$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/958402c9-3b0d-36b2-be3e-11fd05143ae2.roa File: 958402c9-3b0d-36b2-be3e-11fd05143ae2.roa (raw, json) Hash identifier: p96U9WVTMCIZcgrDQepHojZswJWMSV7jyJeq+pni7Ng= Subject key identifier: A8:A7:2C:27:37:06:F6:D7:54:1E:99:89:98:AC:60:CD:57:56:79:A5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8C70D5550E84F022E13B5400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/958402c9-3b0d-36b2-be3e-11fd05143ae2.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 174.131.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:d5:55:0e:84:f0:22:e1:3b:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=e90017b2-2e19-43cb-91b5-5838dffc7631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b9:4e:7c:9c:cd:d1:79:09:2c:af:b3:1d:f4: 4f:2a:a3:a6:a8:47:a7:c5:1d:12:42:68:cc:64:c1: e6:cf:10:1f:3e:6a:dc:4e:20:35:5e:58:69:c7:16: 64:1c:5e:c2:5f:db:e4:c8:21:51:fa:86:3b:e6:07: 4d:c7:5c:54:4a:88:3f:02:33:c3:cb:3c:b4:06:61: bc:d4:07:a1:b5:08:ce:12:2a:89:5b:7c:39:ec:a5: ae:52:89:c4:20:4f:67:f8:96:1c:d3:e8:b2:bd:f0: 49:5c:60:1f:bf:86:66:73:cd:1f:a2:61:da:6b:16: 69:e4:96:1f:b9:d9:73:86:08:1d:89:99:f5:06:f8: c9:da:b3:d6:71:40:29:bf:46:f8:62:85:9b:d3:ad: e7:b6:aa:4e:c9:8f:6a:b6:66:1d:ea:4e:55:69:24: be:3a:11:f9:66:59:fd:af:c0:f3:04:7c:b7:e3:c5: 36:d6:4c:e3:25:b0:8a:c5:c6:c2:23:46:87:9a:ea: 26:63:c4:c1:4f:b8:39:3c:4e:df:a9:2a:fa:02:5c: a4:72:b8:22:36:0f:35:a2:73:04:d5:3d:81:59:9f: 7b:fd:d1:67:fe:91:91:ca:61:7f:9f:6d:f8:57:2d: 9f:a1:18:50:94:25:2f:75:c2:af:ed:5f:11:ab:1b: f3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A7:2C:27:37:06:F6:D7:54:1E:99:89:98:AC:60:CD:57:56:79:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/958402c9-3b0d-36b2-be3e-11fd05143ae2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:64:03:9c:75:f4:2e:2d:80:8f:bb:97:47:c7:72:6a:e4:6b: e3:e3:e4:c6:53:02:75:75:e1:aa:8c:b4:91:22:a8:f9:d2:22: 64:c4:90:01:68:ca:56:9b:3c:92:4b:78:fe:b8:9f:e1:c5:79: 49:de:dc:bc:53:56:c1:de:72:7b:10:e7:08:87:b1:f0:91:d3: 59:bb:38:d3:4e:ab:97:9d:69:b6:54:e2:da:af:c6:55:52:78: e0:c3:76:d4:ce:16:42:c9:db:2d:a2:9a:1d:31:bc:c2:a2:ac: e6:aa:2b:a0:e4:9a:26:6d:c3:51:a7:a9:58:5b:81:ac:b6:7d: 77:54:f1:0b:f7:fb:c2:cb:58:5d:44:8f:c6:cc:ec:7d:09:bb: a3:a1:15:4b:99:82:9c:39:b4:5d:a4:50:2d:29:2d:3e:c5:f3: e0:92:08:3d:1f:f5:91:ce:c3:ae:58:89:c2:08:75:a2:e2:a3: 1c:34:f5:b2:03:2d:cc:25:2e:f2:be:5c:24:bd:07:a6:cf:90: f7:c5:22:b8:52:d4:9c:fb:55:25:66:d7:5e:26:1e:12:83:4b: 4b:e8:8f:5a:33:b7:67:66:a5:b8:4e:1f:29:54:c8:61:96:6a: 7a:92:12:c5:a3:86:1a:48:32:d3:45:dd:cf:75:c7:44:28:5f: 3e:c9:63:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcNVVDoTwIuE7VAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk ZTkwMDE3YjItMmUxOS00M2NiLTkxYjUtNTgzOGRmZmM3NjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLlOfJzN0XkJLK+zHfRPKqOmqEenxR0SQmjM ZMHmzxAfPmrcTiA1XlhpxxZkHF7CX9vkyCFR+oY75gdNx1xUSog/AjPDyzy0BmG8 1AehtQjOEiqJW3w57KWuUonEIE9n+JYc0+iyvfBJXGAfv4Zmc80fomHaaxZp5JYf udlzhggdiZn1BvjJ2rPWcUApv0b4YoWb063ntqpOyY9qtmYd6k5VaSS+OhH5Zln9 r8DzBHy348U21kzjJbCKxcbCI0aHmuomY8TBT7g5PE7fqSr6AlykcrgiNg81onME 1T2BWZ97/dFn/pGRymF/n234Vy2foRhQlCUvdcKv7V8RqxvzbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKinLCc3BvbXVB6ZiZisYM1XVnmlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTU4NDAyYzktM2IwZC0z NmIyLWJlM2UtMTFmZDA1MTQzYWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEroOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFkA5x19C4tgI+7l0fHcmrka+Pj5MZTAnV14aqMtJEiqPnSImTEkAFo ylabPJJLeP64n+HFeUne3LxTVsHecnsQ5wiHsfCR01m7ONNOq5edabZU4tqvxlVS eODDdtTOFkLJ2y2imh0xvMKirOaqK6DkmiZtw1GnqVhbgay2fXdU8Qv3+8LLWF1E j8bM7H0Ju6OhFUuZgpw5tF2kUC0pLT7F8+CSCD0f9ZHOw65YicIIdaLioxw09bID LcwlLvK+XCS9B6bPkPfFIrhS1Jz7VSVm114mHhKDS0voj1ozt2dmpbhOHylUyGGW anqSEsWjhhpIMtNF3c91x0QoXz7JY/M= -----END CERTIFICATE-----Generated at Wed Aug 6 11:12:38 2025 by rpki-client