$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d75ba6fd-c2e9-38bd-b4d2-0aaf2c64e221.roa File: d75ba6fd-c2e9-38bd-b4d2-0aaf2c64e221.roa (raw, json) Hash identifier: 8DQDDB291y985Xw2Wfbxfix95nIcelgfpiOfiV8cyFE= Subject key identifier: A7:29:5D:13:08:AC:B1:5A:8B:1B:9B:0C:A3:D1:45:71:D7:FC:94:1D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8575F9F6D666CB1D6C4A9F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d75ba6fd-c2e9-38bd-b4d2-0aaf2c64e221.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 151.213.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:f9:f6:d6:66:cb:1d:6c:4a:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=e25a9f07-f2c8-4757-8a14-16ac1e06baef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7b:80:df:c5:65:85:b3:08:74:3e:db:ab:c0: 04:4d:97:41:d9:22:2e:4d:89:40:f6:03:0e:bb:f1: 8e:77:2b:7c:89:21:98:f3:ac:de:3a:08:92:c5:1b: bf:a6:30:c8:58:4a:4a:95:bb:26:e9:99:29:ea:d3: 2b:96:02:cb:f3:37:e5:e5:7b:82:c0:08:92:7e:18: 26:c3:b5:4a:19:b2:2a:0f:a9:c7:16:af:c6:36:32: 5a:69:61:19:6a:99:bb:95:7a:c5:f4:8c:f7:3e:c7: b4:45:30:2b:ff:41:a7:24:ea:43:8f:5a:22:40:ef: 86:7e:85:0a:3a:fc:62:b7:a1:90:2f:41:0b:92:d7: 90:38:32:ab:b4:47:bc:c7:fe:82:3b:21:e0:9b:99: 16:41:3a:23:4f:d4:9f:a8:ff:d3:df:ab:6d:34:0c: 14:f9:3d:65:c3:df:37:7b:56:6b:53:de:ac:50:af: 01:87:0a:e8:1e:bc:41:17:cf:79:1c:40:0b:13:04: e6:1f:9a:b6:25:1c:62:77:2c:e8:4f:20:cc:4e:88: 79:8c:53:0e:15:f4:62:89:02:95:bb:d8:0a:7c:e7: 01:db:c3:f8:46:a4:7a:95:7e:fc:fa:ae:2c:e4:d7: ec:03:97:43:5d:7f:13:4e:d3:51:fa:d0:44:63:57: 67:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:29:5D:13:08:AC:B1:5A:8B:1B:9B:0C:A3:D1:45:71:D7:FC:94:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d75ba6fd-c2e9-38bd-b4d2-0aaf2c64e221.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ea:4d:0a:51:2d:e4:ed:b6:e3:45:09:a2:52:3e:eb:dc:13: f4:84:39:10:44:fe:cb:62:d0:6e:01:04:8e:28:4a:2d:13:80: 9f:6e:02:1b:43:38:71:b3:33:64:75:36:d4:f6:0b:b5:7d:33: 80:36:d1:0a:ef:13:20:52:5c:6b:3d:b1:f1:fc:1f:11:ca:55: 53:9c:82:74:35:66:87:35:70:9a:2e:ba:4c:af:04:93:d7:5a: ae:b3:bb:1f:1e:cd:5a:c5:b9:86:c8:8a:0a:37:fd:0d:25:90: 64:0e:36:ea:3c:c1:2c:32:2f:c4:5c:0b:d7:fe:4c:45:40:37: a4:5e:60:8b:ac:e9:6d:1f:6f:4d:ea:91:42:bf:75:ac:a2:1e: 40:bf:fb:5f:9b:c5:80:88:88:90:53:0e:94:8d:57:3d:86:15: 0e:05:e8:ef:8d:19:41:b2:e3:2b:c3:8c:0b:d5:c9:3f:7a:2a: a5:43:38:01:71:81:93:ed:2e:08:d4:55:2c:61:b1:71:51:96: 10:95:3b:9f:0d:50:50:80:3d:1c:82:b1:30:93:14:7c:ba:0e: 57:31:55:23:47:29:5f:4d:62:53:4b:d2:a4:ae:db:97:87:4f: 96:38:ae:62:1d:35:26:29:69:a1:1e:ba:32:bc:0c:a2:c4:94: f1:86:7a:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdfn21mbLHWxKnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk ZTI1YTlmMDctZjJjOC00NzU3LThhMTQtMTZhYzFlMDZiYWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7HuA38VlhbMIdD7bq8AETZdB2SIuTYlA9gMO u/GOdyt8iSGY86zeOgiSxRu/pjDIWEpKlbsm6Zkp6tMrlgLL8zfl5XuCwAiSfhgm w7VKGbIqD6nHFq/GNjJaaWEZapm7lXrF9Iz3Pse0RTAr/0GnJOpDj1oiQO+GfoUK Ovxit6GQL0ELkteQODKrtEe8x/6COyHgm5kWQTojT9SfqP/T36ttNAwU+T1lw983 e1ZrU96sUK8BhwroHrxBF895HEALEwTmH5q2JRxidyzoTyDMToh5jFMOFfRiiQKV u9gKfOcB28P4RqR6lX78+q4s5NfsA5dDXX8TTtNR+tBEY1dnhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcpXRMIrLFaixubDKPRRXHX/JQdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDc1YmE2ZmQtYzJlOS0z OGJkLWI0ZDItMGFhZjJjNjRlMjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl9VvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrqTQpRLeTttuNFCaJSPuvcE/SEORBE/sti0G4BBI4oSi0TgJ9uAhtD OHGzM2R1NtT2C7V9M4A20QrvEyBSXGs9sfH8HxHKVVOcgnQ1Zoc1cJouukyvBJPX Wq6zux8ezVrFuYbIigo3/Q0lkGQONuo8wSwyL8RcC9f+TEVAN6ReYIus6W0fb03q kUK/dayiHkC/+1+bxYCIiJBTDpSNVz2GFQ4F6O+NGUGy4yvDjAvVyT96KqVDOAFx gZPtLgjUVSxhsXFRlhCVO58NUFCAPRyCsTCTFHy6DlcxVSNHKV9NYlNL0qSu25eH T5Y4rmIdNSYpaaEeujK8DKLElPGGehk= -----END CERTIFICATE-----Generated at Mon Aug 4 16:15:08 2025 by rpki-client