$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b0c92558-fa2d-3ae5-b7f2-894a3795a19f.roa File: b0c92558-fa2d-3ae5-b7f2-894a3795a19f.roa (raw, json) Hash identifier: uXP3qUahP4aKJBuxO4ldMrx39VLECLSCFA9RHU9H3pE= Subject key identifier: 13:32:C6:0C:D9:93:24:76:76:C7:14:DB:3C:DD:F1:4B:27:13:DC:0E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E6069B3E9099DCDF2DB0180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b0c92558-fa2d-3ae5-b7f2-894a3795a19f.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 174.131.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:69:b3:e9:09:9d:cd:f2:db:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=a8377ecd-6c67-487c-b7bc-b5a603c6cbdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:52:06:e6:a0:f6:52:46:ef:35:ac:72:a3:e4: c1:fe:b7:c7:a7:70:35:dc:81:ed:48:da:08:4f:df: b5:ef:97:ee:c9:ed:ba:67:39:a0:c7:7b:0b:87:ef: 7f:77:a4:46:06:e5:6a:68:99:ba:5d:81:6f:de:52: 59:e9:fa:fa:9d:bb:73:e0:32:e4:d6:57:94:b8:14: bc:5c:34:f3:2e:55:ef:55:75:45:73:c8:e0:b4:1a: a2:30:05:c1:27:62:8e:70:c9:27:97:55:d8:64:e3: 01:b8:94:e5:c6:65:70:53:6c:0b:0b:60:04:f4:40: 49:d0:0f:ec:5c:0f:74:fb:3a:ad:5c:50:4c:4f:a8: 58:f0:6b:33:a3:27:fa:c9:ab:88:b9:28:0b:a1:04: af:be:61:ce:4f:1b:80:bd:0e:ff:0d:32:6d:09:57: d7:fc:ec:11:72:f7:7a:57:6d:3a:eb:47:f5:ee:9a: cf:43:e1:bb:da:33:92:5c:c4:2b:cd:24:28:db:a1: d6:02:56:94:2e:6f:29:3f:69:40:81:97:3f:94:39: 48:17:85:2a:82:0b:78:fb:be:c0:1b:06:5b:b4:0e: 64:41:e1:74:4c:26:ac:77:cc:ab:8c:4c:c2:a5:36: 6d:9a:45:c4:74:7f:ce:61:a9:dd:19:95:3d:be:20: 4b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:32:C6:0C:D9:93:24:76:76:C7:14:DB:3C:DD:F1:4B:27:13:DC:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b0c92558-fa2d-3ae5-b7f2-894a3795a19f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:2f:3e:09:4f:56:5d:20:f6:ef:88:65:8b:04:d5:5f:af:1f: 4b:eb:44:72:26:c0:24:fa:58:c9:a8:f9:a0:7d:e9:16:20:c9: a6:8a:15:f8:e2:e3:a3:e1:97:22:de:78:82:12:1c:89:59:fa: f0:cc:7e:b1:7f:5c:f6:16:01:82:b8:9e:74:1f:2c:4a:5f:01: 7d:6c:4e:ca:94:14:8d:ae:98:53:02:15:1d:7b:0d:ca:7e:17: 9e:bb:bc:95:9b:ad:b9:91:16:a0:e3:4e:e6:09:43:00:fd:f4: 81:26:d0:e1:a1:5e:95:2a:39:be:4e:a5:77:8b:44:23:32:de: 15:df:66:bd:14:fd:b4:55:14:6a:89:fd:92:e9:70:bb:46:27: 52:c4:6c:b5:cb:4a:4e:17:45:d4:6a:97:f4:3a:cb:ba:65:bf: 9d:5d:a4:37:ef:2b:23:b2:89:08:6a:28:58:bd:ce:ad:da:74: 12:81:be:e0:d3:e0:5f:13:b8:c7:b8:a4:8b:29:53:82:82:0f: b1:2c:33:05:41:f9:0e:be:87:b3:97:2f:a9:92:4e:0b:75:cb: 33:12:16:21:13:a3:0f:65:b2:17:ad:01:9c:42:3f:e4:d1:a2: 38:1a:7a:a1:f0:b9:71:00:6a:5b:d9:f4:b2:7d:e5:fc:ed:2e: 85:fa:7e:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYGmz6QmdzfLbAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk YTgzNzdlY2QtNmM2Ny00ODdjLWI3YmMtYjVhNjAzYzZjYmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFIG5qD2UkbvNaxyo+TB/rfHp3A13IHtSNoI T9+175fuye26Zzmgx3sLh+9/d6RGBuVqaJm6XYFv3lJZ6fr6nbtz4DLk1leUuBS8 XDTzLlXvVXVFc8jgtBqiMAXBJ2KOcMknl1XYZOMBuJTlxmVwU2wLC2AE9EBJ0A/s XA90+zqtXFBMT6hY8Gszoyf6yauIuSgLoQSvvmHOTxuAvQ7/DTJtCVfX/OwRcvd6 V20660f17prPQ+G72jOSXMQrzSQo26HWAlaULm8pP2lAgZc/lDlIF4Uqggt4+77A GwZbtA5kQeF0TCasd8yrjEzCpTZtmkXEdH/OYandGZU9viBLbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMyxgzZkyR2dscU2zzd8UsnE9wOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjBjOTI1NTgtZmEyZC0z YWU1LWI3ZjItODk0YTM3OTVhMTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEroNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4vPglPVl0g9u+IZYsE1V+vH0vrRHImwCT6WMmo+aB96RYgyaaKFfji 46PhlyLeeIISHIlZ+vDMfrF/XPYWAYK4nnQfLEpfAX1sTsqUFI2umFMCFR17Dcp+ F567vJWbrbmRFqDjTuYJQwD99IEm0OGhXpUqOb5OpXeLRCMy3hXfZr0U/bRVFGqJ /ZLpcLtGJ1LEbLXLSk4XRdRql/Q6y7plv51dpDfvKyOyiQhqKFi9zq3adBKBvuDT 4F8TuMe4pIspU4KCD7EsMwVB+Q6+h7OXL6mSTgt1yzMSFiETow9lshetAZxCP+TR ojgaeqHwuXEAalvZ9LJ95fztLoX6frQ= -----END CERTIFICATE-----Generated at Tue Jul 1 06:06:57 2025 by rpki-client