$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8d62969-ec86-3c3c-ac7a-ff093daceb05.roa File: c8d62969-ec86-3c3c-ac7a-ff093daceb05.roa (raw, json) Hash identifier: dwG7SaM8roBZB9JcV9x2xaS/1L4u+GCbkEZ8a+4mVbk= Subject key identifier: 0F:11:95:EC:9C:26:2B:C7:E0:85:3A:19:1A:03:7C:F1:30:C2:FD:B8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A10852608FE729713F2080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8d62969-ec86-3c3c-ac7a-ff093daceb05.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 36679 IP address blocks: 146.145.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:08:52:60:8f:e7:29:71:3f:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=84fa733b-acac-4454-b4e3-e79608b7f23f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:29:b1:e0:9b:2e:22:b8:36:7d:e5:2c:f2:d6: de:05:d8:dc:ed:18:fc:32:9c:a6:8f:dd:77:1e:8e: e4:0e:60:c3:37:72:8d:79:dd:4b:af:e7:4e:87:1d: 8e:f4:78:0b:bb:e0:ea:b2:57:f6:00:1b:7f:2f:6f: 3d:6b:85:5c:15:cc:c7:bc:d0:e8:17:eb:7d:f5:46: 50:c5:2e:c9:12:f2:53:13:8d:27:c1:8a:cd:d1:6c: 45:19:5f:22:8d:5b:72:83:f8:0d:bc:ff:5b:ba:c6: a5:93:bc:e3:1a:7f:89:89:8c:6a:15:1b:91:88:fa: 62:0b:79:5c:6f:02:0c:da:5a:2e:6c:38:95:98:1d: b8:74:db:81:79:f2:3f:bd:e2:00:ba:93:64:42:c5: 91:6f:00:4f:6a:d6:79:78:24:1a:b5:bd:e8:42:b3: 9a:21:47:30:9c:f4:69:6c:28:cb:73:91:05:90:82: fb:bc:ec:0b:d6:27:17:ab:50:9d:c5:03:82:c1:f5: 46:1f:97:47:5f:67:36:76:b4:c3:94:5a:fe:5a:dd: fa:7c:b5:19:7c:21:11:dd:89:75:2b:39:7b:f5:dd: a3:d0:05:1f:fa:2c:be:a4:2b:32:27:31:4e:71:9b: 33:19:b0:00:47:55:b0:20:ec:5a:ff:7a:34:03:ca: 5d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:11:95:EC:9C:26:2B:C7:E0:85:3A:19:1A:03:7C:F1:30:C2:FD:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8d62969-ec86-3c3c-ac7a-ff093daceb05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 146.145.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:3b:66:d1:cc:bb:c8:a6:7a:20:68:83:52:be:b6:b0:b2:29: 8e:07:b3:67:a1:ad:db:70:61:9c:b0:b2:66:db:53:46:ea:bc: 26:10:af:f2:d5:3d:fa:d9:a6:7c:5f:55:ca:d9:f5:f9:36:3e: 28:a8:51:b2:03:c2:88:89:8d:ba:76:11:3d:40:2b:d8:c8:ff: db:b1:c7:ff:25:ce:a5:a1:8b:ff:c7:0a:c3:84:86:5c:32:ff: a9:71:88:3a:0e:d2:88:16:60:07:09:c1:03:ad:63:c3:fe:7a: f1:62:37:fa:1b:54:3b:16:11:e6:b0:e3:ca:3c:17:95:24:a3: ec:12:18:2f:46:d8:38:da:7a:23:d4:4b:16:5a:58:29:96:85: 90:92:5a:dd:da:55:23:53:1a:e9:47:41:28:5b:34:18:13:0b: 8c:b7:63:88:7a:6a:0d:1b:04:98:14:22:57:14:50:f3:f1:97: d3:9b:f5:58:93:9f:88:cb:e2:84:cd:37:69:c0:6f:38:c7:53: b5:f7:78:1d:26:a6:23:d6:6c:4e:0e:a2:3c:55:8d:d0:ca:69: 9b:e0:cd:51:58:72:2b:a6:10:74:f4:62:b1:2f:8e:e8:fc:df: c1:33:0f:9d:d8:c2:21:00:74:cd:06:4b:d6:a4:98:85:46:37: 13:f7:f7:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoQhSYI/nKXE/IIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ODRmYTczM2ItYWNhYy00NDU0LWI0ZTMtZTc5NjA4YjdmMjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiymx4JsuIrg2feUs8tbeBdjc7Rj8Mpymj913 Ho7kDmDDN3KNed1Lr+dOhx2O9HgLu+Dqslf2ABt/L289a4VcFczHvNDoF+t99UZQ xS7JEvJTE40nwYrN0WxFGV8ijVtyg/gNvP9busalk7zjGn+JiYxqFRuRiPpiC3lc bwIM2loubDiVmB24dNuBefI/veIAupNkQsWRbwBPatZ5eCQatb3oQrOaIUcwnPRp bCjLc5EFkIL7vOwL1icXq1CdxQOCwfVGH5dHX2c2drTDlFr+Wt36fLUZfCER3Yl1 Kzl79d2j0AUf+iy+pCsyJzFOcZszGbAAR1WwIOxa/3o0A8pdKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8RleycJivH4IU6GRoDfPEwwv24MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzhkNjI5NjktZWM4Ni0z YzNjLWFjN2EtZmYwOTNkYWNlYjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkpEEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACo7ZtHMu8imeiBog1K+trCyKY4Hs2ehrdtwYZywsmbbU0bqvCYQr/LV PfrZpnxfVcrZ9fk2PiioUbIDwoiJjbp2ET1AK9jI/9uxx/8lzqWhi//HCsOEhlwy /6lxiDoO0ogWYAcJwQOtY8P+evFiN/obVDsWEeaw48o8F5Uko+wSGC9G2DjaeiPU SxZaWCmWhZCSWt3aVSNTGulHQShbNBgTC4y3Y4h6ag0bBJgUIlcUUPPxl9Ob9ViT n4jL4oTNN2nAbzjHU7X3eB0mpiPWbE4OojxVjdDKaZvgzVFYciumEHT0YrEvjuj8 38EzD53YwiEAdM0GS9akmIVGNxP39wk= -----END CERTIFICATE-----Generated at Thu Aug 7 00:37:54 2025 by rpki-client