$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/137da6ce-6a99-3605-9c0c-80b0260aa5e9.roa File: 137da6ce-6a99-3605-9c0c-80b0260aa5e9.roa (raw, json) Hash identifier: ZS4ThszRM+Kjcv/30anhy9iAN5F4xDCmU+I93m6EqTY= Subject key identifier: 0B:2B:3E:F2:65:15:D7:3C:5E:CE:F0:EE:EA:B0:4A:05:EC:C2:60:59 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0FFF1D3E56E3A0C2C0700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/137da6ce-6a99-3605-9c0c-80b0260aa5e9.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 207.106.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ff:f1:d3:e5:6e:3a:0c:2c:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=f7226280-21a5-44ba-ae1d-1421db6488be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:69:e9:1b:41:05:af:45:6e:87:d7:56:c6:af: 1f:27:d3:3c:32:63:2d:a4:3f:b5:b3:1d:f7:6c:86: e0:81:39:1e:30:60:97:ed:2b:23:d1:9b:c4:36:36: 5e:27:69:9f:81:df:79:1a:35:0a:cb:9d:00:5e:b5: 61:cf:f4:5f:9a:a7:99:68:a1:24:df:0d:14:7f:21: 5a:ae:35:eb:70:c0:c0:4b:2b:03:e0:29:d4:ae:dc: 9c:6d:0e:72:36:80:3e:dd:b8:25:1d:e9:08:f9:62: 87:04:60:11:19:31:c8:cb:98:52:3c:85:ea:ca:4a: 73:07:c1:bd:ed:23:8a:85:33:f6:52:e2:8e:13:df: 5d:03:f2:3d:c9:a7:e5:da:ed:15:ce:dc:c2:cb:40: a7:29:f5:e2:fc:2b:da:9a:2d:c6:a7:cd:5f:6d:ad: 9e:65:f0:39:82:6c:14:a6:97:fb:99:de:46:64:a3: 8b:ce:85:d2:c9:e5:d3:fb:cb:d0:bc:0f:78:5c:34: 0a:b8:c5:01:26:89:81:93:e4:91:d7:6e:e8:0d:86: 27:cd:44:08:41:00:a3:ce:11:12:81:df:56:4f:5f: ec:b5:0f:84:53:a8:8f:90:a8:c1:d6:2e:78:d2:63: 92:0f:b5:a6:0a:94:40:e5:ed:e1:b2:43:b8:18:ce: a3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:2B:3E:F2:65:15:D7:3C:5E:CE:F0:EE:EA:B0:4A:05:EC:C2:60:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/137da6ce-6a99-3605-9c0c-80b0260aa5e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.106.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:2e:bb:df:4a:5d:02:51:8b:65:fe:1d:a1:ae:c1:b1:cf:23: 0c:86:44:a6:dd:83:45:5a:bf:0e:d3:a4:96:00:54:e3:7c:b3: 11:9b:80:e3:e4:48:d4:8c:11:39:63:b3:a6:ff:57:69:cd:7d: c8:4a:5d:07:5a:ee:09:20:ba:65:08:46:5b:4e:6b:b0:49:e2: 4b:55:d1:a0:14:dd:31:04:da:80:8e:6f:af:5e:9d:33:0a:c8: 00:8a:53:d0:fb:44:69:d0:42:87:e8:d7:07:15:c9:bc:f8:9e: 60:b5:7e:00:eb:26:b1:cf:5b:4f:ba:9d:6d:70:64:5a:61:6e: 10:c6:84:f0:6e:35:bc:58:36:5f:da:ae:5c:0b:c0:8f:a0:cd: ab:7e:23:1a:cf:18:77:c4:26:02:5d:a4:3b:fe:eb:39:62:4f: 5b:6e:06:0b:a9:c3:59:7e:74:82:54:32:d8:69:2c:b8:2d:7b: dc:85:61:e4:f5:f8:c1:78:ae:b5:24:8c:33:2f:b5:bb:2e:53: 18:36:ac:9e:dc:e8:4d:05:80:f2:11:7e:36:6b:96:7d:d7:ab: a8:ae:83:7d:bc:34:bc:fd:6d:dd:c5:0b:20:1d:d3:c1:f5:6e: ad:71:9e:80:cf:3d:08:6c:01:46:44:93:da:4f:ad:18:e6:ad: 99:42:05:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoP/x0+VuOgwsBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZjcyMjYyODAtMjFhNS00NGJhLWFlMWQtMTQyMWRiNjQ4OGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2npG0EFr0Vuh9dWxq8fJ9M8MmMtpD+1sx33 bIbggTkeMGCX7Ssj0ZvENjZeJ2mfgd95GjUKy50AXrVhz/RfmqeZaKEk3w0UfyFa rjXrcMDASysD4CnUrtycbQ5yNoA+3bglHekI+WKHBGARGTHIy5hSPIXqykpzB8G9 7SOKhTP2UuKOE99dA/I9yafl2u0VztzCy0CnKfXi/Cvami3Gp81fba2eZfA5gmwU ppf7md5GZKOLzoXSyeXT+8vQvA94XDQKuMUBJomBk+SR127oDYYnzUQIQQCjzhES gd9WT1/stQ+EU6iPkKjB1i540mOSD7WmCpRA5e3hskO4GM6jqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsrPvJlFdc8Xs7w7uqwSgXswmBZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTM3ZGE2Y2UtNmE5OS0z NjA1LTljMGMtODBiMDI2MGFhNWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz2rUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4uu99KXQJRi2X+HaGuwbHPIwyGRKbdg0Vavw7TpJYAVON8sxGbgOPk SNSMETljs6b/V2nNfchKXQda7gkgumUIRltOa7BJ4ktV0aAU3TEE2oCOb69enTMK yACKU9D7RGnQQofo1wcVybz4nmC1fgDrJrHPW0+6nW1wZFphbhDGhPBuNbxYNl/a rlwLwI+gzat+IxrPGHfEJgJdpDv+6zliT1tuBgupw1l+dIJUMthpLLgte9yFYeT1 +MF4rrUkjDMvtbsuUxg2rJ7c6E0FgPIRfjZrln3Xq6iug328NLz9bd3FCyAd08H1 bq1xnoDPPQhsAUZEk9pPrRjmrZlCBc4= -----END CERTIFICATE-----Generated at Wed Aug 6 00:45:50 2025 by rpki-client