$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e47974-9c03-36fb-bcf3-a5315f8f62b0.roa File: 45e47974-9c03-36fb-bcf3-a5315f8f62b0.roa (raw, json) Hash identifier: ZURjuwL92G9vRGACmCMbuOQH7I+4FMleQQIiRA+QMEM= Subject key identifier: 76:AF:1E:BA:46:FC:32:5E:58:01:C0:E9:2E:07:C0:86:EB:6F:23:E6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E606A2F8E91682C3921B400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e47974-9c03-36fb-bcf3-a5315f8f62b0.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 173.189.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:6a:2f:8e:91:68:2c:39:21:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=b7219584-d02d-4e1f-8d14-6e239e39e5d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:49:fb:97:80:06:64:69:fd:99:ef:e5:56:37: 35:04:8d:9f:a2:c9:c3:ce:07:ac:5b:af:1e:45:0c: 3f:42:db:8e:38:57:19:91:4e:3e:9c:8d:23:ba:d3: 1c:e9:15:e3:f0:76:9a:2c:b1:ee:c3:74:0d:14:a8: a3:6a:4a:a4:ef:5c:15:cf:c0:ec:b8:fc:8a:41:e3: 73:73:74:d7:2f:ee:00:a5:24:0a:34:8f:7b:e2:80: ee:a5:29:57:c5:b8:61:83:12:d6:6f:55:9c:a6:f8: f1:bf:6c:d4:7f:13:66:1f:7f:de:1f:04:6b:ae:1e: 7f:10:53:80:e7:2c:c2:7e:3f:2f:e2:13:0b:7c:a0: 48:1a:3a:3d:95:7b:14:07:f4:99:1c:c8:f1:ee:c2: 58:e6:b8:31:75:9e:da:72:28:69:eb:d2:96:27:ca: 94:3d:03:d2:a7:72:19:61:af:76:37:0a:1f:01:18: 5a:c3:84:f2:a0:7c:1d:84:ca:e1:5e:db:43:b9:9e: c5:21:a8:d2:71:7f:ca:1f:0c:95:a3:e1:c7:de:0c: e9:58:37:62:d6:10:c2:78:e4:c7:61:4a:26:30:4b: 2c:ff:65:ae:d5:35:ed:c7:49:32:c2:ad:05:16:fc: 61:e1:bb:a7:df:79:26:ed:4d:5f:7e:81:55:ae:db: 17:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AF:1E:BA:46:FC:32:5E:58:01:C0:E9:2E:07:C0:86:EB:6F:23:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e47974-9c03-36fb-bcf3-a5315f8f62b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:96:7f:2f:bd:65:1e:9a:c0:01:35:22:67:3a:aa:1f:9d:0a: eb:06:ff:4d:bc:e5:cc:2a:f0:7c:4b:b2:95:a5:3f:63:3c:77: 48:01:a1:10:fb:36:6c:55:fa:ba:ec:42:3f:d9:c5:80:1d:34: 90:d2:49:54:d8:b6:49:ce:26:fd:a7:ee:9f:35:b7:ef:d6:0e: d6:18:32:b2:79:ae:11:a6:49:77:3a:4a:c5:48:f7:89:1c:61: 6a:7d:90:ec:88:96:79:6a:fb:78:23:c5:17:c3:0e:53:a7:90: 5e:64:e3:66:9b:40:4a:a5:dd:4b:5c:05:95:3a:27:c0:78:7d: f7:61:e6:5a:1a:81:dd:19:0a:c8:21:be:e5:01:e8:a7:85:93: 1d:eb:c8:1f:80:df:7a:68:36:cf:8a:4f:12:89:72:bd:5f:79: b3:53:67:d2:ba:1a:46:2a:ed:d7:38:56:21:02:cf:62:46:5c: 88:69:6f:67:1a:6c:24:27:67:de:ca:77:55:e9:5f:e4:92:fa: 0f:31:b8:7a:97:35:f4:61:6f:01:f4:d7:da:e1:ab:86:a6:50: 8a:42:80:42:19:46:66:d6:87:08:21:3e:fe:86:91:4f:52:57: 18:e9:b4:0b:bb:f1:31:90:77:70:ca:4b:40:97:53:93:13:8d: 86:ae:da:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYGovjpFoLDkhtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk YjcyMTk1ODQtZDAyZC00ZTFmLThkMTQtNmUyMzllMzllNWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUn7l4AGZGn9me/lVjc1BI2fosnDzgesW68e RQw/QtuOOFcZkU4+nI0jutMc6RXj8HaaLLHuw3QNFKijakqk71wVz8DsuPyKQeNz c3TXL+4ApSQKNI974oDupSlXxbhhgxLWb1Wcpvjxv2zUfxNmH3/eHwRrrh5/EFOA 5yzCfj8v4hMLfKBIGjo9lXsUB/SZHMjx7sJY5rgxdZ7acihp69KWJ8qUPQPSp3IZ Ya92NwofARhaw4TyoHwdhMrhXttDuZ7FIajScX/KHwyVo+HH3gzpWDdi1hDCeOTH YUomMEss/2Wu1TXtx0kywq0FFvxh4bun33km7U1ffoFVrtsXCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHavHrpG/DJeWAHA6S4HwIbrbyPmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDVlNDc5NzQtOWMwMy0z NmZiLWJjZjMtYTUzMTVmOGY2MmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb16MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACWfy+9ZR6awAE1Imc6qh+dCusG/0285cwq8HxLspWlP2M8d0gBoRD7 NmxV+rrsQj/ZxYAdNJDSSVTYtknOJv2n7p81t+/WDtYYMrJ5rhGmSXc6SsVI94kc YWp9kOyIlnlq+3gjxRfDDlOnkF5k42abQEql3UtcBZU6J8B4ffdh5loagd0ZCsgh vuUB6KeFkx3ryB+A33poNs+KTxKJcr1febNTZ9K6GkYq7dc4ViECz2JGXIhpb2ca bCQnZ97Kd1XpX+SS+g8xuHqXNfRhbwH019rhq4amUIpCgEIZRmbWhwghPv6GkU9S VxjptAu78TGQd3DKS0CXU5MTjYau2go= -----END CERTIFICATE-----Generated at Wed Jul 9 12:11:58 2025 by rpki-client