$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f36c82d8-e3f2-3023-85ba-8d4a0e9a0471.roa File: f36c82d8-e3f2-3023-85ba-8d4a0e9a0471.roa (raw, json) Hash identifier: qAlsRWf4BgkKQKUIneLxQGQy6Nk2VBP2lPj+ozG8FVo= Subject key identifier: 0B:10:5F:F9:AF:12:7C:BD:97:2E:D7:71:09:96:8B:73:1B:76:AC:DC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0FE1AB4B5EF1E84E5DCB0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f36c82d8-e3f2-3023-85ba-8d4a0e9a0471.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 174.131.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:fe:1a:b4:b5:ef:1e:84:e5:dc:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=1c1fa3c6-b9e1-4dd4-9b05-d36630a426d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:14:e3:e7:f6:c9:e6:46:d3:b0:b5:c9:db:4f: e9:3a:d1:ef:3d:c8:58:48:c2:fb:8d:8a:49:dd:ff: db:aa:3e:5f:18:77:2c:79:ea:44:6a:5f:ea:c0:ec: 07:e0:6d:dc:0f:29:a7:88:2f:b5:b4:46:1e:f2:30: 6b:8d:77:bb:b3:ea:96:7d:83:ab:78:ae:d2:7f:0f: f5:26:6a:cf:1d:8c:da:e4:b7:02:d0:0f:eb:09:dc: 49:cc:fd:92:ae:2a:a2:11:2c:0a:06:05:64:9b:45: 31:3c:26:08:1c:43:f3:ba:fb:18:9c:5b:e4:10:54: 9e:0a:51:42:4d:20:ac:93:ae:1c:12:c1:cf:4c:70: 5e:3d:8c:3b:31:3d:2e:23:c1:63:82:e0:36:aa:79: ef:4b:86:36:cd:ba:62:89:ba:01:4e:81:8c:ef:40: 9d:df:b4:3e:2f:41:02:72:3a:d6:da:9e:39:65:a9: 98:b0:24:96:c1:af:70:9e:34:e8:c4:f1:e4:45:3e: 47:5e:80:f7:f8:71:71:f2:a2:05:40:ec:3d:8f:92: 6c:d5:fa:01:34:6c:85:aa:a6:63:7b:a7:71:d1:d2: 7e:e9:72:3c:fe:b4:35:18:b6:8b:4c:1b:9b:c7:bf: 59:55:09:d8:9a:05:6f:79:1d:1f:1e:77:93:aa:0e: bf:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:10:5F:F9:AF:12:7C:BD:97:2E:D7:71:09:96:8B:73:1B:76:AC:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f36c82d8-e3f2-3023-85ba-8d4a0e9a0471.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:51:95:3a:20:0a:c0:c0:2b:79:d4:ec:c4:8a:29:49:66:47: ad:01:1e:89:b6:98:63:ea:c8:60:d9:57:a9:78:81:4d:f9:ae: 53:ef:34:69:77:be:d0:d0:d3:e8:68:34:24:25:5e:5d:5f:c9: 1e:f2:15:57:ed:48:53:bb:1d:d2:75:ad:a8:9c:ea:a7:9e:1c: 9d:81:14:22:54:b3:0c:93:85:42:a5:99:3b:f8:7e:5b:e0:c7: 41:c5:c9:41:65:6e:07:b8:ef:b0:6e:9b:02:4f:52:af:bf:53: a7:fd:1e:1a:b2:02:34:50:69:e1:c7:bd:ce:0a:8f:4d:bd:12: d4:3b:d9:40:8f:25:81:fc:d4:d2:35:0f:b2:90:21:7e:d8:c4: 22:cb:cb:ce:fc:05:95:d7:20:55:38:3f:a8:2f:8c:9f:cb:4a: 44:52:df:60:d6:2c:3f:22:92:26:62:97:a2:89:50:f7:0b:09: bb:1f:4d:6d:54:e1:29:17:91:77:04:c5:b1:d2:dc:46:71:e9: 53:b2:d7:09:c2:8c:e9:d2:29:30:31:a4:aa:1a:58:1b:dc:cb: e7:52:b2:ca:7c:4c:f5:07:1f:b2:50:d9:eb:11:a8:61:fb:29: 62:50:1c:3a:78:a7:04:8f:86:ca:1f:73:d5:a7:e1:07:33:64: 8c:98:d6:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoP4atLXvHoTl3LAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MWMxZmEzYzYtYjllMS00ZGQ0LTliMDUtZDM2NjMwYTQyNmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBTj5/bJ5kbTsLXJ20/pOtHvPchYSML7jYpJ 3f/bqj5fGHcseepEal/qwOwH4G3cDymniC+1tEYe8jBrjXe7s+qWfYOreK7Sfw/1 JmrPHYza5LcC0A/rCdxJzP2SriqiESwKBgVkm0UxPCYIHEPzuvsYnFvkEFSeClFC TSCsk64cEsHPTHBePYw7MT0uI8FjguA2qnnvS4Y2zbpiiboBToGM70Cd37Q+L0EC cjrW2p45ZamYsCSWwa9wnjToxPHkRT5HXoD3+HFx8qIFQOw9j5Js1foBNGyFqqZj e6dx0dJ+6XI8/rQ1GLaLTBubx79ZVQnYmgVveR0fHneTqg6/lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsQX/mvEny9ly7XcQmWi3MbdqzcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjM2YzgyZDgtZTNmMi0z MDIzLTg1YmEtOGQ0YTBlOWEwNDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCroOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdRlTogCsDAK3nU7MSKKUlmR60BHom2mGPqyGDZV6l4gU35rlPvNGl3 vtDQ0+hoNCQlXl1fyR7yFVftSFO7HdJ1raic6qeeHJ2BFCJUswyThUKlmTv4flvg x0HFyUFlbge477BumwJPUq+/U6f9HhqyAjRQaeHHvc4Kj029EtQ72UCPJYH81NI1 D7KQIX7YxCLLy878BZXXIFU4P6gvjJ/LSkRS32DWLD8ikiZil6KJUPcLCbsfTW1U 4SkXkXcExbHS3EZx6VOy1wnCjOnSKTAxpKoaWBvcy+dSssp8TPUHH7JQ2esRqGH7 KWJQHDp4pwSPhsofc9Wn4QczZIyY1sk= -----END CERTIFICATE-----Generated at Wed Aug 6 07:55:37 2025 by rpki-client