$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d8f4f9a-6ab5-3642-8534-d7ad5c45d15f.roa File: 2d8f4f9a-6ab5-3642-8534-d7ad5c45d15f.roa (raw, json) Hash identifier: IcdrElMWp/a+NtxN9aZ5sG4D4TMOV+Bye3l4g6CDz9Y= Subject key identifier: 66:3C:3E:EF:51:22:05:30:3B:79:A1:7D:5D:E9:20:D7:2B:8A:7D:57 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0FDD218D15C0AEFBE5000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d8f4f9a-6ab5-3642-8534-d7ad5c45d15f.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 174.130.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:fd:d2:18:d1:5c:0a:ef:be:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=2f63740e-71fd-43f0-b09e-bfd74bbb0b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:83:91:c4:dd:cf:38:e3:db:f2:8c:8d:cc:c1: bc:39:d8:43:c1:24:52:ec:6e:09:62:76:53:17:e4: d8:5a:63:b6:a0:c6:dd:2f:7c:ba:63:c6:56:d3:4a: d0:c6:b8:67:1e:68:2b:11:1b:77:bf:09:b3:14:d0: 45:90:6d:e0:e2:1d:37:43:cf:bc:80:f9:26:e8:9d: e1:f0:08:12:08:c8:30:cd:82:e2:ec:73:3a:2d:60: 0d:65:9f:66:84:16:14:cb:b5:dc:97:bd:cd:56:89: 1a:96:0f:11:ac:6a:f4:08:99:31:6c:30:cc:fc:13: f6:d5:3b:5c:9a:5b:b5:3d:25:22:e1:4f:41:4a:dd: 0d:00:e8:2d:1d:23:a2:75:4f:19:75:8a:09:fb:c5: bb:80:44:7c:2e:1e:1a:dd:a8:ef:94:72:66:0f:e1: 2b:18:0e:fa:2c:20:ed:f3:9e:89:99:88:53:b6:88: 15:9a:b7:29:db:73:df:e4:6f:ec:55:4e:19:dc:ac: d3:f2:0c:35:ff:b7:d2:84:31:10:e3:11:dd:ae:c9: 1f:20:74:17:f7:e9:d2:dd:e6:c4:86:5a:a1:c4:75: 55:58:77:cb:4e:21:b9:d8:9e:fc:61:25:15:c7:fd: 77:99:f4:62:3c:95:e6:7a:12:76:d5:02:5e:af:e7: 24:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:3C:3E:EF:51:22:05:30:3B:79:A1:7D:5D:E9:20:D7:2B:8A:7D:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d8f4f9a-6ab5-3642-8534-d7ad5c45d15f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:61:40:a1:91:02:46:bc:3b:25:71:4f:7a:df:41:2b:ce:76: be:4e:c5:5d:c0:93:1f:dd:7b:15:ff:fa:6b:0a:83:2d:56:f5: 62:f6:c6:b0:f6:0b:68:6e:c0:14:1a:0a:da:68:d0:6b:58:33: 74:0f:7f:1b:51:7c:a1:b7:af:b4:75:58:20:81:1d:71:eb:a2: 82:10:7e:db:41:f5:78:0c:ae:22:a9:17:88:ae:1a:f8:0d:56: 78:5f:cd:44:2b:dc:28:5f:02:dc:7a:11:6b:4c:28:de:c9:f9: 80:37:eb:d8:77:59:58:62:61:c3:4e:d8:6e:c2:ce:61:e7:94: 56:4a:09:c4:66:05:66:c3:7b:3d:c2:e6:97:99:4a:99:84:8e: a2:97:4c:8b:83:e7:ef:f5:63:0a:b1:ee:b3:b4:a7:5c:3d:57: a9:81:25:63:08:e0:cf:03:da:af:48:b4:1b:e0:a7:b6:0b:91: c2:55:5f:f7:e6:7b:1a:84:fc:a4:de:c4:64:23:a8:40:19:60: 65:7a:56:2d:a5:08:df:c7:e6:81:dc:52:8a:ff:8e:48:b0:3a: 98:4f:70:05:16:7d:49:25:51:1f:5b:e0:fb:08:16:82:4f:45: cf:c1:17:60:d1:89:fa:35:ef:33:26:a4:53:8d:a0:58:cb:4d: 90:73:88:e2 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqQoP3SGNFcCu++UAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MmY2Mzc0MGUtNzFmZC00M2YwLWIwOWUtYmZkNzRiYmIwYjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oORxN3POOPb8oyNzMG8OdhDwSRS7G4JYnZT F+TYWmO2oMbdL3y6Y8ZW00rQxrhnHmgrERt3vwmzFNBFkG3g4h03Q8+8gPkm6J3h 8AgSCMgwzYLi7HM6LWANZZ9mhBYUy7Xcl73NVokalg8RrGr0CJkxbDDM/BP21Ttc mlu1PSUi4U9BSt0NAOgtHSOidU8ZdYoJ+8W7gER8Lh4a3ajvlHJmD+ErGA76LCDt 856JmYhTtogVmrcp23Pf5G/sVU4Z3KzT8gw1/7fShDEQ4xHdrskfIHQX9+nS3ebE hlqhxHVVWHfLTiG52J78YSUVx/13mfRiPJXmehJ21QJer+ckgQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGY8Pu9RIgUwO3mhfV3pINcrin1XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmQ4ZjRmOWEtNmFiNS0z NjQyLTg1MzQtZDdhZDVjNDVkMTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBroIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAg2FAoZECRrw7JXFPet9BK852vk7FXcCTH917Ff/6awqDLVb1YvbGsPYL aG7AFBoK2mjQa1gzdA9/G1F8obevtHVYIIEdceuighB+20H1eAyuIqkXiK4a+A1W eF/NRCvcKF8C3HoRa0wo3sn5gDfr2HdZWGJhw07YbsLOYeeUVkoJxGYFZsN7PcLm l5lKmYSOopdMi4Pn7/VjCrHus7SnXD1XqYElYwjgzwPar0i0G+CntguRwlVf9+Z7 GoT8pN7EZCOoQBlgZXpWLaUI38fmgdxSiv+OSLA6mE9wBRZ9SSVRH1vg+wgWgk9F z8EXYNGJ+jXvMyakU42gWMtNkHOI4g== -----END CERTIFICATE-----Generated at Tue Aug 5 16:47:47 2025 by rpki-client