$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a598b2b0-16e5-30a3-a8d0-df4da5fb2080.roa File: a598b2b0-16e5-30a3-a8d0-df4da5fb2080.roa (raw, json) Hash identifier: IItuA1H4RuKtygt0dE6JNTB7o0ongiBW66a4h9fqJCM= Subject key identifier: CB:A3:50:EF:46:F8:77:66:2E:D3:1E:1A:4D:9A:A5:48:00:14:AF:23 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB221730D637FB67138C3B880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a598b2b0-16e5-30a3-a8d0-df4da5fb2080.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 7029 IP address blocks: 173.191.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:73:0d:63:7f:b6:71:38:c3:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=546be683-4170-4ba4-aae0-b512f56ab35f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:db:bd:4e:0b:72:61:14:e1:78:c5:28:c5:2b: 6c:3e:8f:26:f2:30:d8:9f:d6:77:30:3a:dc:4c:9b: 11:b9:4c:f9:29:a1:de:12:30:a7:0e:21:70:d2:09: b6:63:bb:65:2f:18:0e:83:a1:c0:7d:7c:06:a6:7d: 37:63:81:f5:ee:2d:3e:0f:15:e1:da:58:c5:a8:f7: 5c:c8:39:24:84:db:8a:53:f9:38:89:d0:f7:a3:e7: fc:4e:ae:7e:7d:91:03:69:eb:87:f3:37:5f:01:e3: 69:29:ea:9b:17:a6:8b:0f:27:89:41:e8:b8:d4:a0: 51:9f:61:5c:6f:db:3e:a3:ee:de:d2:c4:72:26:89: 61:98:7f:3d:9a:2e:1b:dd:27:c3:b0:7e:74:fa:2d: a4:36:36:28:a9:28:4c:84:2b:db:aa:c2:fe:17:c6: d4:de:cc:26:9f:32:a6:2f:83:2d:ea:6b:b0:33:48: e0:8e:de:44:2e:0e:2c:76:79:90:0d:e0:6c:02:1b: bf:9a:aa:1e:b8:9b:53:51:c4:f4:98:73:e2:6f:8d: 48:ae:7b:86:0d:5b:42:4e:7e:77:ee:41:a2:c0:23: 6d:6a:a2:00:b9:9b:aa:af:c6:78:98:2c:48:09:1f: ed:9e:13:42:44:6b:78:bd:ff:39:80:52:fc:0d:08: 8a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A3:50:EF:46:F8:77:66:2E:D3:1E:1A:4D:9A:A5:48:00:14:AF:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a598b2b0-16e5-30a3-a8d0-df4da5fb2080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:fa:c9:92:76:c6:76:59:f7:13:61:e7:84:3b:64:48:df:b8: b2:61:ae:cc:6f:57:66:bb:7b:23:7a:ae:b8:3d:b7:07:76:52: 3a:87:3a:6a:02:5f:dc:33:b3:b2:41:42:61:5d:89:e5:5b:03: da:9c:5f:bd:d4:16:6a:f7:7d:e1:e2:97:0f:49:4a:06:8b:c1: ca:b2:5f:35:85:90:62:51:87:25:21:ba:f4:37:fd:fd:fb:2e: 0d:66:a6:a4:1b:28:2c:9e:06:fd:4d:d4:00:2d:72:0b:2f:4b: af:3b:4e:f0:34:20:6f:f7:86:35:07:01:73:31:08:28:ed:75: 52:17:da:54:fc:ef:e3:07:9a:0d:39:32:12:d7:cb:c3:35:c8: 5e:db:d8:f0:ed:65:6d:50:b4:18:b5:8f:08:fd:be:aa:22:ef: 15:f9:4d:59:e2:fe:fb:8d:0c:eb:f2:0c:6b:c0:50:39:ef:87: c5:6e:6d:65:a7:bd:28:8e:12:41:70:09:2d:c2:5e:1c:54:53: c4:15:7f:77:16:72:76:df:36:58:b2:c6:fd:85:4a:67:44:aa: 12:9a:b2:ec:00:39:14:35:24:74:52:db:9f:f9:e2:97:78:79: 1e:9e:8a:4b:1a:00:6f:61:e3:26:9e:c3:ac:4e:6a:4b:19:d2: 78:f8:2e:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIXMNY3+2cTjDuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTQ2YmU2ODMtNDE3MC00YmE0LWFhZTAtYjUxMmY1NmFiMzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNu9TgtyYRTheMUoxStsPo8m8jDYn9Z3MDrc TJsRuUz5KaHeEjCnDiFw0gm2Y7tlLxgOg6HAfXwGpn03Y4H17i0+DxXh2ljFqPdc yDkkhNuKU/k4idD3o+f8Tq5+fZEDaeuH8zdfAeNpKeqbF6aLDyeJQei41KBRn2Fc b9s+o+7e0sRyJolhmH89mi4b3SfDsH50+i2kNjYoqShMhCvbqsL+F8bU3swmnzKm L4Mt6muwM0jgjt5ELg4sdnmQDeBsAhu/mqoeuJtTUcT0mHPib41IrnuGDVtCTn53 7kGiwCNtaqIAuZuqr8Z4mCxICR/tnhNCRGt4vf85gFL8DQiKnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMujUO9G+HdmLtMeGk2apUgAFK8jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTU5OGIyYjAtMTZlNS0z MGEzLWE4ZDAtZGY0ZGE1ZmIyMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb9QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/6yZJ2xnZZ9xNh54Q7ZEjfuLJhrsxvV2a7eyN6rrg9twd2UjqHOmoC X9wzs7JBQmFdieVbA9qcX73UFmr3feHilw9JSgaLwcqyXzWFkGJRhyUhuvQ3/f37 Lg1mpqQbKCyeBv1N1AAtcgsvS687TvA0IG/3hjUHAXMxCCjtdVIX2lT87+MHmg05 MhLXy8M1yF7b2PDtZW1QtBi1jwj9vqoi7xX5TVni/vuNDOvyDGvAUDnvh8VubWWn vSiOEkFwCS3CXhxUU8QVf3cWcnbfNliyxv2FSmdEqhKasuwAORQ1JHRS25/54pd4 eR6eiksaAG9h4yaew6xOaksZ0nj4LnE= -----END CERTIFICATE-----Generated at Mon Aug 4 19:00:22 2025 by rpki-client