$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a7b0d97-7801-3cb6-8d30-a1c1493f86e2.roa File: 7a7b0d97-7801-3cb6-8d30-a1c1493f86e2.roa (raw, json) Hash identifier: YbSX4Y0ivaQWfcNSBLJedv1xElrBj2eEvNSXUcu/GoU= Subject key identifier: 49:77:D3:29:A1:A8:B0:DA:D3:79:33:0F:BF:3C:CC:C1:87:67:2D:A7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A49707C900849559BB90461A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a7b0d97-7801-3cb6-8d30-a1c1493f86e2.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 174.131.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:7c:90:08:49:55:9b:b9:04:61:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=cdb3ec8d-1cf5-4941-ad12-1d6c3045f039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ef:d0:dd:54:db:3b:cf:85:2a:86:7e:40:e8: f6:e9:ad:9c:14:de:a1:5d:ba:3d:c2:2c:1d:46:f2: 60:02:34:eb:f5:31:6b:f9:a4:e1:50:b8:5f:1c:d4: b5:9e:4f:b1:fb:ab:36:a8:e0:cb:dd:0c:20:a1:0d: b8:2b:3d:46:9a:ba:e7:e5:82:9e:14:a8:27:28:3f: de:52:9a:7f:e4:ee:16:7d:09:db:a2:e4:95:55:aa: f5:66:c1:73:69:3e:a2:06:ca:8b:65:ae:92:a0:eb: 09:66:85:66:24:5a:dd:ae:df:18:98:be:0e:2b:04: 7b:0f:ec:55:c1:29:1f:4b:a5:8c:bd:ec:b3:8a:93: af:b3:17:17:f1:f5:75:ff:b9:fb:88:ac:ca:00:cf: 0f:f1:a0:a3:b5:d9:39:36:6d:1c:db:43:7e:65:56: 36:55:d4:98:11:b9:98:58:7a:4c:18:84:ef:52:ff: ce:5a:d6:8c:d6:8b:8a:13:c9:38:2f:f5:c4:47:d9: 7c:95:15:21:b4:32:34:6a:69:a8:25:43:eb:57:38: c4:58:ed:c9:07:d3:31:8d:cb:20:60:34:ad:82:0f: 87:30:41:23:1e:29:aa:3c:eb:f5:53:df:fa:44:48: 0c:a2:ba:d1:9f:35:3f:22:3d:26:e0:c6:1b:08:75: 02:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:77:D3:29:A1:A8:B0:DA:D3:79:33:0F:BF:3C:CC:C1:87:67:2D:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a7b0d97-7801-3cb6-8d30-a1c1493f86e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:ca:f9:12:98:1c:4a:47:ff:1c:62:4a:e9:47:3f:15:a7:8d: af:91:7b:4b:4f:77:d6:93:5e:63:8d:45:35:b4:3b:72:c1:77: cb:9d:dd:48:c8:68:5c:6d:b8:71:f1:b0:c8:e7:7e:aa:3c:54: e0:c7:49:78:0d:98:68:f0:52:87:a6:cd:ce:9f:60:4d:90:36: 76:7b:a1:b5:1d:f7:fb:2b:de:c6:f6:7a:38:82:fd:d4:9e:63: 3e:76:96:24:15:58:a2:ca:0b:2a:76:77:f2:57:81:d2:df:6c: 64:e6:d4:4a:62:89:81:14:d7:a1:86:03:2f:65:39:f4:6b:a5: ce:0f:99:ea:ac:c3:6e:32:75:ef:9f:c8:c2:7c:d1:90:a8:e3: d0:02:ea:ac:69:d2:2e:e3:a0:a5:99:53:e6:e8:ea:3a:c6:82: 21:e5:f7:83:35:30:42:1a:60:a6:3c:71:31:a6:ce:e3:c5:e5: 55:b0:4b:a2:9e:2b:70:b0:35:72:87:dd:cb:5b:16:ec:4c:c1: ba:0b:18:d9:15:c0:e5:bb:d3:c8:4f:1a:ee:95:b3:6e:cf:10: 1b:6f:26:ae:49:c5:66:fc:62:a3:8b:50:4e:49:8c:7d:40:51: 74:35:e3:80:b7:f6:e5:cd:f3:59:94:00:cc:34:3d:a5:c9:6a: 0e:e4:54:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHyQCElVm7kEYaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk Y2RiM2VjOGQtMWNmNS00OTQxLWFkMTItMWQ2YzMwNDVmMDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO/Q3VTbO8+FKoZ+QOj26a2cFN6hXbo9wiwd RvJgAjTr9TFr+aThULhfHNS1nk+x+6s2qODL3QwgoQ24Kz1Gmrrn5YKeFKgnKD/e Upp/5O4WfQnbouSVVar1ZsFzaT6iBsqLZa6SoOsJZoVmJFrdrt8YmL4OKwR7D+xV wSkfS6WMveyzipOvsxcX8fV1/7n7iKzKAM8P8aCjtdk5Nm0c20N+ZVY2VdSYEbmY WHpMGITvUv/OWtaM1ouKE8k4L/XER9l8lRUhtDI0ammoJUPrVzjEWO3JB9Mxjcsg YDStgg+HMEEjHimqPOv1U9/6REgMorrRnzU/Ij0m4MYbCHUCKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEl30ymhqLDa03kzD788zMGHZy2nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2E3YjBkOTctNzgwMS0z Y2I2LThkMzAtYTFjMTQ5M2Y4NmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDroPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDK+RKYHEpH/xxiSulHPxWnja+Re0tPd9aTXmONRTW0O3LBd8ud3UjI aFxtuHHxsMjnfqo8VODHSXgNmGjwUoemzc6fYE2QNnZ7obUd9/sr3sb2ejiC/dSe Yz52liQVWKLKCyp2d/JXgdLfbGTm1EpiiYEU16GGAy9lOfRrpc4Pmeqsw24yde+f yMJ80ZCo49AC6qxp0i7joKWZU+bo6jrGgiHl94M1MEIaYKY8cTGmzuPF5VWwS6Ke K3CwNXKH3ctbFuxMwboLGNkVwOW708hPGu6Vs27PEBtvJq5JxWb8YqOLUE5JjH1A UXQ144C39uXN81mUAMw0PaXJag7kVJw= -----END CERTIFICATE-----Generated at Mon Jun 30 20:28:35 2025 by rpki-client