$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afd73cfa-d554-3b30-bffa-b30f657362a8.roa File: afd73cfa-d554-3b30-bffa-b30f657362a8.roa (raw, json) Hash identifier: 8c0kxrjVsOQ9BDaJ4jMymf+wlszsAekwg+vrP1DXeOI= Subject key identifier: 90:08:A7:69:85:9C:24:B8:46:69:BF:A9:D4:5F:BA:07:8E:91:52:7D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0CEFA48C2DBC0943E7000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afd73cfa-d554-3b30-bffa-b30f657362a8.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 173.191.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ce:fa:48:c2:db:c0:94:3e:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=8878263c-148b-406f-bae2-fdcd638edb91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0a:dc:46:1c:38:fa:59:84:83:f9:18:c5:33: cb:da:81:25:c6:bd:38:ab:97:7f:52:43:e0:a3:29: 6c:fe:77:58:4d:b9:ad:16:7c:06:05:75:27:68:f1: f6:74:8a:02:a6:fb:c9:50:38:02:1e:9b:79:20:ca: b6:e8:5e:4f:3c:a8:41:13:fb:d4:0e:a8:9f:e8:a6: ef:e0:17:01:b2:64:af:b3:9f:4b:58:38:07:a8:ad: 50:18:9f:55:5e:a6:54:95:28:77:d3:0f:3e:4e:75: ec:ca:ea:79:16:df:c3:46:46:c6:be:96:47:d8:13: 98:6a:a5:9c:2c:da:e5:b8:67:b5:b6:6c:37:44:3e: 71:18:34:8a:39:25:be:07:c7:a9:14:5c:d1:5d:36: 42:33:f7:42:03:86:23:c2:56:53:ea:aa:94:99:9b: ac:57:97:d8:a2:97:0b:96:53:cf:54:01:d7:be:f5: 0b:26:32:97:18:3a:6e:74:5c:78:62:64:e2:0e:d2: 7f:36:33:a2:08:71:c7:8f:51:30:f3:9c:c0:75:fa: d3:67:ac:cd:7d:33:12:38:d5:f9:39:e7:88:97:ee: cd:0b:6e:db:86:cc:5d:f3:a6:a2:66:a0:4f:77:15: df:71:34:a9:be:a7:9f:e4:56:5f:f1:74:d3:3c:67: f8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:08:A7:69:85:9C:24:B8:46:69:BF:A9:D4:5F:BA:07:8E:91:52:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afd73cfa-d554-3b30-bffa-b30f657362a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:7c:31:be:bd:e0:4f:de:2c:11:a6:04:89:8c:a0:77:52:ba: 4a:02:16:c0:f2:99:52:08:80:08:b9:6e:18:d6:34:14:7b:cb: b3:19:d1:4d:07:48:96:2d:40:2f:f8:ec:93:5b:5e:8f:db:39: ea:6d:a3:e9:67:53:77:46:99:4c:f5:1d:43:df:cc:ec:b2:8d: 09:c0:38:00:7f:09:54:d0:4f:99:c9:40:67:82:e9:97:40:ec: 6d:99:8a:17:43:db:6c:7c:73:9e:93:af:81:a2:ce:2b:7f:08: be:12:0f:5c:8a:98:61:a9:6d:85:89:6b:04:db:b5:a1:d8:ce: 15:07:e4:ce:4c:24:5f:8c:e3:bb:1c:42:78:6a:7f:91:63:65: 47:9f:b8:87:2b:d3:a6:fa:8d:54:80:11:b7:5f:c8:3c:ff:27: 72:0e:ab:1f:23:e7:d0:c9:1d:aa:19:bc:aa:3b:5c:de:6a:d9: b5:a3:ba:1e:d6:b9:70:89:f1:dd:fc:d3:b2:11:b8:57:c3:34: c9:03:64:41:38:00:d4:7e:ca:9a:df:e5:05:2f:89:ee:cc:76: 00:9f:15:94:1d:71:01:4d:6f:c4:93:81:49:4e:17:66:af:64: bb:7a:7f:a6:5c:ea:07:30:0d:2b:e1:b4:c4:88:5e:c0:ed:9b: 83:13:2b:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoM76SMLbwJQ+cAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ODg3ODI2M2MtMTQ4Yi00MDZmLWJhZTItZmRjZDYzOGVkYjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuArcRhw4+lmEg/kYxTPL2oElxr04q5d/UkPg oyls/ndYTbmtFnwGBXUnaPH2dIoCpvvJUDgCHpt5IMq26F5PPKhBE/vUDqif6Kbv 4BcBsmSvs59LWDgHqK1QGJ9VXqZUlSh30w8+TnXsyup5Ft/DRkbGvpZH2BOYaqWc LNrluGe1tmw3RD5xGDSKOSW+B8epFFzRXTZCM/dCA4YjwlZT6qqUmZusV5fYopcL llPPVAHXvvULJjKXGDpudFx4YmTiDtJ/NjOiCHHHj1Ew85zAdfrTZ6zNfTMSONX5 OeeIl+7NC27bhsxd86aiZqBPdxXfcTSpvqef5FZf8XTTPGf4JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAIp2mFnCS4Rmm/qdRfugeOkVJ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWZkNzNjZmEtZDU1NC0z YjMwLWJmZmEtYjMwZjY1NzM2MmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAV8Mb694E/eLBGmBImMoHdSukoCFsDymVIIgAi5bhjWNBR7y7MZ0U0H SJYtQC/47JNbXo/bOepto+lnU3dGmUz1HUPfzOyyjQnAOAB/CVTQT5nJQGeC6ZdA 7G2ZihdD22x8c56Tr4Gizit/CL4SD1yKmGGpbYWJawTbtaHYzhUH5M5MJF+M47sc Qnhqf5FjZUefuIcr06b6jVSAEbdfyDz/J3IOqx8j59DJHaoZvKo7XN5q2bWjuh7W uXCJ8d3807IRuFfDNMkDZEE4ANR+yprf5QUvie7MdgCfFZQdcQFNb8STgUlOF2av ZLt6f6Zc6gcwDSvhtMSIXsDtm4MTK3I= -----END CERTIFICATE-----Generated at Wed Aug 6 13:07:33 2025 by rpki-client