$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e38090fc-da46-3531-9381-e5b4953d080a.roa File: e38090fc-da46-3531-9381-e5b4953d080a.roa (raw, json) Hash identifier: zbOzMxkewmcMKN5JTekEKBfoYmLzevuYQnn0SaQ+lyc= Subject key identifier: C3:B4:48:B8:23:6D:C0:EC:4E:E6:60:6D:42:48:57:AC:96:E0:22:62 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E6069C3AC0B851A3BF1C800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e38090fc-da46-3531-9381-e5b4953d080a.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 173.188.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:69:c3:ac:0b:85:1a:3b:f1:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=7834a771-e738-43f3-a318-4d2223a6e56f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0d:05:da:22:5e:ef:b5:e5:1c:e9:6c:79:7a: 06:7d:08:1f:43:cd:95:42:76:a3:a4:72:72:60:ac: 7c:d6:48:86:86:7d:20:ab:64:7d:fe:57:59:8e:ed: 7c:fd:36:d8:04:2f:fe:b9:43:09:66:4d:dc:0e:21: bc:5d:22:95:28:d2:e0:af:83:2c:94:e6:73:83:4a: 98:77:c3:e9:93:63:61:9e:56:d4:7d:b7:d2:e9:7f: c8:55:31:4b:ef:dd:4e:92:96:25:4d:e3:80:6b:af: a7:1f:32:43:79:b3:2f:bd:97:b0:ca:54:4a:0d:03: 09:86:9d:6e:7b:15:3a:5a:1f:14:50:89:7c:93:92: ce:95:1a:23:69:8b:50:d5:c2:83:c6:32:cc:9f:53: 99:15:71:5c:4e:67:74:30:7c:10:43:1a:c1:84:02: 73:0d:70:b0:18:3f:76:a9:b1:6b:3d:81:fb:f0:19: 17:bf:96:d6:11:50:7b:9d:30:54:d0:2b:c1:ef:cd: 96:1c:44:57:55:3e:a2:23:37:83:7c:f1:7e:b1:2d: c7:8a:47:bb:89:f4:ce:bc:f6:af:92:c4:dd:3d:e5: 9d:e6:b9:6c:ab:6f:22:99:98:b0:8d:88:da:36:97: 1b:99:f7:d7:8b:e7:86:67:8f:74:49:fb:9e:6c:c2: 35:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B4:48:B8:23:6D:C0:EC:4E:E6:60:6D:42:48:57:AC:96:E0:22:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e38090fc-da46-3531-9381-e5b4953d080a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:1c:89:9f:e4:aa:3c:ac:78:22:e6:e4:d8:35:c2:67:2a:1a: e2:0f:ed:9d:85:6a:d5:e7:8c:78:fd:94:8c:0c:ba:a1:c4:09: 0e:57:c3:7b:25:23:5e:36:a0:2e:6b:79:ac:4e:81:d0:3f:10: dd:ca:45:8c:cd:d0:f6:f8:c0:7c:e8:19:5b:ff:c7:5c:a2:0d: d0:30:02:39:52:f3:c2:95:fb:95:0a:aa:72:9f:7d:5d:0d:a2: 93:5d:07:da:98:11:1f:56:b9:1b:54:be:81:f0:79:a0:17:47: e6:42:b2:81:b3:ef:bd:eb:4f:03:9e:03:d9:ae:d1:30:00:24: 4b:8b:7e:c6:52:0d:fa:c1:75:f4:0b:e3:78:75:61:ea:c1:d1: e1:63:88:f6:b1:ae:96:ca:f6:61:9e:11:64:18:ed:39:79:bd: e8:ad:96:b1:5f:75:6d:a4:7f:5f:80:59:f7:4c:3b:ff:82:da: f6:44:0e:17:ae:34:ec:73:16:39:f3:af:9f:57:a1:cc:92:ca: 42:b8:3f:72:75:6e:24:da:19:bb:c0:35:df:4b:a7:cb:97:69: b2:2b:b1:a1:d9:1a:fb:ac:90:8c:ef:0c:ad:cb:81:42:76:84: 85:62:42:b4:0e:f1:7f:54:f1:89:cb:73:51:c1:c8:b1:02:7a: a0:4e:6e:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYGnDrAuFGjvxyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk NzgzNGE3NzEtZTczOC00M2YzLWEzMTgtNGQyMjIzYTZlNTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg0F2iJe77XlHOlseXoGfQgfQ82VQnajpHJy YKx81kiGhn0gq2R9/ldZju18/TbYBC/+uUMJZk3cDiG8XSKVKNLgr4MslOZzg0qY d8Ppk2NhnlbUfbfS6X/IVTFL791OkpYlTeOAa6+nHzJDebMvvZewylRKDQMJhp1u exU6Wh8UUIl8k5LOlRojaYtQ1cKDxjLMn1OZFXFcTmd0MHwQQxrBhAJzDXCwGD92 qbFrPYH78BkXv5bWEVB7nTBU0CvB782WHERXVT6iIzeDfPF+sS3Hike7ifTOvPav ksTdPeWd5rlsq28imZiwjYjaNpcbmffXi+eGZ490SfuebMI10QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMO0SLgjbcDsTuZgbUJIV6yW4CJiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTM4MDkwZmMtZGE0Ni0z NTMxLTkzODEtZTViNDk1M2QwODBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbwIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAciZ/kqjyseCLm5Ng1wmcqGuIP7Z2FatXnjHj9lIwMuqHECQ5Xw3sl I142oC5reaxOgdA/EN3KRYzN0Pb4wHzoGVv/x1yiDdAwAjlS88KV+5UKqnKffV0N opNdB9qYER9WuRtUvoHweaAXR+ZCsoGz773rTwOeA9mu0TAAJEuLfsZSDfrBdfQL 43h1YerB0eFjiPaxrpbK9mGeEWQY7Tl5veitlrFfdW2kf1+AWfdMO/+C2vZEDheu NOxzFjnzr59XocySykK4P3J1biTaGbvANd9Lp8uXabIrsaHZGvuskIzvDK3LgUJ2 hIViQrQO8X9U8YnLc1HByLECeqBObqU= -----END CERTIFICATE-----Generated at Wed Jul 9 13:32:14 2025 by rpki-client