cf:75:56:07:17:d7:80:c0:fd:dd:ad: 12:0e:cd:b3:32:0c:a5:d0:98:86:ac:e9:f9:0b:34: e1:1a:b0:a3:56:d7:8b:53:80:53:3d:e2:6f:63:05: af:93:d6:e9:66:fc:48:56:42:62:b4:22:4d:28:dd: f4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:56:15:FA:97:63:3D:88:FF:A9:07:53:5B:F8:86:FD:62:D3:38:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1359896e-50e4-34a1-9043-424e4c0414c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:80:8a:97:1b:27:87:6c:12:1f:e2:c1:94:52:8b:30:14:19: aa:17:68:f1:15:f8:54:ef:67:73:c2:65:98:55:b6:69:54:0c: 80:09:2a:b3:6b:18:a3:64:e0:39:f5:65:5a:b1:b2:f5:a3:d0: 89:36:75:5f:01:67:f8:ab:e5:77:9a:5a:5c:d9:13:e0:5d:6a: 96:67:04:45:d9:bf:40:c9:db:0b:f0:ca:19:25:a4:30:c3:0b: 86:36:c2:a3:05:bf:33:6d:3f:f1:01:58:ce:cf:4c:55:6b:84: 57:d6:db:ad:76:62:cb:f8:e9:b2:06:36:69:b4:91:38:c8:82: 3a:c2:bb:50:c2:8a:92:c1:e2:c5:ee:ab:ef:01:de:b0:73:68: df:9d:fa:06:1e:6f:ce:af:79:a0:71:27:61:1a:8f:1c:0c:6a: aa:f9:3b:3b:3e:4b:8b:57:86:00:79:5e:5b:8a:89:e2:af:2a: 43:17:e6:fd:5f:d4:e4:7e:b3:b5:bf:42:61:b6:ad:59:78:ca: 4e:4d:e6:63:85:1e:97:73:a3:1e:71:fa:8d:d5:27:88:5d:df: 15:24:60:a0:07:71:5b:0f:f8:60:59:03:b2:a5:5b:4c:a8:37: 65:c1:f9:6d:0a:56:29:d8:8c:57:53:41:4f:d5:6c:22:b3:4e: 1c:8d:1e:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyiQpxmKhJPjYEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk ZDI1NzcwODMtZjA3ZS00ODk5LWJkOTYtNmE1YTA5YjczZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHVeN6RkNqm5zMKIWOmkfU30YKRK32/a/pge meqi932lhx0O0paIG+lURDj6MXSI3SwsbZfC1skDwln5Ehhs4AdEEKKzT7qwqYuG qkqenZGzS0pNWmMFQAs4bNTW9iGtU0ZpFjzz6TOxyZ4WJ6ZyOpR/zFkOfVXMt+vT 12MtIZ6dSY2lTCdyPgLR2N8CEVOreENW9u9a9PzR9u8BgLZZhlmOGjU2ujubn7bc m4dpaHPu1f0uzk4aFIiVaIQUw1j8Vyxglfwvz3VWBxfXgMD93a0SDs2zMgyl0JiG rOn5CzThGrCjVteLU4BTPeJvYwWvk9bpZvxIVkJitCJNKN30rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZWFfqXYz2I/6kHU1v4hv1i0zgyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTM1OTg5NmUtNTBlNC0z NGExLTkwNDMtNDI0ZTRjMDQxNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiAipcbJ4dsEh/iwZRSizAUGaoXaPEV+FTvZ3PCZZhVtmlUDIAJKrNr GKNk4Dn1ZVqxsvWj0Ik2dV8BZ/ir5XeaWlzZE+BdapZnBEXZv0DJ2wvwyhklpDDD C4Y2wqMFvzNtP/EBWM7PTFVrhFfW2612Ysv46bIGNmm0kTjIgjrCu1DCipLB4sXu q+8B3rBzaN+d+gYeb86veaBxJ2EajxwMaqr5Ozs+S4tXhgB5XluKieKvKkMX5v1f 1OR+s7W/QmG2rVl4yk5N5mOFHpdzox5x+o3VJ4hd3xUkYKAHcVsP+GBZA7KlW0yo N2XB+W0KVinYjFdTQU/VbCKzThyNHvw= -----END CERTIFICATE-----Generated at Wed Jul 9 13:28:54 2025 by rpki-client