$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e92a64d8-bbc1-3838-b1dd-66b2dbc8119f.roa File: e92a64d8-bbc1-3838-b1dd-66b2dbc8119f.roa (raw, json) Hash identifier: kjbxZGrl3tI/N1AGY/kdt0C9O7/9JYEw1b0BnAgdjdU= Subject key identifier: 7F:89:DF:59:36:28:6F:DA:A6:2C:B6:81:03:41:07:B6:E5:CD:5C:76 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A70861D28BAE0A67E290D0280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e92a64d8-bbc1-3838-b1dd-66b2dbc8119f.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 7029 IP address blocks: 173.187.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:86:1d:28:ba:e0:a6:7e:29:0d:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=e9722939-da4d-4eee-bd46-9aba949dba7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9c:b4:ba:db:00:b6:14:29:f2:fc:8a:81:95: ac:51:18:d7:7e:07:29:30:ed:7a:8c:3b:5b:63:64: 2c:a3:e7:f9:11:31:00:09:4e:dc:41:da:5e:76:2c: f5:8a:25:fe:89:a5:29:2c:cd:d8:2b:af:d8:3b:e1: b8:a1:37:e5:f8:88:23:9a:31:23:8c:c7:d5:16:ff: f5:3b:43:32:3e:ca:2e:16:15:f3:f2:41:a8:62:e2: 9a:94:ad:ac:a3:c1:5b:19:59:48:7e:b1:17:31:14: 31:e8:0c:8b:ba:6c:ea:b8:f0:bb:9b:f1:5c:d2:d8: fe:e4:ae:78:ef:b7:5c:01:55:92:b7:4b:ea:5b:47: 14:65:b5:e1:6a:54:2e:f1:96:df:fe:e2:12:76:bd: 08:99:57:5c:6d:92:38:92:05:20:c7:0c:f6:18:c0: 70:ee:a6:00:e6:d9:9e:34:15:87:3d:ce:72:f0:41: 20:7a:cc:e0:52:16:99:6d:1a:fd:b9:34:fe:1b:81: c6:70:9f:22:59:28:9f:b0:28:74:cb:04:7f:df:c6: 06:21:b6:aa:a8:b9:b3:0c:6f:0e:46:c2:18:b1:12: 6a:65:21:e6:a7:05:b2:ab:2f:38:d9:0b:7e:d7:9f: fd:e4:09:9b:65:ce:51:ab:cb:a2:50:f6:b8:3c:f7: 2c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:89:DF:59:36:28:6F:DA:A6:2C:B6:81:03:41:07:B6:E5:CD:5C:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e92a64d8-bbc1-3838-b1dd-66b2dbc8119f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:d2:37:74:c9:1f:93:47:43:60:04:47:e6:7c:76:5d:c6:3e: e4:38:be:5a:08:74:fd:d9:04:f4:20:cf:39:1a:fe:67:9f:d1: f1:12:40:eb:27:12:46:a0:8c:0b:35:50:1c:7b:0a:4c:27:85: 76:84:b7:16:02:33:ca:90:ed:2f:34:1f:20:cb:48:c0:8c:5c: 32:67:18:ed:e2:90:c1:77:b4:d7:80:9b:fa:43:66:70:fd:ee: 7e:df:e7:68:05:88:d0:95:1c:0f:af:30:80:5c:91:1f:0f:33: 12:bc:25:a0:d9:0a:aa:2f:42:8c:14:da:9d:8a:f4:c9:f0:ab: 87:24:ed:af:85:b5:37:a0:0c:de:39:93:52:4a:5b:fe:75:a7: 06:01:b6:6d:b5:8a:b4:d5:8d:c2:4c:af:d9:3a:46:d2:d2:68: b5:fe:4a:06:7f:17:e1:ab:68:60:6b:bf:9c:d6:b9:48:44:3f: e2:c5:e5:10:9b:b7:ac:0d:da:a4:a1:95:ff:19:26:dd:c2:0d: 78:24:71:87:3d:8a:21:10:b0:72:96:f3:99:f2:3f:cd:4c:c3: e3:e4:8c:22:5b:86:20:6f:92:b5:0f:b7:8f:5f:d0:01:35:10: a7:2d:b3:82:f3:aa:f8:61:80:29:67:52:37:62:96:3c:94:28: e0:2c:c8:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhh0ouuCmfikNAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk ZTk3MjI5MzktZGE0ZC00ZWVlLWJkNDYtOWFiYTk0OWRiYTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJy0utsAthQp8vyKgZWsURjXfgcpMO16jDtb Y2Qso+f5ETEACU7cQdpediz1iiX+iaUpLM3YK6/YO+G4oTfl+IgjmjEjjMfVFv/1 O0MyPsouFhXz8kGoYuKalK2so8FbGVlIfrEXMRQx6AyLumzquPC7m/Fc0tj+5K54 77dcAVWSt0vqW0cUZbXhalQu8Zbf/uISdr0ImVdcbZI4kgUgxwz2GMBw7qYA5tme NBWHPc5y8EEgeszgUhaZbRr9uTT+G4HGcJ8iWSifsCh0ywR/38YGIbaqqLmzDG8O RsIYsRJqZSHmpwWyqy842Qt+15/95AmbZc5Rq8uiUPa4PPcswwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+J31k2KG/apiy2gQNBB7blzVx2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTkyYTY0ZDgtYmJjMS0z ODM4LWIxZGQtNjZiMmRiYzgxMTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbuOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbSN3TJH5NHQ2AER+Z8dl3GPuQ4vloIdP3ZBPQgzzka/mef0fESQOsn EkagjAs1UBx7CkwnhXaEtxYCM8qQ7S80HyDLSMCMXDJnGO3ikMF3tNeAm/pDZnD9 7n7f52gFiNCVHA+vMIBckR8PMxK8JaDZCqovQowU2p2K9Mnwq4ck7a+FtTegDN45 k1JKW/51pwYBtm21irTVjcJMr9k6RtLSaLX+SgZ/F+GraGBrv5zWuUhEP+LF5RCb t6wN2qShlf8ZJt3CDXgkcYc9iiEQsHKW85nyP81Mw+PkjCJbhiBvkrUPt49f0AE1 EKcts4LzqvhhgClnUjdiljyUKOAsyP4= -----END CERTIFICATE-----Generated at Wed Jul 9 13:18:56 2025 by rpki-client