$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3da803b-f3a5-3a3d-ba9f-c1a4c45d3e7d.roa File: a3da803b-f3a5-3a3d-ba9f-c1a4c45d3e7d.roa (raw, json) Hash identifier: oyejZ4Gp6LA+T7DCSUgqvwFzIzQb9gvLLtKoKEXr4Kg= Subject key identifier: 55:D0:B7:12:E8:6A:DD:08:B3:E5:30:67:AB:35:55:51:9D:44:AD:06 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0CF144873FCE0B03DC5C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3da803b-f3a5-3a3d-ba9f-c1a4c45d3e7d.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 174.130.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:cf:14:48:73:fc:e0:b0:3d:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=7e45bdb2-5775-4f0a-a809-c981289d29bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e7:14:9c:92:3f:0e:2a:50:0c:e9:c8:eb:70: 51:e2:50:c0:78:b7:ce:4d:e0:1d:8f:f0:ec:96:3a: 9e:ab:79:1e:13:92:a3:a2:5b:e6:54:5e:63:94:1f: 27:d7:6f:29:62:97:2b:f8:d3:9c:79:4f:c2:56:39: 60:dd:77:de:d0:5f:ec:30:dc:29:6c:ea:5a:69:30: 86:df:ce:f7:f9:d4:73:d6:d5:cd:4b:d4:0c:9a:7d: 48:9c:1c:37:6b:ab:39:5a:5b:62:ef:f5:b1:ad:2d: 86:09:9a:73:ab:b6:9d:ad:6c:fc:5b:45:2d:76:03: eb:85:58:cc:86:48:49:6d:9d:fc:51:80:1e:84:ad: 09:06:24:61:0a:ab:c1:d3:e9:b9:8e:e1:01:61:aa: 53:2a:15:41:ac:16:0a:49:ef:06:6e:24:63:17:e2: c6:b9:7b:37:58:1e:be:3d:e2:ba:43:61:95:65:76: 5d:3b:a4:b0:28:14:c5:df:16:75:cc:e4:33:f0:9d: 03:16:5c:aa:8c:3d:64:63:22:5c:d8:26:12:e4:48: 6c:f1:5d:df:46:a5:bd:a8:14:53:dc:03:11:94:24: 78:d2:0b:bd:f7:22:bc:f6:a7:3a:43:b2:24:7c:6c: 38:94:1d:63:27:e5:22:90:ab:6e:ee:f9:6e:34:89: d5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D0:B7:12:E8:6A:DD:08:B3:E5:30:67:AB:35:55:51:9D:44:AD:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3da803b-f3a5-3a3d-ba9f-c1a4c45d3e7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:0c:e6:3f:e5:53:7c:a9:3c:70:f8:a7:15:15:a6:9f:ba:39: 0a:da:21:15:b7:0f:2a:91:8c:6f:ac:8b:61:5d:ac:d5:05:2e: d8:a2:fd:b1:a1:b9:fb:49:95:ef:80:90:f3:4b:81:bc:a5:cb: a3:8a:d2:16:ae:24:27:b2:97:49:b1:a6:f5:e4:e9:29:d2:6d: 76:51:72:81:e6:cb:97:91:41:64:98:4e:01:5d:26:94:81:b7: 39:12:f2:f6:81:11:ae:08:2e:85:89:4e:ac:c5:89:6f:55:c0: 06:4b:4e:5d:cc:4a:b0:87:9b:bb:4a:d9:6c:59:c2:0f:30:89: cc:e8:60:75:5b:bb:a2:9a:bb:54:e8:3a:a1:23:a4:94:05:91: c8:76:9e:18:a5:f5:6c:4a:27:db:39:7b:2c:71:ff:ca:c7:08: fc:3e:f7:24:2d:87:45:e8:30:65:30:46:5d:8a:68:f8:a3:70: a3:c6:b5:d5:fa:01:9b:e7:66:f7:0f:08:14:12:f7:ad:db:41: 97:8e:e9:b9:2e:35:50:25:7d:b1:bb:18:5c:ec:dc:6a:24:ff: 8a:00:65:b9:a0:6a:e5:53:64:b2:c2:fb:5a:12:e5:65:4c:ef: 2b:9b:2d:85:b9:c2:0d:51:5b:ea:8b:18:b7:6e:38:7b:3b:85: 44:ac:7b:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoM8USHP84LA9xcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk N2U0NWJkYjItNTc3NS00ZjBhLWE4MDktYzk4MTI4OWQyOWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOcUnJI/DipQDOnI63BR4lDAeLfOTeAdj/Ds ljqeq3keE5KjolvmVF5jlB8n128pYpcr+NOceU/CVjlg3Xfe0F/sMNwpbOpaaTCG 3873+dRz1tXNS9QMmn1InBw3a6s5Wlti7/WxrS2GCZpzq7adrWz8W0UtdgPrhVjM hkhJbZ38UYAehK0JBiRhCqvB0+m5juEBYapTKhVBrBYKSe8GbiRjF+LGuXs3WB6+ PeK6Q2GVZXZdO6SwKBTF3xZ1zOQz8J0DFlyqjD1kYyJc2CYS5Ehs8V3fRqW9qBRT 3AMRlCR40gu99yK89qc6Q7IkfGw4lB1jJ+UikKtu7vluNInV8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXQtxLoat0Is+UwZ6s1VVGdRK0GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTNkYTgwM2ItZjNhNS0z YTNkLWJhOWYtYzFhNGM0NWQzZTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCroI4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMM5j/lU3ypPHD4pxUVpp+6OQraIRW3DyqRjG+si2FdrNUFLtii/bGh uftJle+AkPNLgbyly6OK0hauJCeyl0mxpvXk6SnSbXZRcoHmy5eRQWSYTgFdJpSB tzkS8vaBEa4ILoWJTqzFiW9VwAZLTl3MSrCHm7tK2WxZwg8wiczoYHVbu6Kau1To OqEjpJQFkch2nhil9WxKJ9s5eyxx/8rHCPw+9yQth0XoMGUwRl2KaPijcKPGtdX6 AZvnZvcPCBQS963bQZeO6bkuNVAlfbG7GFzs3Gok/4oAZbmgauVTZLLC+1oS5WVM 7yubLYW5wg1RW+qLGLduOHs7hUSse7E= -----END CERTIFICATE-----Generated at Mon Aug 4 18:33:16 2025 by rpki-client