$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8c7de1ab-fa4e-36d9-9bb1-a46e7969f43b.roa File: 8c7de1ab-fa4e-36d9-9bb1-a46e7969f43b.roa (raw, json) Hash identifier: lS9WHcf/YDA68DtDCgOyeNe8YekJarc1tYjsv2Gj4r0= Subject key identifier: EE:54:EF:7E:61:A9:CD:87:F4:A1:D2:F5:47:68:58:04:79:63:2D:8E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD668A4FA53D17EC39EAB480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8c7de1ab-fa4e-36d9-9bb1-a46e7969f43b.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 173.191.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:8a:4f:a5:3d:17:ec:39:ea:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=d5a1d4b3-716e-4f05-b34e-2126f11a89ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fc:63:57:b6:e3:f9:9e:8c:8f:1f:a6:75:0f: 90:31:75:08:76:c9:56:ef:59:92:34:26:3a:89:08: c4:77:15:56:29:e8:ac:68:16:5d:66:73:a2:4d:a0: 3c:63:6b:6c:ce:1f:7b:e6:9f:59:c2:fa:cf:96:5f: d0:f2:89:56:cd:39:21:08:1a:e3:ab:e0:f7:85:2a: 72:b6:0d:82:34:05:3b:21:aa:f4:7a:0d:af:ab:1d: 6f:eb:7d:7e:36:d8:34:26:78:04:3c:41:ff:60:e4: 1a:b7:86:e5:2e:37:03:88:5f:58:f6:22:58:cd:4c: 2e:e3:93:2e:b8:73:95:c8:93:37:3a:e8:6a:2b:3e: 5e:5a:37:b6:0d:63:ef:00:7b:6e:c5:26:e1:2a:56: 5a:ab:1b:12:29:88:be:44:07:24:b5:9e:83:01:2b: 91:dc:ac:66:fd:2e:5e:f0:10:f7:96:66:52:64:cb: 79:83:ea:83:04:02:20:3a:36:41:d2:f1:4d:71:d1: 3a:14:78:e9:79:7a:f0:7d:62:4d:5c:5d:12:c5:5a: 87:5f:cd:88:5a:6c:77:b6:f7:2c:a6:76:76:77:5b: e2:5c:98:82:f6:77:ff:70:bb:ca:3c:fc:b2:eb:43: f8:fd:c9:64:0b:db:ed:6e:84:3b:64:70:30:62:70: 9e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:54:EF:7E:61:A9:CD:87:F4:A1:D2:F5:47:68:58:04:79:63:2D:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8c7de1ab-fa4e-36d9-9bb1-a46e7969f43b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:15:f6:d3:f5:b8:dc:6f:40:f5:19:fa:e2:86:cf:f8:19:f8: 40:a4:0a:ef:b5:cc:80:ea:04:b4:dc:79:8c:e7:ff:8b:35:ff: d2:aa:ae:3c:a5:c9:3a:dc:41:a9:91:a5:6d:c8:5e:56:1e:0f: 51:d0:84:8f:15:33:51:7e:08:00:af:5d:e3:8d:82:f8:3b:44: be:4f:7c:04:c5:44:cf:29:9b:3e:12:2d:25:d7:bc:cc:20:4c: 5c:ba:a5:0f:53:09:2e:c3:36:0b:4b:59:cd:7e:f2:9f:82:c5: e9:08:20:cc:0b:82:34:4a:93:a1:cd:50:32:73:d9:be:82:15: 15:c3:6f:b3:60:a3:9b:6f:5d:f9:85:3e:10:31:e5:18:ba:0b: a4:01:6a:65:ea:5b:2c:fd:2f:0c:63:ab:d8:43:5e:1f:ae:4c: 09:cc:11:4b:04:a5:ef:bd:4b:df:8d:1c:a6:ab:e8:7b:93:80: 90:31:1e:b5:11:87:f4:26:e0:93:3f:75:d3:d0:03:87:e9:00: 76:9c:b9:8d:13:91:bc:a8:9e:18:29:71:fd:b0:21:11:6d:cc: 12:b3:20:ce:dd:db:69:50:3a:fd:75:1c:9c:15:69:83:7d:20: 52:27:7d:85:fb:34:e1:d2:b8:1e:33:c9:e0:4c:57:73:b3:de: c4:15:53:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZopPpT0X7DnqtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk ZDVhMWQ0YjMtNzE2ZS00ZjA1LWIzNGUtMjEyNmYxMWE4OWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovxjV7bj+Z6Mjx+mdQ+QMXUIdslW71mSNCY6 iQjEdxVWKeisaBZdZnOiTaA8Y2tszh975p9ZwvrPll/Q8olWzTkhCBrjq+D3hSpy tg2CNAU7Iar0eg2vqx1v631+Ntg0JngEPEH/YOQat4blLjcDiF9Y9iJYzUwu45Mu uHOVyJM3OuhqKz5eWje2DWPvAHtuxSbhKlZaqxsSKYi+RAcktZ6DASuR3Kxm/S5e 8BD3lmZSZMt5g+qDBAIgOjZB0vFNcdE6FHjpeXrwfWJNXF0SxVqHX82IWmx3tvcs pnZ2d1viXJiC9nf/cLvKPPyy60P4/clkC9vtboQ7ZHAwYnCejQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5U735hqc2H9KHS9UdoWAR5Yy2OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGM3ZGUxYWItZmE0ZS0z NmQ5LTliYjEtYTQ2ZTc5NjlmNDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErb8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQV9tP1uNxvQPUZ+uKGz/gZ+ECkCu+1zIDqBLTceYzn/4s1/9Kqrjyl yTrcQamRpW3IXlYeD1HQhI8VM1F+CACvXeONgvg7RL5PfATFRM8pmz4SLSXXvMwg TFy6pQ9TCS7DNgtLWc1+8p+CxekIIMwLgjRKk6HNUDJz2b6CFRXDb7Ngo5tvXfmF PhAx5Ri6C6QBamXqWyz9Lwxjq9hDXh+uTAnMEUsEpe+9S9+NHKar6HuTgJAxHrUR h/Qm4JM/ddPQA4fpAHacuY0Tkbyonhgpcf2wIRFtzBKzIM7d22lQOv11HJwVaYN9 IFInfYX7NOHSuB4zyeBMV3Oz3sQVU5Q= -----END CERTIFICATE-----Generated at Sat Aug 23 17:54:18 2025 by rpki-client