$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/545246e9-fb70-372a-8e83-4998a5e5eee3.roa File: 545246e9-fb70-372a-8e83-4998a5e5eee3.roa (raw, json) Hash identifier: 9H2z7Qet7cYWYzpQLaRX7WwiQD8tTkPSLEOO4BdkmRs= Subject key identifier: E3:F5:2A:1B:24:E2:EC:C5:99:47:58:2A:F2:B6:CA:AC:2E:C5:26:86 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E605C621855CA969E519D90 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/545246e9-fb70-372a-8e83-4998a5e5eee3.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 174.131.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:5c:62:18:55:ca:96:9e:51:9d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=86e45cc5-06ce-457e-b00f-19705e1b6540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:59:b8:b5:1c:32:d1:a8:90:b3:2b:98:be:90: 28:60:82:74:8b:a5:60:84:d4:2c:1d:c7:94:01:b0: d8:50:3f:80:57:30:6d:c2:1f:51:48:6a:6e:b2:60: 45:86:df:de:14:75:94:11:06:f3:4c:4e:a3:54:ca: bd:16:d3:33:c5:03:78:5f:4c:87:71:5c:cf:a3:93: 58:aa:03:93:0a:17:cf:f4:c7:ee:99:73:13:37:37: f4:d4:d9:c5:19:11:39:83:bc:6f:38:6e:ba:49:aa: bb:5f:1f:3e:7b:f6:bd:7b:09:63:09:f4:e9:9d:0b: f3:ba:85:31:30:5f:67:57:bf:8c:86:9f:2a:00:f3: 5d:ae:7e:a6:b8:09:53:aa:35:23:6b:45:61:f0:d1: 92:c6:fe:b2:98:46:b3:72:a4:2f:38:fc:50:ad:8d: 32:89:78:e1:10:2f:26:63:42:57:fb:b5:ee:23:0e: 23:90:8d:45:c4:23:a0:48:66:3e:7b:bb:36:35:a3: 79:ae:b1:43:7e:e7:41:8c:1b:fa:46:01:6d:45:10: c1:67:47:d0:cd:d2:df:c8:23:d0:10:9d:47:b7:64: 2c:99:57:a7:c2:2e:44:e7:b9:ca:f2:7c:86:f9:b6: 45:3a:51:10:e1:eb:4c:85:50:dc:02:36:6d:2a:27: 42:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F5:2A:1B:24:E2:EC:C5:99:47:58:2A:F2:B6:CA:AC:2E:C5:26:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/545246e9-fb70-372a-8e83-4998a5e5eee3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:48:a5:30:e9:08:be:02:57:e3:bf:63:7d:3c:2e:a0:fa:04: 8d:eb:89:f2:d5:aa:18:30:7d:b1:74:d6:46:72:88:14:27:bf: 83:50:fe:ba:ee:ff:50:f5:ee:59:a5:bb:a8:54:4a:70:e1:55: 7e:89:1d:33:2a:32:1c:bc:00:3e:38:12:c5:f2:90:8e:d5:d4: 9d:43:d4:92:a0:e9:39:5d:5e:2d:84:6c:d2:ad:75:aa:46:3c: 24:86:00:4c:84:e1:09:0e:9a:a6:94:e0:3a:6b:66:fc:65:4b: 8d:af:08:6d:35:40:38:67:10:af:15:15:63:01:69:0e:be:5e: 66:c1:c6:28:6e:a6:9e:96:3d:58:86:ca:73:f8:fb:2a:ea:a0: 4a:9b:a6:c8:4f:97:b5:e3:e5:08:1c:da:cb:66:bc:5c:77:f2: c0:7d:b3:5d:61:12:20:9d:ae:e1:eb:03:8e:d8:56:bb:bb:d0: 3f:82:3b:ec:60:bb:e6:d8:f0:8f:42:40:5a:99:c0:66:b3:cf: 05:a0:76:58:2f:0c:25:af:bb:7b:f3:a0:d7:52:25:89:c0:1a: 25:19:81:ac:10:71:e4:86:83:46:e3:49:2d:a4:36:c1:9e:b7: 83:bb:1e:fc:f1:5b:f4:4f:5b:5e:df:84:58:3e:be:c0:c6:14: 94:f6:fb:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYFxiGFXKlp5RnZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk ODZlNDVjYzUtMDZjZS00NTdlLWIwMGYtMTk3MDVlMWI2NTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFm4tRwy0aiQsyuYvpAoYIJ0i6VghNQsHceU AbDYUD+AVzBtwh9RSGpusmBFht/eFHWUEQbzTE6jVMq9FtMzxQN4X0yHcVzPo5NY qgOTChfP9MfumXMTNzf01NnFGRE5g7xvOG66Saq7Xx8+e/a9ewljCfTpnQvzuoUx MF9nV7+Mhp8qAPNdrn6muAlTqjUja0Vh8NGSxv6ymEazcqQvOPxQrY0yiXjhEC8m Y0JX+7XuIw4jkI1FxCOgSGY+e7s2NaN5rrFDfudBjBv6RgFtRRDBZ0fQzdLfyCPQ EJ1Ht2QsmVenwi5E57nK8nyG+bZFOlEQ4etMhVDcAjZtKidCawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOP1Khsk4uzFmUdYKvK2yqwuxSaGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTQ1MjQ2ZTktZmI3MC0z NzJhLThlODMtNDk5OGE1ZTVlZWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCroPkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1IpTDpCL4CV+O/Y308LqD6BI3rifLVqhgwfbF01kZyiBQnv4NQ/rru /1D17lmlu6hUSnDhVX6JHTMqMhy8AD44EsXykI7V1J1D1JKg6TldXi2EbNKtdapG PCSGAEyE4QkOmqaU4DprZvxlS42vCG01QDhnEK8VFWMBaQ6+XmbBxihupp6WPViG ynP4+yrqoEqbpshPl7Xj5Qgc2stmvFx38sB9s11hEiCdruHrA47YVru70D+CO+xg u+bY8I9CQFqZwGazzwWgdlgvDCWvu3vzoNdSJYnAGiUZgawQceSGg0bjSS2kNsGe t4O7HvzxW/RPW17fhFg+vsDGFJT2+88= -----END CERTIFICATE-----Generated at Wed Jul 9 13:54:52 2025 by rpki-client