$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e1fc0f-f9e4-3243-83a8-530ba4a18d7c.roa File: 45e1fc0f-f9e4-3243-83a8-530ba4a18d7c.roa (raw, json) Hash identifier: wB4hOigSZAPP+RSUb3DGz1Dls8nALmV1M2z6k0dk1Ss= Subject key identifier: CC:6A:50:48:4B:25:3D:A7:21:19:3F:64:2D:A1:FD:87:38:2D:CE:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0DD9BA17F4D0635B4D7C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e1fc0f-f9e4-3243-83a8-530ba4a18d7c.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 173.191.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:dd:9b:a1:7f:4d:06:35:b4:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=8ccb625a-2279-44db-96ea-e10c0313ad41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ac:e5:e5:14:7b:61:47:61:53:23:c8:47:f7: d7:b3:fc:6b:9f:89:1f:5c:cd:bc:85:dd:ca:99:43: dc:a5:83:86:5a:fe:23:81:b2:8d:5d:8c:e7:3e:5c: 7f:68:84:3f:14:22:3b:f2:ce:cb:00:43:7f:54:b5: d3:35:39:5c:0b:c9:cb:73:ea:12:83:8f:11:16:22: 72:34:5e:87:c8:c3:5e:82:99:7a:4a:43:33:b1:8e: 1f:73:e0:8e:07:aa:3e:29:46:9e:ea:c8:33:e6:92: 17:0f:2f:1b:d5:98:56:10:16:7a:37:04:6e:b7:39: d8:02:6d:4b:ef:98:22:71:6f:00:e6:8e:5d:e7:fa: 67:a7:f3:b5:0e:f0:8b:1c:69:b0:22:f0:74:ed:84: 16:88:0b:1e:e5:fb:f6:5a:d7:e7:91:1e:88:49:12: 66:34:a5:39:0d:a2:1e:36:21:fd:53:fb:bd:9c:8e: a3:fc:b0:65:fe:57:c4:0f:1b:4e:3f:c8:b4:00:a7: 60:69:a3:c2:3a:ae:32:24:0a:37:f1:5e:a0:87:5c: 7e:38:8c:dd:0b:d1:54:2c:72:8f:c3:6f:a0:5f:39: e6:c2:4f:c9:cc:71:6b:e2:90:84:05:94:99:11:fb: a9:6b:6d:ed:d4:ba:a4:00:bf:07:cb:64:66:94:ae: a4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6A:50:48:4B:25:3D:A7:21:19:3F:64:2D:A1:FD:87:38:2D:CE:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e1fc0f-f9e4-3243-83a8-530ba4a18d7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:6c:c6:6e:d6:1e:5d:e7:3b:23:bf:a7:fb:e5:1e:59:ec:6c: 48:cd:63:0e:8e:a8:f8:1a:86:c4:64:08:a6:83:5d:f5:41:5e: 62:bf:c5:e8:04:f5:a1:f0:3d:fb:08:07:3d:bb:4c:63:37:ae: 45:55:b4:28:81:96:ef:03:73:31:d9:2d:af:5b:a3:1b:f5:8e: e0:76:0f:57:85:5d:b9:c8:26:68:4e:b9:27:26:a4:47:00:94: cc:1d:a8:12:66:c3:c9:7a:ca:e4:08:96:8b:26:9e:8e:ca:70: 3b:73:94:a5:c1:4a:eb:f8:6c:e9:3a:d5:63:b2:c9:1d:cb:aa: a2:86:f9:82:8f:8e:f8:cd:2b:93:ec:50:82:41:66:c0:47:54: 26:ed:0a:43:eb:fa:05:60:0a:45:1e:77:f8:c0:86:78:9e:c3: 44:29:df:93:0f:53:58:5f:cd:0d:f5:04:72:bd:14:5d:58:14: c4:e9:08:fb:7e:73:c9:76:41:01:81:6d:17:3f:05:d1:14:41: 82:2d:ff:75:a6:52:ab:e9:30:38:36:ca:3b:59:9e:0d:16:f8: ff:e1:91:4a:42:b8:4a:c1:eb:68:73:28:f7:ac:a6:dd:7f:5e: 89:82:24:ca:49:65:a3:8d:56:19:68:c3:7a:0b:a1:4b:d8:e2: 40:3b:f1:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoN2boX9NBjW018AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk OGNjYjYyNWEtMjI3OS00NGRiLTk2ZWEtZTEwYzAzMTNhZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKzl5RR7YUdhUyPIR/fXs/xrn4kfXM28hd3K mUPcpYOGWv4jgbKNXYznPlx/aIQ/FCI78s7LAEN/VLXTNTlcC8nLc+oSg48RFiJy NF6HyMNegpl6SkMzsY4fc+COB6o+KUae6sgz5pIXDy8b1ZhWEBZ6NwRutznYAm1L 75gicW8A5o5d5/pnp/O1DvCLHGmwIvB07YQWiAse5fv2WtfnkR6ISRJmNKU5DaIe NiH9U/u9nI6j/LBl/lfEDxtOP8i0AKdgaaPCOq4yJAo38V6gh1x+OIzdC9FULHKP w2+gXznmwk/JzHFr4pCEBZSZEfupa23t1LqkAL8Hy2RmlK6k9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxqUEhLJT2nIRk/ZC2h/Yc4Lc5bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDVlMWZjMGYtZjllNC0z MjQzLTgzYTgtNTMwYmE0YTE4ZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVsxm7WHl3nOyO/p/vlHlnsbEjNYw6OqPgahsRkCKaDXfVBXmK/xegE 9aHwPfsIBz27TGM3rkVVtCiBlu8DczHZLa9boxv1juB2D1eFXbnIJmhOuScmpEcA lMwdqBJmw8l6yuQIlosmno7KcDtzlKXBSuv4bOk61WOyyR3LqqKG+YKPjvjNK5Ps UIJBZsBHVCbtCkPr+gVgCkUed/jAhniew0Qp35MPU1hfzQ31BHK9FF1YFMTpCPt+ c8l2QQGBbRc/BdEUQYIt/3WmUqvpMDg2yjtZng0W+P/hkUpCuErB62hzKPespt1/ XomCJMpJZaONVhlow3oLoUvY4kA78Xg= -----END CERTIFICATE-----Generated at Wed Aug 6 07:50:32 2025 by rpki-client