$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecc4dcd5-7bb9-38a7-9b35-5d0552cba17e.roa File: ecc4dcd5-7bb9-38a7-9b35-5d0552cba17e.roa (raw, json) Hash identifier: hdOaXvTWNfZjk9vN6y2l9k4/fbXtaWizCrHfqNr9Tow= Subject key identifier: DC:FC:63:9B:11:D3:1D:A0:A4:ED:3F:11:9D:F4:0F:AE:A9:A4:D0:A0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8C70DE23A37F7D65C8ADF7C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecc4dcd5-7bb9-38a7-9b35-5d0552cba17e.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 174.130.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:de:23:a3:7f:7d:65:c8:ad:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=8a9e313d-f96b-41e0-b949-05ffbc162a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:21:79:93:a2:1e:97:30:2f:de:88:08:a8:88: ce:b3:5f:a6:25:3f:10:e0:84:d6:32:05:1f:10:92: 25:9b:7e:56:fe:06:fd:0c:02:a6:a2:21:2e:aa:d7: 0a:19:ec:3b:12:c2:d4:cc:40:fc:e6:96:52:c3:45: 9d:46:4b:ea:f2:46:c1:f7:fe:d4:52:25:77:d9:9d: 6d:af:90:c9:b7:db:0b:54:ad:16:27:4e:ea:81:47: 3f:64:6b:73:4f:26:95:62:48:7a:4d:4a:5a:e5:49: fd:08:5f:c0:68:ff:70:4b:43:d5:c8:11:76:d8:f5: db:d7:6f:17:c8:21:36:fd:53:c3:78:bd:d8:20:96: 62:f5:81:25:e0:f5:2a:b7:ae:5f:10:cb:21:74:d5: 7a:31:f0:9c:63:d7:3b:53:ba:90:75:28:6f:38:a5: 7d:7b:f5:c0:a4:bc:15:ff:4c:b5:58:e3:19:48:fb: c5:ee:19:c4:af:79:c0:2c:9b:d7:f0:45:af:ab:7f: 8a:55:b7:05:2b:0e:79:94:6a:8f:c4:1d:d6:a5:d5: e7:cc:2a:8f:71:9a:7a:70:ae:d3:d2:8b:ca:e4:ba: 9a:e5:5c:04:c0:6c:ec:51:d4:36:1d:2a:6d:e9:4a: 08:2a:df:57:89:78:d5:02:b2:fb:5c:43:96:c0:b8: cd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FC:63:9B:11:D3:1D:A0:A4:ED:3F:11:9D:F4:0F:AE:A9:A4:D0:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecc4dcd5-7bb9-38a7-9b35-5d0552cba17e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:6b:3f:e6:ac:0f:65:0a:ff:67:3a:d7:30:bd:75:da:4d:fa: c9:f5:3a:5b:c7:e7:89:f7:6f:25:9b:1f:30:4f:05:07:51:88: b7:11:44:52:e1:54:6b:c9:00:63:1d:34:3c:76:38:99:26:13: b2:66:08:fc:fd:94:4d:21:91:02:25:31:73:f3:5e:f7:b6:74: ae:1b:0b:1d:60:64:cc:4a:4f:bd:c9:42:14:cf:d9:a3:90:a3: 79:2a:fe:23:58:89:e8:3e:c9:62:e2:11:32:98:72:13:e1:00: cd:c4:92:86:9c:c9:bc:14:82:f5:29:74:ca:61:73:64:e0:2f: bd:78:b4:39:fd:d1:2f:f2:43:ba:e2:96:17:3c:89:18:49:71: 71:30:08:05:71:e0:92:2c:40:33:10:8e:74:f6:1a:f0:54:70: fb:27:28:97:a3:55:d7:62:c3:49:c3:fe:73:54:48:04:b3:8f: 37:8b:09:69:cb:1c:d1:e8:66:32:c5:a5:ca:9b:6f:39:99:51: 45:24:3b:4a:d2:4d:65:67:ea:80:1d:35:dc:51:6b:a7:c9:8e: cc:17:12:a0:e7:fd:65:3f:17:30:c0:67:c1:62:15:02:9b:61: 31:da:18:cb:e9:ee:88:72:ea:8c:fe:2c:6e:94:95:80:49:d1: 97:3e:2b:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcN4jo399Zcit98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk OGE5ZTMxM2QtZjk2Yi00MWUwLWI5NDktMDVmZmJjMTYyYTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCF5k6IelzAv3ogIqIjOs1+mJT8Q4ITWMgUf EJIlm35W/gb9DAKmoiEuqtcKGew7EsLUzED85pZSw0WdRkvq8kbB9/7UUiV32Z1t r5DJt9sLVK0WJ07qgUc/ZGtzTyaVYkh6TUpa5Un9CF/AaP9wS0PVyBF22PXb128X yCE2/VPDeL3YIJZi9YEl4PUqt65fEMshdNV6MfCcY9c7U7qQdShvOKV9e/XApLwV /0y1WOMZSPvF7hnEr3nALJvX8EWvq3+KVbcFKw55lGqPxB3WpdXnzCqPcZp6cK7T 0ovK5Lqa5VwEwGzsUdQ2HSpt6UoIKt9XiXjVArL7XEOWwLjNkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNz8Y5sR0x2gpO0/EZ30D66ppNCgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWNjNGRjZDUtN2JiOS0z OGE3LTliMzUtNWQwNTUyY2JhMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEroIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9rP+asD2UK/2c61zC9ddpN+sn1OlvH54n3byWbHzBPBQdRiLcRRFLh VGvJAGMdNDx2OJkmE7JmCPz9lE0hkQIlMXPzXve2dK4bCx1gZMxKT73JQhTP2aOQ o3kq/iNYieg+yWLiETKYchPhAM3EkoacybwUgvUpdMphc2TgL714tDn90S/yQ7ri lhc8iRhJcXEwCAVx4JIsQDMQjnT2GvBUcPsnKJejVddiw0nD/nNUSASzjzeLCWnL HNHoZjLFpcqbbzmZUUUkO0rSTWVn6oAdNdxRa6fJjswXEqDn/WU/FzDAZ8FiFQKb YTHaGMvp7ohy6oz+LG6UlYBJ0Zc+K9o= -----END CERTIFICATE-----Generated at Wed Aug 6 10:21:56 2025 by rpki-client