$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/76343322-78b8-3c9c-b3f2-3e32faf44c63.roa File: 76343322-78b8-3c9c-b3f2-3e32faf44c63.roa (raw, json) Hash identifier: VSn2+7NzsKikK3qaEjHYKnH+X29/ns5n0LbdFGWQY8k= Subject key identifier: D7:93:BE:AA:B8:CC:B3:A2:3C:4B:7C:EC:2F:77:47:82:AA:18:38:F2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E605DF56B82447BD5724D10 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/76343322-78b8-3c9c-b3f2-3e32faf44c63.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 174.130.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:5d:f5:6b:82:44:7b:d5:72:4d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=2d5e12b3-475a-4702-a60f-586197d2e354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b8:b3:9a:8d:19:04:8d:68:cf:b1:ac:5f:d1: 93:d3:da:4d:4a:94:7f:76:69:fc:c9:e9:34:be:15: 3a:b3:17:20:fa:26:82:3b:42:e3:84:ee:8f:8b:5f: 1b:11:34:cd:92:54:c8:2b:93:ba:8f:9b:d8:2f:47: 40:83:bc:f1:c6:e3:db:4a:ed:61:0a:f5:d3:45:99: 6a:85:22:d3:74:53:d5:c0:3e:ff:ae:23:65:55:bd: 66:0a:ef:6a:76:95:62:73:e3:68:73:8b:c2:c5:b1: ac:cc:27:6e:49:fe:6c:61:47:8e:db:9b:31:a0:75: 10:96:aa:2d:75:4c:47:7d:fe:b1:a9:d0:b5:50:3d: d7:37:de:bd:19:f2:97:59:8a:7d:71:38:8c:65:51: 9a:fe:17:61:5f:70:16:1a:57:11:f8:63:0f:65:dd: 20:04:9a:98:bb:f1:51:76:0d:d1:1e:2f:52:58:5c: 79:13:ef:47:06:51:5d:07:f6:db:8a:d1:24:2a:17: 3a:2a:c7:01:bb:6b:e8:55:51:0b:08:a9:16:99:e9: d3:31:60:78:e5:bd:31:94:eb:6a:51:dd:c8:4d:e7: de:3a:0e:3e:eb:66:1f:95:66:f5:31:80:32:2c:b0: db:ae:8a:b7:12:a5:47:06:91:98:76:56:56:8d:f4: 7d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:93:BE:AA:B8:CC:B3:A2:3C:4B:7C:EC:2F:77:47:82:AA:18:38:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/76343322-78b8-3c9c-b3f2-3e32faf44c63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:09:c0:e5:48:3c:44:a2:2a:c4:fe:0a:a3:44:56:81:0e:62: 63:01:b1:38:49:e0:aa:0f:2f:c7:3d:e3:56:fc:ae:b7:07:f8: 07:bc:83:e6:e0:f4:5b:05:d5:e8:77:ba:7e:01:21:dd:60:cb: 17:0c:2e:23:80:ec:84:52:ff:13:a8:78:05:f4:f5:7c:2c:45: 35:68:bb:87:92:43:d9:87:19:2c:17:32:31:e5:e6:33:36:89: 8d:c9:96:91:64:f4:c2:1d:19:46:ed:0f:9a:74:de:7b:32:20: 3b:b9:65:e4:b8:ed:b0:84:9d:c6:6e:8f:45:80:7d:16:cd:93: ac:0c:2e:04:c8:27:27:f7:59:17:8a:43:18:dc:c5:6b:1e:ae: 8d:7a:0e:a7:65:19:fb:fd:1f:b4:8e:d2:51:3e:7e:b2:5d:aa: 27:f2:4c:ee:26:b8:61:cf:2b:11:d1:49:4c:1e:36:c0:27:f3: 60:66:ea:d6:a0:c6:8f:84:7a:aa:8c:81:6b:e3:07:12:d6:25: 9d:e4:da:7f:c5:55:ab:7b:84:b1:c4:fb:b5:ba:44:9d:f2:1b: da:4a:11:cf:b0:cf:5d:60:80:dd:46:f1:04:c4:60:a1:c9:62: 8c:66:8a:fd:c7:37:e5:69:f2:56:f3:03:4f:90:a9:76:11:a6: 67:ab:06:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYF31a4JEe9VyTRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk MmQ1ZTEyYjMtNDc1YS00NzAyLWE2MGYtNTg2MTk3ZDJlMzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbizmo0ZBI1oz7GsX9GT09pNSpR/dmn8yek0 vhU6sxcg+iaCO0LjhO6Pi18bETTNklTIK5O6j5vYL0dAg7zxxuPbSu1hCvXTRZlq hSLTdFPVwD7/riNlVb1mCu9qdpVic+Noc4vCxbGszCduSf5sYUeO25sxoHUQlqot dUxHff6xqdC1UD3XN969GfKXWYp9cTiMZVGa/hdhX3AWGlcR+GMPZd0gBJqYu/FR dg3RHi9SWFx5E+9HBlFdB/bbitEkKhc6KscBu2voVVELCKkWmenTMWB45b0xlOtq Ud3ITefeOg4+62YflWb1MYAyLLDbroq3EqVHBpGYdlZWjfR9zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNeTvqq4zLOiPEt87C93R4KqGDjyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzYzNDMzMjItNzhiOC0z YzljLWIzZjItM2UzMmZhZjQ0YzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEroJwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEJwOVIPESiKsT+CqNEVoEOYmMBsThJ4KoPL8c941b8rrcH+Ae8g+bg 9FsF1eh3un4BId1gyxcMLiOA7IRS/xOoeAX09XwsRTVou4eSQ9mHGSwXMjHl5jM2 iY3JlpFk9MIdGUbtD5p03nsyIDu5ZeS47bCEncZuj0WAfRbNk6wMLgTIJyf3WReK QxjcxWsero16DqdlGfv9H7SO0lE+frJdqifyTO4muGHPKxHRSUweNsAn82Bm6tag xo+EeqqMgWvjBxLWJZ3k2n/FVat7hLHE+7W6RJ3yG9pKEc+wz11ggN1G8QTEYKHJ Yoxmiv3HN+Vp8lbzA0+QqXYRpmerBn4= -----END CERTIFICATE-----Generated at Wed Jul 9 13:08:46 2025 by rpki-client