$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c5c84ef7-1b9a-3132-a3a6-742a0ac581c1.roa File: c5c84ef7-1b9a-3132-a3a6-742a0ac581c1.roa (raw, json) Hash identifier: JPfnpVakfU6Uaz6mhBuPtTCmmFhI6rp4pVL1syKhlFY= Subject key identifier: 25:8C:7E:B7:18:1F:E4:45:23:3E:40:96:6F:F8:8B:CB:55:93:2E:E5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A9900B5C76F08010000875A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c5c84ef7-1b9a-3132-a3a6-742a0ac581c1.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 151.213.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:b5:c7:6f:08:01:00:00:87:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=94a1505b-1739-4359-8afd-ddc4d69752b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:67:36:53:93:9e:8d:24:61:53:d4:ba:03:5a: 62:c0:fb:10:c3:11:7d:e1:a8:48:8c:9a:7b:8e:eb: 81:52:bf:58:9a:01:9a:94:bd:b0:cc:00:4b:6f:ba: db:7e:f8:e3:d4:cf:c4:64:d9:0d:b5:55:37:32:0f: 13:87:d5:c3:20:76:14:11:1c:92:b9:c0:23:6b:18: 0d:75:68:0c:6f:a9:13:93:c9:2f:7b:40:ce:86:51: 34:ae:cd:2b:22:a6:e5:5b:0b:02:56:58:00:f1:c3: 72:8c:4f:dc:1e:d0:3b:06:9b:e9:81:dd:46:d1:c0: 30:c7:0e:87:22:2d:9e:aa:ca:34:15:b4:c0:f4:c8: 0c:99:33:04:44:50:8f:c0:58:ba:1e:47:bc:f9:35: 8a:e3:d2:9c:03:13:06:cf:33:3e:bb:cd:fa:c7:8b: 1e:e9:e6:1f:ec:44:c9:5c:8b:cd:cb:f3:b8:4a:9d: 34:89:85:45:bc:d9:e4:90:86:d5:5a:44:38:f3:ad: e1:f9:78:13:ed:f7:30:c4:6c:bf:e6:a8:1d:46:87: 00:c7:0c:b0:ab:ce:dd:e0:09:39:85:81:51:e9:c4: 60:3b:59:62:ac:f0:a5:dc:37:f9:fd:b8:4b:ab:52: 59:60:bd:23:a5:0e:d2:32:7c:62:77:4c:d2:ce:5d: 64:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:8C:7E:B7:18:1F:E4:45:23:3E:40:96:6F:F8:8B:CB:55:93:2E:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c5c84ef7-1b9a-3132-a3a6-742a0ac581c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:a7:30:57:1e:43:fb:44:1d:89:3f:a5:3a:95:b3:04:82:81: d7:ca:54:99:a3:a9:58:5b:af:2d:80:97:9f:72:09:0d:58:88: 6d:92:c1:95:e4:63:d9:0d:5d:79:b8:cf:f0:c4:ff:e3:db:0d: bb:32:e3:29:be:df:0c:a6:e8:47:82:07:a3:e8:80:15:2a:e6: 5a:d1:81:b9:7d:75:a2:3d:2d:38:9a:0f:16:cd:db:c9:ac:ee: a0:d2:3a:8d:de:e1:1c:91:eb:32:79:69:13:97:8f:d2:62:89: a4:33:fe:67:99:5a:89:d0:69:60:7b:0f:e0:cb:51:fa:1c:72: 97:a8:66:9a:9e:ab:f4:f4:57:a6:32:93:97:1b:26:e7:d6:4c: 0f:0e:ac:f4:7d:5a:12:6a:27:c6:f8:fd:67:cd:e4:9e:d3:27: 5b:3b:ec:ea:7c:a4:a0:44:e3:94:67:da:2f:ee:a0:1e:34:68: dd:04:2c:ed:72:02:3b:51:e4:47:ba:83:ce:98:cd:fa:7f:84: d9:4a:8c:a1:c4:ad:0f:34:b5:b8:2a:8e:5a:56:c3:ff:d0:66: 93:e5:f5:3d:c0:55:bb:35:d7:12:7f:0b:65:33:c8:2a:2b:7f: 2b:53:44:17:8e:42:01:6a:46:ea:7f:72:92:fc:c5:cc:df:8a: 35:88:e1:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZALXHbwgBAACHWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk OTRhMTUwNWItMTczOS00MzU5LThhZmQtZGRjNGQ2OTc1MmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmc2U5OejSRhU9S6A1piwPsQwxF94ahIjJp7 juuBUr9YmgGalL2wzABLb7rbfvjj1M/EZNkNtVU3Mg8Th9XDIHYUERySucAjaxgN dWgMb6kTk8kve0DOhlE0rs0rIqblWwsCVlgA8cNyjE/cHtA7Bpvpgd1G0cAwxw6H Ii2eqso0FbTA9MgMmTMERFCPwFi6Hke8+TWK49KcAxMGzzM+u836x4se6eYf7ETJ XIvNy/O4Sp00iYVFvNnkkIbVWkQ4863h+XgT7fcwxGy/5qgdRocAxwywq87d4Ak5 hYFR6cRgO1lirPCl3Df5/bhLq1JZYL0jpQ7SMnxid0zSzl1kJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWMfrcYH+RFIz5Alm/4i8tVky7lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzVjODRlZjctMWI5YS0z MTMyLWEzYTYtNzQyYTBhYzU4MWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl9VyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEanMFceQ/tEHYk/pTqVswSCgdfKVJmjqVhbry2Al59yCQ1YiG2SwZXk Y9kNXXm4z/DE/+PbDbsy4ym+3wym6EeCB6PogBUq5lrRgbl9daI9LTiaDxbN28ms 7qDSOo3e4RyR6zJ5aROXj9JiiaQz/meZWonQaWB7D+DLUfoccpeoZpqeq/T0V6Yy k5cbJufWTA8OrPR9WhJqJ8b4/WfN5J7TJ1s77Op8pKBE45Rn2i/uoB40aN0ELO1y AjtR5Ee6g86Yzfp/hNlKjKHErQ80tbgqjlpWw//QZpPl9T3AVbs11xJ/C2UzyCor fytTRBeOQgFqRup/cpL8xczfijWI4VE= -----END CERTIFICATE-----Generated at Tue Aug 5 16:48:24 2025 by rpki-client