$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d3fb0ec-63d5-342c-8c81-bdcd51af9818.roa File: 6d3fb0ec-63d5-342c-8c81-bdcd51af9818.roa (raw, json) Hash identifier: xCoNAFNpoIbkfJD8D14XcU7eOqrPk34AMTekPhOGfek= Subject key identifier: 74:09:8C:CB:C8:30:E5:BB:28:84:90:BC:E1:F6:53:8D:09:93:C9:D7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC7843F259F4D33F82E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d3fb0ec-63d5-342c-8c81-bdcd51af9818.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 174.130.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c7:84:3f:25:9f:4d:33:f8:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=916c8991-6dd5-4199-b583-33c67c2c9430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:db:fb:88:58:f3:47:18:33:4b:bd:98:b6:a7: dc:22:51:19:b7:3d:65:31:55:a4:fa:de:cf:32:52: 94:28:16:6c:d6:15:8b:23:84:14:77:af:c9:95:01: 75:91:75:11:20:09:01:85:fe:e8:5c:e4:5d:fb:7f: 56:3a:50:a7:8b:c9:a3:2b:b5:93:23:07:d4:ee:2f: b5:04:7e:31:5a:b1:53:ab:78:d7:2a:d8:78:2c:eb: 88:21:ac:d2:48:5f:a7:20:32:8b:8e:4e:7c:e3:a5: fc:62:39:7d:d3:67:f4:4e:fb:75:d2:6b:50:2a:2f: 75:92:11:9b:1c:49:78:35:18:63:44:70:67:61:8b: a5:19:be:14:44:6e:a3:08:05:2d:2f:71:3d:a5:3f: 90:ad:b8:b7:52:42:42:3e:8e:93:2d:93:54:3b:11: 2c:bd:a1:74:91:5d:b3:19:ff:d3:a1:4f:8b:ce:5a: a5:bc:92:63:e6:ac:39:c1:ac:b7:13:03:da:50:6d: 7c:c8:47:c6:03:f7:bc:e7:bc:7a:7f:10:70:10:2f: bc:8a:1d:89:e2:62:cf:55:75:62:d6:3f:4e:a1:9e: 8c:1f:db:0b:8f:d4:c5:db:73:b2:27:2e:e0:47:77: c4:2f:2e:db:77:2f:f7:5b:ff:3e:8f:0e:77:db:ff: fd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:09:8C:CB:C8:30:E5:BB:28:84:90:BC:E1:F6:53:8D:09:93:C9:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d3fb0ec-63d5-342c-8c81-bdcd51af9818.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:2e:c0:73:bc:e5:84:30:bb:3b:6b:54:18:c1:1e:75:58:16: 47:68:f5:32:13:8c:4b:62:a7:a3:46:1b:4e:77:2c:f8:90:fb: f8:78:b5:f6:12:dd:83:d2:29:37:16:99:5d:54:7e:4f:18:60: 41:c3:70:66:66:fe:73:1e:b7:2c:8f:4b:2f:84:bd:ef:0d:37: 75:46:6f:0d:6b:b3:cf:46:e8:4b:82:82:ae:7c:49:0b:04:3c: b1:ce:9b:d9:8f:f1:9c:54:da:65:57:dd:4a:c6:85:42:78:10: e7:14:f1:e1:5b:d9:19:93:9e:97:e7:cc:27:4f:1d:1c:a6:be: 33:73:e1:6f:5f:00:ff:f2:0d:97:12:b9:39:6d:7d:29:0f:af: 13:45:42:79:b5:3c:ff:38:cc:8a:4b:a1:e0:ad:27:fb:d2:8d: e4:d1:1f:ef:a8:fb:dc:0e:7f:ab:29:a6:ef:64:88:36:47:ca: e6:be:1d:39:f6:9d:a7:a9:d1:73:3f:58:ad:83:ba:1b:62:39: 28:76:9e:3a:2f:fa:4e:e8:67:fa:e3:96:15:ee:fa:70:03:ff: 0e:ac:ea:20:7e:ff:e6:93:03:ca:10:f1:f0:46:1d:ab:9e:1d: f2:03:a9:f1:fc:d5:0a:c6:be:f3:19:d5:cb:0f:f0:e1:81:96: c0:58:04:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMeEPyWfTTP4LoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk OTE2Yzg5OTEtNmRkNS00MTk5LWI1ODMtMzNjNjdjMmM5NDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNv7iFjzRxgzS72YtqfcIlEZtz1lMVWk+t7P MlKUKBZs1hWLI4QUd6/JlQF1kXURIAkBhf7oXORd+39WOlCni8mjK7WTIwfU7i+1 BH4xWrFTq3jXKth4LOuIIazSSF+nIDKLjk5846X8Yjl902f0Tvt10mtQKi91khGb HEl4NRhjRHBnYYulGb4URG6jCAUtL3E9pT+Qrbi3UkJCPo6TLZNUOxEsvaF0kV2z Gf/ToU+LzlqlvJJj5qw5way3EwPaUG18yEfGA/e857x6fxBwEC+8ih2J4mLPVXVi 1j9OoZ6MH9sLj9TF23OyJy7gR3fELy7bdy/3W/8+jw532//9IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQJjMvIMOW7KISQvOH2U40Jk8nXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmQzZmIwZWMtNjNkNS0z NDJjLThjODEtYmRjZDUxYWY5ODE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCroI8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMuwHO85YQwuztrVBjBHnVYFkdo9TITjEtip6NGG053LPiQ+/h4tfYS 3YPSKTcWmV1Ufk8YYEHDcGZm/nMetyyPSy+Eve8NN3VGbw1rs89G6EuCgq58SQsE PLHOm9mP8ZxU2mVX3UrGhUJ4EOcU8eFb2RmTnpfnzCdPHRymvjNz4W9fAP/yDZcS uTltfSkPrxNFQnm1PP84zIpLoeCtJ/vSjeTRH++o+9wOf6sppu9kiDZHyua+HTn2 naep0XM/WK2DuhtiOSh2njov+k7oZ/rjlhXu+nAD/w6s6iB+/+aTA8oQ8fBGHaue HfIDqfH81QrGvvMZ1csP8OGBlsBYBJk= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:53 2025 by rpki-client