$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75bbd339-78b1-3e3f-b5ca-a2cad6c555e2.roa File: 75bbd339-78b1-3e3f-b5ca-a2cad6c555e2.roa (raw, json) Hash identifier: 7VhXRepWA9L8qcpjzCBgI0KaRfmoqjgsv5SW5YjgcqY= Subject key identifier: B9:3C:51:4A:30:1F:98:0A:36:49:B2:23:8E:9D:EC:B2:E8:88:FF:BC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A10B401941EECDC2AF7280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75bbd339-78b1-3e3f-b5ca-a2cad6c555e2.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 174.130.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:0b:40:19:41:ee:cd:c2:af:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=a53a0d99-1af4-4b98-9fe8-8f4904f5f065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1b:82:61:65:2a:af:ca:e3:c0:42:d3:e0:4a: cd:5c:54:bf:3e:f8:49:bf:37:f0:d9:9b:b1:24:8d: dd:1a:b3:b6:fc:8d:62:7e:2e:59:0b:70:f7:20:a7: d1:d7:f8:20:46:43:18:25:b8:80:9a:03:31:a6:5e: 01:93:ea:7d:d5:ab:d3:e9:05:c7:80:60:ae:39:4b: 49:57:23:5b:63:5c:6b:ae:aa:41:6c:1b:53:49:4f: c8:4e:90:86:01:e7:32:8f:92:84:ef:38:24:27:a0: ff:2c:dc:24:20:a8:e0:e8:4c:e5:0c:91:fb:1e:f8: 0c:8a:b8:38:cb:02:47:96:eb:3b:a9:34:46:79:87: 39:c4:24:5f:26:5d:07:10:2b:d4:0a:27:e6:0a:f8: 68:f9:c2:9a:a0:e9:32:cc:c1:5b:19:a2:5f:2a:dc: 00:39:91:72:ec:93:42:88:af:5a:4d:f2:f4:63:90: 04:44:cd:ce:0d:a8:49:c1:44:eb:b3:3f:24:98:d9: e2:35:88:94:9b:d1:5c:07:32:5a:64:86:66:fb:d6: 70:97:ba:48:da:43:d2:1b:66:44:f6:36:4d:38:2f: fb:2e:40:69:53:cb:9c:c6:de:5f:8d:5d:8e:1c:16: 28:2d:0d:d2:35:a5:7b:6c:38:ec:bb:a3:41:68:fd: a3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3C:51:4A:30:1F:98:0A:36:49:B2:23:8E:9D:EC:B2:E8:88:FF:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75bbd339-78b1-3e3f-b5ca-a2cad6c555e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:06:3e:91:9b:69:f7:36:32:b8:9d:de:ff:16:0c:47:d4:bd: a9:51:7a:de:37:34:46:04:55:a7:04:4e:86:93:d8:1e:ee:90: fe:af:56:4d:3e:8c:be:01:ee:1b:fc:de:93:79:47:47:97:ad: 0f:10:51:35:a9:e4:c5:a7:70:87:83:09:48:54:78:d0:f5:0d: 81:27:1e:1b:57:4a:c5:71:2c:2e:f5:ff:34:0a:f0:d3:3a:d2: b7:4a:80:3b:43:93:9b:3b:16:02:df:4a:79:71:e2:da:17:e2: 4a:3a:94:a7:9b:7b:25:d4:f1:d7:da:13:03:94:2d:9b:19:60: 83:6c:44:60:8b:f5:48:ee:03:19:e4:6e:92:61:14:9d:ba:2b: ac:6f:c0:0b:04:61:70:45:e0:41:f4:8c:c3:82:08:22:67:c9: df:e5:7f:63:b2:31:f5:d8:35:54:a4:16:ab:bf:9c:96:20:e2: 36:70:ca:ef:03:9e:a1:76:66:e3:14:17:99:65:70:38:69:9f: 0e:d3:80:5c:93:3d:5f:82:89:96:69:80:c8:6b:7d:1e:83:6f: 6c:2f:39:ab:c2:99:31:fc:3b:bd:7f:95:53:db:90:8b:b3:54: 4e:1f:4f:9f:86:1b:81:98:41:92:02:63:4a:30:86:8f:07:3d: c6:6f:3c:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoQtAGUHuzcKvcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YTUzYTBkOTktMWFmNC00Yjk4LTlmZTgtOGY0OTA0ZjVmMDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxuCYWUqr8rjwELT4ErNXFS/PvhJvzfw2Zux JI3dGrO2/I1ifi5ZC3D3IKfR1/ggRkMYJbiAmgMxpl4Bk+p91avT6QXHgGCuOUtJ VyNbY1xrrqpBbBtTSU/ITpCGAecyj5KE7zgkJ6D/LNwkIKjg6EzlDJH7HvgMirg4 ywJHlus7qTRGeYc5xCRfJl0HECvUCifmCvho+cKaoOkyzMFbGaJfKtwAOZFy7JNC iK9aTfL0Y5AERM3ODahJwUTrsz8kmNniNYiUm9FcBzJaZIZm+9Zwl7pI2kPSG2ZE 9jZNOC/7LkBpU8ucxt5fjV2OHBYoLQ3SNaV7bDjsu6NBaP2jVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLk8UUowH5gKNkmyI46d7LLoiP+8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzViYmQzMzktNzhiMS0z ZTNmLWI1Y2EtYTJjYWQ2YzU1NWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDroKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQGPpGbafc2Mrid3v8WDEfUvalRet43NEYEVacEToaT2B7ukP6vVk0+ jL4B7hv83pN5R0eXrQ8QUTWp5MWncIeDCUhUeND1DYEnHhtXSsVxLC71/zQK8NM6 0rdKgDtDk5s7FgLfSnlx4toX4ko6lKebeyXU8dfaEwOULZsZYINsRGCL9UjuAxnk bpJhFJ26K6xvwAsEYXBF4EH0jMOCCCJnyd/lf2OyMfXYNVSkFqu/nJYg4jZwyu8D nqF2ZuMUF5llcDhpnw7TgFyTPV+CiZZpgMhrfR6Db2wvOavCmTH8O71/lVPbkIuz VE4fT5+GG4GYQZICY0owho8HPcZvPGQ= -----END CERTIFICATE-----Generated at Wed Aug 6 05:27:46 2025 by rpki-client