$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d2b22a6-bd49-3c71-a630-4cd3ecafa3ae.roa File: 5d2b22a6-bd49-3c71-a630-4cd3ecafa3ae.roa (raw, json) Hash identifier: NtfxTE8ZUzhILpXHGR/gx2ppCKHmOaBNv9REKjisoeU= Subject key identifier: 15:C8:42:E4:D9:AE:11:20:34:7A:5D:97:FB:8A:42:C5:C4:2A:F6:09 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E606A41F768CD06F0B28900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d2b22a6-bd49-3c71-a630-4cd3ecafa3ae.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 174.131.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:6a:41:f7:68:cd:06:f0:b2:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=aa896cc9-af65-4a64-aefb-c97651f9cfdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b7:e3:80:0e:2d:8d:ab:a9:25:8d:50:c5:d0: fc:6f:fc:85:02:f0:c5:aa:a2:0f:d5:c9:92:e9:d6: 98:6a:e3:3e:cd:c8:cc:31:f3:f8:d2:76:0a:80:08: 45:f9:d1:d4:93:e4:69:99:62:da:26:6b:c5:bc:c7: eb:1a:b9:14:78:25:b2:07:17:67:e8:d6:34:d3:dd: 4d:3d:a8:52:ac:dc:3e:cd:1a:ba:f5:9b:c0:cd:24: 36:a5:70:b0:ef:fb:e3:aa:c8:7f:c3:6f:64:26:fe: 5d:52:f4:5c:75:a1:64:d5:d2:05:00:68:f9:88:90: db:e1:09:cf:bf:84:3f:66:ed:43:cf:9d:49:bf:57: 38:20:b1:4d:0f:2f:d6:00:e6:d9:58:4c:0a:a4:40: 4b:76:fb:c6:b5:ab:8e:8f:22:8c:0b:b9:22:4f:e4: e7:78:18:76:bf:7a:ab:c6:e6:6c:46:7c:f8:d6:aa: 97:2b:06:e1:82:b2:3e:b2:63:c8:3b:93:4e:71:df: d3:df:f6:c0:8e:92:93:5b:a2:fd:1f:f4:6f:f1:52: 59:70:3b:6f:60:ed:dd:60:cb:1f:25:4e:e0:36:b4: e9:b7:6f:cf:c0:81:16:18:de:c3:77:80:63:ef:3d: 49:d5:d2:26:b5:ff:cf:63:01:55:d1:10:2a:48:6f: 86:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C8:42:E4:D9:AE:11:20:34:7A:5D:97:FB:8A:42:C5:C4:2A:F6:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d2b22a6-bd49-3c71-a630-4cd3ecafa3ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:d5:e4:1e:45:25:f1:1b:bc:05:f1:ce:f0:70:41:b2:77:79: 13:27:db:9a:64:06:40:d5:be:8f:6c:61:4e:42:b2:ac:96:b0: 1e:f5:10:1a:2c:02:46:97:be:54:30:cc:9e:46:51:48:3c:21: 08:da:a7:73:4a:48:a1:dd:15:b4:de:09:e0:5c:35:1f:82:83: 08:01:9d:0e:50:d2:24:fe:13:7a:e9:68:96:62:e2:7a:9f:4d: 92:02:7e:4b:21:a2:a7:04:b7:4b:c9:dc:e4:1c:cf:a9:2a:7b: 67:7a:a1:e8:7f:ef:4c:cd:dc:1c:60:db:b2:b1:a2:88:90:23: 48:a7:0e:d3:a4:a1:32:a3:7a:c5:84:96:05:ba:3a:6e:97:a5: 3e:4e:19:b2:89:7e:83:f1:73:8a:19:53:38:b1:d7:f6:bf:6a: 28:b4:cb:b1:5e:de:5b:ee:b0:13:ae:34:a1:65:e5:ff:e3:18: 94:36:6f:0d:6c:52:32:f2:08:53:b1:0b:78:a7:25:71:1b:fc: db:93:b1:2c:39:ab:44:8c:41:9f:5a:60:fb:82:38:61:86:4a: a2:fa:4c:1b:f3:9b:e0:30:cd:18:65:0f:47:16:96:5e:18:95: bb:fa:4f:e9:d9:03:10:d2:6f:1f:14:77:5e:91:8f:cf:21:c1: 02:fe:b1:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYGpB92jNBvCyiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk YWE4OTZjYzktYWY2NS00YTY0LWFlZmItYzk3NjUxZjljZmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7fjgA4tjaupJY1QxdD8b/yFAvDFqqIP1cmS 6daYauM+zcjMMfP40nYKgAhF+dHUk+RpmWLaJmvFvMfrGrkUeCWyBxdn6NY0091N PahSrNw+zRq69ZvAzSQ2pXCw7/vjqsh/w29kJv5dUvRcdaFk1dIFAGj5iJDb4QnP v4Q/Zu1Dz51Jv1c4ILFNDy/WAObZWEwKpEBLdvvGtauOjyKMC7kiT+TneBh2v3qr xuZsRnz41qqXKwbhgrI+smPIO5NOcd/T3/bAjpKTW6L9H/Rv8VJZcDtvYO3dYMsf JU7gNrTpt2/PwIEWGN7Dd4Bj7z1J1dImtf/PYwFV0RAqSG+GBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXIQuTZrhEgNHpdl/uKQsXEKvYJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWQyYjIyYTYtYmQ0OS0z YzcxLWE2MzAtNGNkM2VjYWZhM2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBroP6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzV5B5FJfEbvAXxzvBwQbJ3eRMn25pkBkDVvo9sYU5CsqyWsB71EBos AkaXvlQwzJ5GUUg8IQjap3NKSKHdFbTeCeBcNR+CgwgBnQ5Q0iT+E3rpaJZi4nqf TZICfkshoqcEt0vJ3OQcz6kqe2d6oeh/70zN3Bxg27KxooiQI0inDtOkoTKjesWE lgW6Om6XpT5OGbKJfoPxc4oZUzix1/a/aii0y7Fe3lvusBOuNKFl5f/jGJQ2bw1s UjLyCFOxC3inJXEb/NuTsSw5q0SMQZ9aYPuCOGGGSqL6TBvzm+AwzRhlD0cWll4Y lbv6T+nZAxDSbx8Ud16Rj88hwQL+sUA= -----END CERTIFICATE-----Generated at Wed Jul 9 13:12:31 2025 by rpki-client