$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d04bff8-aa0e-3ad0-9750-50287af5a6fd.roa File: 3d04bff8-aa0e-3ad0-9750-50287af5a6fd.roa (raw, json) Hash identifier: UPgfW4UZaPTHtXjQX9L9jWyms3khU55smbV9HtXPoCY= Subject key identifier: F4:9D:13:63:3A:AC:65:62:D3:03:A6:1C:81:27:0F:89:04:FF:58:1E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E6069E313DA330CB21F5520 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d04bff8-aa0e-3ad0-9750-50287af5a6fd.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 174.130.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:69:e3:13:da:33:0c:b2:1f:55:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=fadba0f9-5002-4946-9077-3b1590b26099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0d:c1:97:d5:ec:82:7a:b9:22:b7:c7:f9:87: f5:c2:8c:b5:e7:4e:26:0a:45:4c:59:55:b0:47:6d: 92:08:e9:f0:58:78:d2:a2:5d:4d:c5:3d:2f:41:98: 67:de:84:74:b8:49:48:b8:28:64:bc:a7:1a:ba:0d: 00:80:28:47:36:95:6b:43:fd:fa:c9:99:18:63:65: 21:b2:df:cb:81:f0:22:2b:2d:b9:2f:85:aa:26:35: 6d:8d:3b:71:99:49:25:a3:7c:1c:2d:85:d5:27:5b: fd:dd:cf:7d:e0:cc:0d:f1:a5:e7:a0:97:c4:2d:22: 30:a3:46:49:6e:ee:4b:ed:a8:97:09:bf:ba:b7:0b: 84:74:bf:8b:10:39:1e:a1:ef:3d:79:8a:8c:79:db: e4:e1:81:02:ea:47:07:0d:2c:b5:d7:c8:6b:0f:86: 9f:bc:01:5f:95:05:aa:ba:dd:99:f6:cf:66:ca:77: 9d:b3:e2:92:a2:a8:e9:45:28:80:bd:a2:73:a5:66: f4:38:54:2b:3a:27:15:df:f4:73:5e:92:c6:a5:d9: 0a:cb:5b:13:50:05:81:e3:61:2f:ec:44:bf:44:a1: 58:6c:6c:d1:61:83:66:66:b4:2f:f7:ff:f1:20:71: 1b:56:b6:bc:8d:ee:97:75:96:71:50:7f:3b:d0:0b: 80:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9D:13:63:3A:AC:65:62:D3:03:A6:1C:81:27:0F:89:04:FF:58:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d04bff8-aa0e-3ad0-9750-50287af5a6fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:e0:48:be:8f:7f:d3:66:60:08:f7:41:58:ff:8c:a9:bd:bf: c5:70:bd:ac:2e:1a:c5:c1:1d:b1:e7:fc:ff:55:f7:32:aa:0b: 74:e5:8d:a4:b1:9d:2d:55:2b:5d:0a:f8:77:9c:0f:89:7c:61: f7:b5:66:4b:64:ed:e6:e7:db:cf:c1:8b:88:44:d1:d8:e8:95: 81:08:e3:57:85:68:d8:b3:c5:06:c7:d1:4c:3d:8a:13:99:55: 09:14:a2:d8:b3:0e:ee:8d:25:d8:91:2b:91:05:c6:36:cf:ac: b9:ed:c8:5e:18:7f:ee:66:88:b5:07:7f:ff:35:61:6e:9f:23: c0:a5:a2:ba:04:fb:4f:16:02:69:6f:08:a8:1f:84:2a:2a:bc: 8c:96:c1:aa:78:f2:e0:71:fb:66:7f:2b:eb:d6:25:5d:82:2d: 50:ea:2e:54:b6:5e:7d:96:e9:8e:ef:c4:46:9d:a3:ff:9d:9f: 18:dc:48:53:18:f0:0e:62:ea:f6:9a:c0:e9:f2:b5:62:87:3a: 6b:43:bd:3b:02:3c:7b:15:bf:db:f7:fa:ed:f7:70:c2:4c:ec: 66:47:2d:cf:7f:6c:3a:97:b9:77:5e:16:40:d8:0f:0c:48:ba: 3a:d6:fe:89:c0:03:38:20:52:f5:08:1f:a7:76:24:e6:c1:2b: da:4e:94:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYGnjE9ozDLIfVSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk ZmFkYmEwZjktNTAwMi00OTQ2LTkwNzctM2IxNTkwYjI2MDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw3Bl9Xsgnq5IrfH+Yf1woy1504mCkVMWVWw R22SCOnwWHjSol1NxT0vQZhn3oR0uElIuChkvKcaug0AgChHNpVrQ/36yZkYY2Uh st/LgfAiKy25L4WqJjVtjTtxmUklo3wcLYXVJ1v93c994MwN8aXnoJfELSIwo0ZJ bu5L7aiXCb+6twuEdL+LEDkeoe89eYqMedvk4YEC6kcHDSy118hrD4afvAFflQWq ut2Z9s9myneds+KSoqjpRSiAvaJzpWb0OFQrOicV3/RzXpLGpdkKy1sTUAWB42Ev 7ES/RKFYbGzRYYNmZrQv9//xIHEbVra8je6XdZZxUH870AuA4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSdE2M6rGVi0wOmHIEnD4kE/1geMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2QwNGJmZjgtYWEwZS0z YWQwLTk3NTAtNTAyODdhZjVhNmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCroKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHgSL6Pf9NmYAj3QVj/jKm9v8VwvawuGsXBHbHn/P9V9zKqC3TljaSx nS1VK10K+HecD4l8Yfe1Zktk7ebn28/Bi4hE0djolYEI41eFaNizxQbH0Uw9ihOZ VQkUotizDu6NJdiRK5EFxjbPrLntyF4Yf+5miLUHf/81YW6fI8CloroE+08WAmlv CKgfhCoqvIyWwap48uBx+2Z/K+vWJV2CLVDqLlS2Xn2W6Y7vxEado/+dnxjcSFMY 8A5i6vaawOnytWKHOmtDvTsCPHsVv9v3+u33cMJM7GZHLc9/bDqXuXdeFkDYDwxI ujrW/onAAzggUvUIH6d2JObBK9pOlAc= -----END CERTIFICATE-----Generated at Wed Jul 9 13:02:17 2025 by rpki-client