$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/928c6e9d-44c4-3bf4-86b3-e5c822238165.roa File: 928c6e9d-44c4-3bf4-86b3-e5c822238165.roa (raw, json) Hash identifier: aXNlq/h0TckWUHYrlCTS/IQszcCki+nGC2XhuKg8CnI= Subject key identifier: CE:D2:E1:98:DD:CA:57:84:E5:C4:20:19:21:B2:EB:C8:86:EC:7D:9F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0CF07CDFAD6F702868720 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/928c6e9d-44c4-3bf4-86b3-e5c822238165.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 173.213.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:cf:07:cd:fa:d6:f7:02:86:87:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=058586b4-113c-4738-bdaf-53fadbb2cb9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ca:eb:28:b0:6b:84:49:2e:69:e5:fa:09:41: 4f:73:eb:15:15:be:be:9e:84:e5:fc:53:f1:8b:92: b1:e2:8b:69:01:e5:9b:0a:0c:11:81:54:e5:0f:c7: cb:9a:ef:32:31:19:1e:57:01:e7:dd:0e:1b:cc:db: 3f:54:79:cd:ad:e1:62:c2:7a:88:43:74:55:86:bd: 22:7b:bc:a4:be:0b:42:2e:57:d9:75:72:c2:84:9f: e8:2b:75:8d:ba:c3:bb:15:aa:ba:fe:2f:29:cf:01: 9b:18:34:04:57:6e:b5:f6:da:d0:11:c3:bc:6c:e1: 66:5e:c2:44:17:8d:98:15:28:bc:0b:c2:d0:e5:bf: d5:d8:1c:a6:78:fc:c9:8a:fa:34:1e:77:08:e8:be: 01:4e:ee:bb:8f:42:98:07:de:f0:24:64:79:6d:05: 00:a3:96:8d:cc:73:ff:03:0b:0c:e4:6c:70:e7:10: 8f:3d:21:7c:db:76:c8:c0:d7:fe:84:d5:0f:15:74: d1:b3:0b:8d:8b:43:2d:f7:b3:9b:e7:c5:85:b7:7c: c6:9a:bd:81:fa:fb:a3:e5:20:56:0d:f8:b5:52:1e: c1:cd:27:1a:c9:81:89:fb:9b:60:2b:61:1b:6b:6b: d9:a8:71:20:4e:6a:9a:95:e8:75:68:18:f8:00:f4: f7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D2:E1:98:DD:CA:57:84:E5:C4:20:19:21:B2:EB:C8:86:EC:7D:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/928c6e9d-44c4-3bf4-86b3-e5c822238165.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.213.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:68:03:6d:12:f6:86:2b:67:56:b2:e7:a7:93:3d:ad:ea:91: 4f:0e:cc:f5:a7:1e:58:28:b3:71:ab:c9:72:d7:0e:63:54:e2: 82:17:6c:42:01:1d:0b:2e:49:f9:14:52:a2:d2:0b:35:3b:83: 33:d8:ec:80:4f:5e:57:47:22:c2:c2:b6:5c:41:76:c0:e5:cf: c3:fe:7a:b5:05:2f:2e:b9:11:53:f8:f5:dd:89:84:ba:fa:dc: 8a:88:a7:89:84:c7:23:8c:f8:2c:8a:13:7e:05:18:db:1e:f7: b7:66:4e:91:5f:1a:77:45:17:a3:df:ab:a1:8d:c3:34:ee:7a: 74:ff:dc:fd:17:b5:eb:02:2a:8b:d8:0a:2b:5c:3b:4c:00:c9: eb:80:7f:e5:a6:c2:f4:0c:92:84:6f:3d:24:71:f9:95:33:ef: ce:07:bc:f1:9d:59:f7:9f:e2:42:0e:09:a6:1b:33:3e:c3:43: ed:02:e2:29:5e:d1:73:f3:c1:f5:79:53:c3:32:0d:8b:0d:6e: e2:bc:fe:08:a6:9b:5d:25:7c:9c:49:05:57:11:68:a1:67:26: f8:4c:b2:0b:80:c8:e5:22:47:2b:ca:0e:3e:26:42:f8:6d:fd: 7f:4f:0b:94:48:11:d6:27:a6:54:a0:44:4a:5d:49:d0:0c:d8: cb:d5:0c:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoM8HzfrW9wKGhyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MDU4NTg2YjQtMTEzYy00NzM4LWJkYWYtNTNmYWRiYjJjYjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcrrKLBrhEkuaeX6CUFPc+sVFb6+noTl/FPx i5Kx4otpAeWbCgwRgVTlD8fLmu8yMRkeVwHn3Q4bzNs/VHnNreFiwnqIQ3RVhr0i e7ykvgtCLlfZdXLChJ/oK3WNusO7Faq6/i8pzwGbGDQEV2619trQEcO8bOFmXsJE F42YFSi8C8LQ5b/V2BymePzJivo0HncI6L4BTu67j0KYB97wJGR5bQUAo5aNzHP/ AwsM5Gxw5xCPPSF823bIwNf+hNUPFXTRswuNi0Mt97Ob58WFt3zGmr2B+vuj5SBW Dfi1Uh7BzScayYGJ+5tgK2Eba2vZqHEgTmqaleh1aBj4APT3lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7S4ZjdyleE5cQgGSGy68iG7H2fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTI4YzZlOWQtNDRjNC0z YmY0LTg2YjMtZTVjODIyMjM4MTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrdWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5oA20S9oYrZ1ay56eTPa3qkU8OzPWnHlgos3GryXLXDmNU4oIXbEIB HQsuSfkUUqLSCzU7gzPY7IBPXldHIsLCtlxBdsDlz8P+erUFLy65EVP49d2JhLr6 3IqIp4mExyOM+CyKE34FGNse97dmTpFfGndFF6Pfq6GNwzTuenT/3P0XtesCKovY CitcO0wAyeuAf+WmwvQMkoRvPSRx+ZUz784HvPGdWfef4kIOCaYbMz7DQ+0C4ile 0XPzwfV5U8MyDYsNbuK8/gimm10lfJxJBVcRaKFnJvhMsguAyOUiRyvKDj4mQvht /X9PC5RIEdYnplSgREpdSdAM2MvVDLw= -----END CERTIFICATE-----Generated at Wed Aug 6 12:40:43 2025 by rpki-client