$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac1816ef-f693-3a2c-bce4-791ca42d5e95.roa File: ac1816ef-f693-3a2c-bce4-791ca42d5e95.roa (raw, json) Hash identifier: ftabeBQxXSByibC8/cIqcm7GOuHisx/1EObIzQXNFVA= Subject key identifier: D6:0D:48:E5:0A:03:5C:48:18:E3:51:88:1E:F8:87:E9:82:CD:94:85 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB22126EB3AB386DF9A74DA00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac1816ef-f693-3a2c-bce4-791ca42d5e95.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 7029 IP address blocks: 173.191.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:26:eb:3a:b3:86:df:9a:74:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=4c93d57c-1834-4c5e-8588-baec45a3ab92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bc:81:3a:13:ab:32:52:e0:a7:97:1e:c4:56: ab:ac:e5:46:15:7e:92:6e:d1:ea:eb:33:1b:0b:c7: 2a:e0:bc:2e:43:8e:5c:cf:8a:2f:37:89:92:ca:39: db:a1:58:9a:e1:89:ce:2e:86:8d:84:49:fa:6b:c4: 7b:79:37:91:68:1b:be:2c:cc:a2:08:2a:10:ad:c9: fe:54:12:4c:ce:8e:9a:29:ad:15:fe:9e:72:13:91: 87:ef:97:4c:ec:33:9c:c5:9f:33:90:ff:e6:d3:74: bb:74:25:fe:a8:cd:8b:1b:7e:75:40:d1:8f:cc:e1: da:fa:3d:28:56:6b:f2:98:2e:64:76:ea:bb:39:84: 0a:01:d1:8a:a9:42:49:e7:3d:a9:bb:58:6e:ff:1f: 77:9c:70:7b:c4:fa:12:2b:95:d3:2e:d4:10:81:59: 88:f9:f5:74:a3:16:91:b9:26:70:86:c2:e2:35:aa: e9:92:ee:dd:aa:39:1d:28:34:b6:98:ab:f9:7b:14: d5:7e:ae:d3:fd:b9:74:dc:bc:ac:3f:2e:9b:27:9d: 6d:4f:ca:1b:6d:41:68:c5:76:a8:4a:d5:fa:34:67: e7:47:e8:f8:57:5a:26:9e:d6:4d:e6:91:54:bd:6b: f8:bf:06:e6:cb:70:77:e8:71:a9:c6:8f:79:22:ac: 53:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0D:48:E5:0A:03:5C:48:18:E3:51:88:1E:F8:87:E9:82:CD:94:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac1816ef-f693-3a2c-bce4-791ca42d5e95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:24:ef:71:69:eb:9a:a0:7c:25:f2:28:61:1f:fb:76:d5:b8: a0:78:5a:40:5b:7f:00:02:37:f4:65:d9:b5:97:10:5b:1a:f8: e9:27:95:ee:dd:b1:4d:9d:a8:d3:01:08:ae:db:15:bb:ca:25: a0:df:03:d5:4e:2e:0e:9e:7e:1b:ee:67:df:41:0a:b4:ce:9d: 44:b6:d2:a0:26:fa:a5:32:05:0d:62:84:ae:d2:f4:51:b0:eb: b4:21:6f:f2:7d:c5:b4:e9:fe:8e:04:0c:70:19:5f:7f:27:1f: ee:3f:d7:27:60:ae:f9:ae:59:6a:09:f1:36:bb:b8:e8:ea:04: 02:17:3b:ab:28:59:e5:f5:ab:d5:0f:1a:68:10:f9:d1:86:a3: 1b:f1:50:c3:35:c7:1d:59:29:7c:70:9c:3f:e1:33:6d:35:71: 4a:d1:69:01:de:df:be:07:4b:e6:5f:a6:99:30:91:bf:99:60: 6c:80:2b:36:47:44:0a:bd:64:d7:b9:de:45:59:6f:7b:9b:ee: 60:4a:45:e9:01:46:93:b8:c6:68:4f:0a:76:a6:33:f3:e0:9b: fc:0b:94:be:75:a8:a8:8b:db:5a:b7:3e:69:45:e2:38:5c:d0: 4a:85:a3:24:be:1b:4f:f0:61:1f:c2:03:97:81:c1:10:8f:da: 6a:80:92:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyISbrOrOG35p02gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk NGM5M2Q1N2MtMTgzNC00YzVlLTg1ODgtYmFlYzQ1YTNhYjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbyBOhOrMlLgp5cexFarrOVGFX6SbtHq6zMb C8cq4LwuQ45cz4ovN4mSyjnboVia4YnOLoaNhEn6a8R7eTeRaBu+LMyiCCoQrcn+ VBJMzo6aKa0V/p5yE5GH75dM7DOcxZ8zkP/m03S7dCX+qM2LG351QNGPzOHa+j0o VmvymC5kduq7OYQKAdGKqUJJ5z2pu1hu/x93nHB7xPoSK5XTLtQQgVmI+fV0oxaR uSZwhsLiNarpku7dqjkdKDS2mKv5exTVfq7T/bl03LysPy6bJ51tT8obbUFoxXao StX6NGfnR+j4V1omntZN5pFUvWv4vwbmy3B36HGpxo95IqxTXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYNSOUKA1xIGONRiB74h+mCzZSFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWMxODE2ZWYtZjY5My0z YTJjLWJjZTQtNzkxY2E0MmQ1ZTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIck73Fp65qgfCXyKGEf+3bVuKB4WkBbfwACN/Rl2bWXEFsa+Oknle7d sU2dqNMBCK7bFbvKJaDfA9VOLg6efhvuZ99BCrTOnUS20qAm+qUyBQ1ihK7S9FGw 67Qhb/J9xbTp/o4EDHAZX38nH+4/1ydgrvmuWWoJ8Ta7uOjqBAIXO6soWeX1q9UP GmgQ+dGGoxvxUMM1xx1ZKXxwnD/hM201cUrRaQHe374HS+Zfppkwkb+ZYGyAKzZH RAq9ZNe53kVZb3ub7mBKRekBRpO4xmhPCnamM/Pgm/wLlL51qKiL21q3PmlF4jhc 0EqFoyS+G0/wYR/CA5eBwRCP2mqAkkY= -----END CERTIFICATE-----Generated at Wed Aug 6 05:51:46 2025 by rpki-client