$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c27ae8a-1fd5-388e-a051-f697661a310c.roa File: 4c27ae8a-1fd5-388e-a051-f697661a310c.roa (raw, json) Hash identifier: saUUMbbr27LwChv9hLgbfakwxydo1VxffFc/E6u42DA= Subject key identifier: F6:54:BE:86:D1:21:12:7C:9E:D2:7D:36:8E:9F:B7:4A:1D:52:4B:1C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0FE36E71EC59937FC5D40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c27ae8a-1fd5-388e-a051-f697661a310c.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 174.131.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:fe:36:e7:1e:c5:99:37:fc:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=5a010f1b-df43-48e4-bc09-d9ae2c187689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e7:c3:d4:9c:2b:ad:24:0e:94:2c:1a:2b:d1: 57:29:26:5b:1a:b1:8c:13:3d:07:b5:73:3f:f6:20: 5d:e7:0c:2d:f3:4f:a0:99:f1:3a:2f:03:75:a7:17: 58:cc:ad:1a:0d:76:09:cf:86:2e:77:c0:ff:b3:e6: a0:8a:89:f0:b9:20:e3:94:70:f8:05:f2:43:78:cf: b3:5f:ce:c2:e6:db:cf:4b:c4:27:0d:bf:ee:63:6d: 7e:0f:a4:21:19:79:1f:a2:aa:f7:84:a5:cb:31:f5: 59:c4:5e:4c:51:16:eb:5e:af:1b:d1:39:23:46:a5: dd:60:10:6d:6a:5f:aa:63:4a:6e:0c:33:93:4c:e6: 35:db:cd:98:0c:85:93:ec:c2:46:69:65:bf:ef:e1: 20:1a:b4:8e:2d:49:fc:94:e7:92:1a:da:c4:26:59: 4a:08:e4:b8:25:77:18:2c:31:4b:d7:b7:d0:0f:89: 8c:ce:ed:4d:2b:40:63:e5:ca:ed:59:75:7d:47:06: 55:1a:01:30:61:4a:26:1b:50:02:9a:92:b7:2d:fd: 9e:4c:1b:aa:5a:db:77:b6:60:8c:eb:21:36:06:f9: 9c:c3:cd:64:d6:61:9c:30:a0:4e:18:ba:1b:e6:55: 85:b1:1b:d9:33:8d:d1:39:66:94:bd:66:7a:4d:5d: c0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:54:BE:86:D1:21:12:7C:9E:D2:7D:36:8E:9F:B7:4A:1D:52:4B:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c27ae8a-1fd5-388e-a051-f697661a310c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:54:a3:67:50:65:07:27:6e:77:7d:62:60:e7:43:1b:da:a9: 3b:27:be:6c:ab:d9:5b:5e:f0:d3:a5:fb:34:6c:48:18:47:a2: af:13:68:b9:d4:14:7b:ff:ee:41:a7:23:df:82:5d:9d:8a:6f: 93:9b:b1:a5:ef:3a:7f:24:20:40:43:7b:7c:a5:3a:58:a5:eb: 0a:fc:21:2a:c6:55:0b:93:ff:88:e8:90:d7:2a:02:08:6d:9f: 7c:f1:8e:87:51:8d:38:c7:7f:6e:68:10:46:cc:ac:6a:7e:46: d2:1c:85:e2:2e:42:56:fb:81:ba:6b:7d:1c:b1:3f:b0:46:22: 4e:a6:41:36:e6:ee:f8:5c:95:e7:68:18:b2:bd:66:af:dc:15: 74:1d:9b:f2:90:d4:14:60:60:62:21:05:65:e5:1a:f1:75:be: 86:51:01:4b:fb:c6:b3:b3:0f:25:90:21:25:b7:b5:1d:28:46: 01:f9:38:9c:27:af:4a:b0:2c:d7:b7:db:da:05:f5:5f:00:cf: 8c:05:7c:19:40:ac:4e:c9:19:7f:f5:5b:73:a8:32:6a:1b:97: 8c:cc:5f:9f:74:1a:26:25:6f:bb:1f:c7:12:69:c2:22:db:98: be:d0:89:70:78:08:59:88:b1:5f:61:19:f8:7c:09:1f:26:40: 37:0f:a8:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoP425x7FmTf8XUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NWEwMTBmMWItZGY0My00OGU0LWJjMDktZDlhZTJjMTg3Njg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiefD1JwrrSQOlCwaK9FXKSZbGrGMEz0HtXM/ 9iBd5wwt80+gmfE6LwN1pxdYzK0aDXYJz4Yud8D/s+agionwuSDjlHD4BfJDeM+z X87C5tvPS8QnDb/uY21+D6QhGXkfoqr3hKXLMfVZxF5MURbrXq8b0TkjRqXdYBBt al+qY0puDDOTTOY1282YDIWT7MJGaWW/7+EgGrSOLUn8lOeSGtrEJllKCOS4JXcY LDFL17fQD4mMzu1NK0Bj5crtWXV9RwZVGgEwYUomG1ACmpK3Lf2eTBuqWtt3tmCM 6yE2Bvmcw81k1mGcMKBOGLob5lWFsRvZM43ROWaUvWZ6TV3ABwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZUvobRIRJ8ntJ9No6ft0odUkscMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGMyN2FlOGEtMWZkNS0z ODhlLWEwNTEtZjY5NzY2MWEzMTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCroPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJUo2dQZQcnbnd9YmDnQxvaqTsnvmyr2Vte8NOl+zRsSBhHoq8TaLnU FHv/7kGnI9+CXZ2Kb5ObsaXvOn8kIEBDe3ylOlil6wr8ISrGVQuT/4jokNcqAght n3zxjodRjTjHf25oEEbMrGp+RtIcheIuQlb7gbprfRyxP7BGIk6mQTbm7vhcledo GLK9Zq/cFXQdm/KQ1BRgYGIhBWXlGvF1voZRAUv7xrOzDyWQISW3tR0oRgH5OJwn r0qwLNe329oF9V8Az4wFfBlArE7JGX/1W3OoMmobl4zMX590GiYlb7sfxxJpwiLb mL7QiXB4CFmIsV9hGfh8CR8mQDcPqJU= -----END CERTIFICATE-----Generated at Wed Aug 6 09:39:18 2025 by rpki-client