$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5f7a366-ecf9-3e0a-aa6d-4541ba89e116.roa File: d5f7a366-ecf9-3e0a-aa6d-4541ba89e116.roa (raw, json) Hash identifier: fHPu77uqHlBz/U6qvoBTszG4zi8yUR3OC00+n7l02wY= Subject key identifier: 8C:A2:A7:5E:60:A3:7A:33:DC:66:16:E1:BC:E0:AA:72:D2:EA:1E:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8C70DE416DDB50DBF26013C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5f7a366-ecf9-3e0a-aa6d-4541ba89e116.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 174.131.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:de:41:6d:db:50:db:f2:60:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=cd2355d0-0ff0-4cfa-9626-198f5a9b8c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b1:e3:38:a8:eb:1d:46:9d:94:43:03:0f:e7: 09:dd:82:75:4a:81:b9:e9:c9:0b:c6:b3:8f:89:be: 32:9c:19:f8:91:fe:e4:71:ad:04:8f:df:c4:d6:d2: e0:ae:fd:86:d7:4d:8d:ae:6d:b0:aa:38:8c:dc:2b: dc:56:04:28:b2:81:35:35:8a:df:e3:56:ac:92:db: 0c:ae:fb:6f:6c:7c:aa:f3:b9:45:1a:ee:2c:28:94: bb:92:d9:4b:fd:fd:28:9b:f8:55:3e:af:86:b7:b6: c8:f7:89:e0:a9:fb:d2:5b:fc:63:d4:25:98:e4:01: 9a:6a:d2:9e:f0:88:f6:6b:cd:df:d8:20:d9:9b:70: 1b:c3:53:bb:3a:32:2f:5f:e1:aa:ec:63:36:6c:9f: be:7c:b9:f5:f5:99:7c:61:9c:42:34:76:c4:f5:e7: 5e:85:41:b8:4a:61:77:80:1d:df:ee:5f:c7:4b:09: 53:19:b5:a0:c2:01:32:98:9d:47:50:1f:6f:ce:44: f0:8c:12:78:c1:ed:ad:61:51:4b:1d:ae:0b:2f:e9: 99:c0:d1:7f:d4:0c:f5:78:ea:4d:97:22:66:33:a8: 93:a4:7f:a6:e0:28:9e:e5:49:2f:cf:e1:ba:00:e5: 57:8b:ee:0a:58:af:55:b2:eb:0c:1b:35:c6:54:07: be:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A2:A7:5E:60:A3:7A:33:DC:66:16:E1:BC:E0:AA:72:D2:EA:1E:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5f7a366-ecf9-3e0a-aa6d-4541ba89e116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:a4:84:99:b2:17:e5:43:ed:c0:a5:6e:fc:ad:bf:8d:09:0b: 33:4a:c8:bc:5c:aa:b0:2f:35:27:f0:d5:44:54:62:ee:0f:f6: ce:17:27:c9:ac:a8:f1:1e:6d:68:4d:79:b3:de:fb:63:c8:22: 59:5a:4b:bd:48:3a:56:da:af:34:0e:69:ba:95:ab:27:8c:58: c3:a4:31:1f:62:4e:31:a4:8e:2a:3a:a9:61:78:4e:11:b3:a7: 14:2c:74:8e:0f:de:ad:66:50:44:80:03:f8:8d:26:6f:0a:65: 47:6c:0d:1a:2d:ca:d8:9b:59:36:3f:44:15:d3:de:87:ad:00: 25:00:ef:2b:86:a1:79:94:a2:fa:80:aa:9e:96:5c:31:62:a2: f0:ec:cb:b2:ec:5a:46:f9:15:ea:60:aa:77:86:87:59:75:8d: 35:0b:b5:0b:e5:05:da:88:8b:ae:1d:0a:32:c9:84:e3:cd:29: 63:e7:c7:eb:1a:18:73:f1:15:5e:d5:93:3d:a2:e6:21:80:88: 19:0a:f6:9f:d3:6b:c1:aa:e4:d2:30:da:2a:a1:fe:28:b7:05: ec:af:1e:e4:4b:41:e0:ee:64:af:38:33:85:fa:4f:34:e1:d9: 2c:41:28:54:13:d1:a5:0d:3a:e7:a4:dc:f5:87:ed:db:6e:2f: 16:55:e3:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcN5BbdtQ2/JgE8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk Y2QyMzU1ZDAtMGZmMC00Y2ZhLTk2MjYtMTk4ZjVhOWI4YzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLHjOKjrHUadlEMDD+cJ3YJ1SoG56ckLxrOP ib4ynBn4kf7kca0Ej9/E1tLgrv2G102Nrm2wqjiM3CvcVgQosoE1NYrf41asktsM rvtvbHyq87lFGu4sKJS7ktlL/f0om/hVPq+Gt7bI94ngqfvSW/xj1CWY5AGaatKe 8Ij2a83f2CDZm3Abw1O7OjIvX+Gq7GM2bJ++fLn19Zl8YZxCNHbE9edehUG4SmF3 gB3f7l/HSwlTGbWgwgEymJ1HUB9vzkTwjBJ4we2tYVFLHa4LL+mZwNF/1Az1eOpN lyJmM6iTpH+m4Cie5Ukvz+G6AOVXi+4KWK9VsusMGzXGVAe+IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyip15go3oz3GYW4bzgqnLS6h5bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDVmN2EzNjYtZWNmOS0z ZTBhLWFhNmQtNDU0MWJhODllMTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEroMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2khJmyF+VD7cClbvytv40JCzNKyLxcqrAvNSfw1URUYu4P9s4XJ8ms qPEebWhNebPe+2PIIllaS71IOlbarzQOabqVqyeMWMOkMR9iTjGkjio6qWF4ThGz pxQsdI4P3q1mUESAA/iNJm8KZUdsDRotytibWTY/RBXT3oetACUA7yuGoXmUovqA qp6WXDFiovDsy7LsWkb5FepgqneGh1l1jTULtQvlBdqIi64dCjLJhOPNKWPnx+sa GHPxFV7Vkz2i5iGAiBkK9p/Ta8Gq5NIw2iqh/ii3BeyvHuRLQeDuZK84M4X6TzTh 2SxBKFQT0aUNOuek3PWH7dtuLxZV4+w= -----END CERTIFICATE-----Generated at Wed Aug 6 11:01:58 2025 by rpki-client