$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ed909b5a-d146-34b9-9e13-db4b2cd8b738.roa File: ed909b5a-d146-34b9-9e13-db4b2cd8b738.roa (raw, json) Hash identifier: 3yyIwj+3PiTJN1PWOZRibkAaXXmU0dJvhW9iQ/AX0cQ= Subject key identifier: 9F:F9:6B:38:B3:58:70:28:89:B0:D1:C2:70:C0:5F:73:3B:97:5C:11 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A9900CC08E54550211273B8C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ed909b5a-d146-34b9-9e13-db4b2cd8b738.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 174.131.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:cc:08:e5:45:50:21:12:73:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=318e2968-8775-41c5-9d4a-c8190e492df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ea:b6:19:7f:74:e2:e6:b8:f6:af:02:04:9e: f2:86:06:8a:e0:63:e5:2c:b9:18:62:c9:12:d3:04: 7d:ee:5e:2b:d5:41:19:8a:1f:e8:eb:88:8f:7e:6c: 53:61:61:05:f6:2b:a0:4f:20:80:e9:cd:b1:27:7e: a3:5e:34:79:87:12:d5:60:70:4b:34:d0:96:8d:c0: a0:78:46:05:ca:5d:93:83:17:2d:77:4b:47:9b:1d: 4d:6e:ed:41:2c:d3:5b:41:75:32:c8:a5:c8:bd:16: 7b:41:f0:47:e5:e1:de:b4:19:9d:3c:91:23:9e:86: ff:ac:7c:bc:f1:9d:66:05:35:52:b6:99:66:fa:7e: c2:90:1c:84:ec:78:d4:4b:29:d1:66:34:05:88:5f: f6:5a:ca:d6:ea:9e:c9:2d:08:54:4f:8e:48:c5:47: c3:ba:75:06:0c:ef:f0:bc:de:15:52:ff:aa:4d:7f: 2a:b8:82:e7:66:49:5b:f7:16:aa:35:f6:ed:45:df: d4:39:87:76:e1:2b:d9:19:24:f0:52:bf:3e:f4:bd: 4e:6f:37:66:21:15:18:be:c2:b0:f1:3f:02:42:18: 31:58:05:9c:f8:8f:a2:16:1d:e8:1e:cb:be:65:ca: db:3a:b3:8d:ac:04:93:4c:89:c2:e3:da:4c:70:c6: 70:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F9:6B:38:B3:58:70:28:89:B0:D1:C2:70:C0:5F:73:3B:97:5C:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ed909b5a-d146-34b9-9e13-db4b2cd8b738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:7a:89:80:f5:dd:13:9d:cd:eb:9f:92:69:c5:3c:cd:4b:b7: 2a:39:17:cb:23:8c:b7:3a:41:44:6c:f7:49:e2:6c:f8:49:cf: 8f:a7:e0:82:fe:77:f7:1b:45:51:08:09:50:5d:b5:07:f1:52: 5e:2a:e6:1f:56:b9:38:8c:32:3d:f5:69:e6:50:83:3e:03:c1: ba:e4:49:25:fb:7a:71:5b:e7:ab:bc:56:4e:3d:22:68:54:4e: b4:ea:d3:c3:0d:2b:80:d1:71:f1:9a:ec:be:61:97:a1:b0:7d: 30:e6:31:2a:38:3c:32:5f:3a:5c:0d:6b:29:47:61:d1:1f:09: 41:72:69:c1:19:e9:9e:22:25:65:17:00:99:f3:cd:ec:83:8a: c1:f6:2a:80:7f:59:a1:f4:0f:51:d1:73:9a:e8:18:a4:05:cb: 3d:e8:17:5e:fa:c9:23:96:95:a1:da:f1:a1:f1:95:ac:5b:5d: ab:6a:65:6e:5d:48:40:d0:1f:f4:1c:1f:a5:24:96:53:58:1e: ef:05:2b:8f:b6:ba:e9:42:13:8d:03:73:38:42:2c:30:89:6d: 7c:74:15:ad:ad:34:cf:42:13:4f:26:6f:e5:d9:09:4d:61:87: 2f:db:65:c9:2f:03:7f:50:3d:9a:14:68:21:a1:c4:e8:46:76: bf:6a:1c:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMwI5UVQIRJzuMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk MzE4ZTI5NjgtODc3NS00MWM1LTlkNGEtYzgxOTBlNDkyZGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+q2GX904ua49q8CBJ7yhgaK4GPlLLkYYskS 0wR97l4r1UEZih/o64iPfmxTYWEF9iugTyCA6c2xJ36jXjR5hxLVYHBLNNCWjcCg eEYFyl2Tgxctd0tHmx1Nbu1BLNNbQXUyyKXIvRZ7QfBH5eHetBmdPJEjnob/rHy8 8Z1mBTVStplm+n7CkByE7HjUSynRZjQFiF/2WsrW6p7JLQhUT45IxUfDunUGDO/w vN4VUv+qTX8quILnZklb9xaqNfbtRd/UOYd24SvZGSTwUr8+9L1ObzdmIRUYvsKw 8T8CQhgxWAWc+I+iFh3oHsu+ZcrbOrONrASTTInC49pMcMZwQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/5azizWHAoibDRwnDAX3M7l1wRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWQ5MDliNWEtZDE0Ni0z NGI5LTllMTMtZGI0YjJjZDhiNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEroNwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZ6iYD13ROdzeufkmnFPM1Ltyo5F8sjjLc6QURs90nibPhJz4+n4IL+ d/cbRVEICVBdtQfxUl4q5h9WuTiMMj31aeZQgz4DwbrkSSX7enFb56u8Vk49ImhU TrTq08MNK4DRcfGa7L5hl6GwfTDmMSo4PDJfOlwNaylHYdEfCUFyacEZ6Z4iJWUX AJnzzeyDisH2KoB/WaH0D1HRc5roGKQFyz3oF176ySOWlaHa8aHxlaxbXatqZW5d SEDQH/QcH6UkllNYHu8FK4+2uulCE40DczhCLDCJbXx0Fa2tNM9CE08mb+XZCU1h hy/bZckvA39QPZoUaCGhxOhGdr9qHAM= -----END CERTIFICATE-----Generated at Tue Aug 5 20:13:30 2025 by rpki-client