$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/670ddf6e-23cb-3962-bdbf-1c20a8a32067.roa File: 670ddf6e-23cb-3962-bdbf-1c20a8a32067.roa (raw, json) Hash identifier: uxtVaJP/nFAz39kTnz15v0KkawJ6GOllwcZbLqfLAqw= Subject key identifier: 31:4B:7F:5A:49:90:B8:61:AD:D3:F6:92:AB:27:B3:C7:4C:B0:7C:9D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A9E966503057A5A5F0A4EAA40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/670ddf6e-23cb-3962-bdbf-1c20a8a32067.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 151.213.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:65:03:05:7a:5a:5f:0a:4e:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=9e836053-9b2a-4fb1-a7c6-d8ae98a6c0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1d:41:c8:0a:65:25:87:d6:bb:f0:ad:7a:e1: c2:ac:85:a9:53:44:52:ae:ca:29:05:bc:b0:75:d8: 5b:25:4f:7d:c8:30:db:5f:99:c4:de:b9:a1:01:24: 0c:fa:ac:6d:7e:d2:e6:29:53:ee:16:37:57:77:fd: 3a:22:f1:b6:f2:fc:b7:9b:fa:ca:2f:40:b5:75:5a: b9:c1:50:b6:d3:cd:8f:50:75:b7:6f:33:1f:49:34: 89:26:8a:b7:c4:12:75:30:eb:f3:09:c3:7e:ce:c2: bd:5a:d7:1b:94:cd:24:d3:6a:c2:7d:2e:96:37:e7: d9:58:d3:4f:0e:88:62:bf:64:84:a3:c7:2e:24:87: 9d:a4:82:97:ab:60:73:f8:0a:f9:fb:7e:24:2d:e3: dd:bc:f1:bd:a5:16:ca:b2:6a:01:26:75:57:b8:3f: da:98:bf:36:5f:39:4a:e5:b4:3c:a8:6f:22:bf:8b: c1:99:ff:94:da:e2:34:a7:9d:bd:9b:46:80:28:4c: f8:e4:60:1e:8d:04:17:6d:42:51:fb:03:3b:99:df: c6:45:ba:50:57:41:f3:75:bd:99:ea:25:1a:37:7f: 12:22:1a:18:68:6c:40:51:fe:7a:54:4a:51:4d:0f: 43:2f:04:b0:fc:a0:9d:e1:ad:bc:2a:63:7e:96:04: 5f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4B:7F:5A:49:90:B8:61:AD:D3:F6:92:AB:27:B3:C7:4C:B0:7C:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/670ddf6e-23cb-3962-bdbf-1c20a8a32067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:09:85:17:e1:28:69:63:c0:26:a6:c9:87:54:2c:13:17:ae: c3:64:9c:21:8c:75:ef:e0:91:65:6f:4d:38:7a:9b:9e:24:ad: 9f:f9:d4:42:34:a6:43:d3:1a:f4:a1:2f:2a:a1:89:f2:e1:0e: d5:02:71:d0:c4:ce:55:2b:9c:83:fb:52:32:23:f7:bc:6d:7e: 5d:75:5f:1d:61:31:a4:50:8b:0d:b3:95:4b:49:83:16:6c:b6: 7a:a7:a3:20:aa:7c:c4:fd:cb:48:53:dd:3b:20:b2:45:cf:2f: 0e:c7:18:6a:11:aa:68:49:53:a6:34:a6:bf:0c:ee:5c:0b:e5: 63:39:84:e8:fa:51:e6:5c:48:58:cc:db:93:87:35:be:70:dd: 5d:dc:a9:b4:4d:0e:0c:2e:a3:0e:bf:2f:10:97:ec:f6:b6:05: 1e:c7:7b:02:f0:dd:52:df:d2:04:63:9e:49:0f:b3:93:e7:28: 8f:db:dd:21:fe:26:3a:f6:df:8e:f4:9a:e4:ca:55:2b:17:22: 21:4f:ff:c6:57:51:85:52:a2:df:af:7c:46:f3:7d:46:7c:09: 6a:ad:f7:ba:05:91:e6:53:38:36:77:a4:64:dd:6b:17:b0:e1: f5:89:4e:51:0d:c7:ad:45:e7:68:23:43:a6:70:52:99:a4:aa: a8:57:23:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelmUDBXpaXwpOqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk OWU4MzYwNTMtOWIyYS00ZmIxLWE3YzYtZDhhZTk4YTZjMGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5h1ByAplJYfWu/CteuHCrIWpU0RSrsopBbyw ddhbJU99yDDbX5nE3rmhASQM+qxtftLmKVPuFjdXd/06IvG28vy3m/rKL0C1dVq5 wVC2082PUHW3bzMfSTSJJoq3xBJ1MOvzCcN+zsK9WtcblM0k02rCfS6WN+fZWNNP Dohiv2SEo8cuJIedpIKXq2Bz+Ar5+34kLePdvPG9pRbKsmoBJnVXuD/amL82XzlK 5bQ8qG8iv4vBmf+U2uI0p529m0aAKEz45GAejQQXbUJR+wM7md/GRbpQV0Hzdb2Z 6iUaN38SIhoYaGxAUf56VEpRTQ9DLwSw/KCd4a28KmN+lgRfkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFLf1pJkLhhrdP2kqsns8dMsHydMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjcwZGRmNmUtMjNjYi0z OTYyLWJkYmYtMWMyMGE4YTMyMDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEl9WwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4JhRfhKGljwCamyYdULBMXrsNknCGMde/gkWVvTTh6m54krZ/51EI0 pkPTGvShLyqhifLhDtUCcdDEzlUrnIP7UjIj97xtfl11Xx1hMaRQiw2zlUtJgxZs tnqnoyCqfMT9y0hT3TsgskXPLw7HGGoRqmhJU6Y0pr8M7lwL5WM5hOj6UeZcSFjM 25OHNb5w3V3cqbRNDgwuow6/LxCX7Pa2BR7HewLw3VLf0gRjnkkPs5PnKI/b3SH+ Jjr23470muTKVSsXIiFP/8ZXUYVSot+vfEbzfUZ8CWqt97oFkeZTODZ3pGTdaxew 4fWJTlENx61F52gjQ6ZwUpmkqqhXI64= -----END CERTIFICATE-----Generated at Wed Aug 6 09:34:10 2025 by rpki-client