$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b87d8c86-75bb-339b-8fd8-3d7173a88cc5.roa File: b87d8c86-75bb-339b-8fd8-3d7173a88cc5.roa (raw, json) Hash identifier: J1Mvo6Lvtkhtg6wSwzUNP0VwdJTTmFZJowYNNjDscoc= Subject key identifier: C1:D8:2E:32:58:C4:4A:C7:F3:41:27:45:CE:0F:AE:4F:46:A5:6B:43 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E605E6E4DBCBAD61BBDF510 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b87d8c86-75bb-339b-8fd8-3d7173a88cc5.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 174.130.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:5e:6e:4d:bc:ba:d6:1b:bd:f5:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=d498d09d-5eca-4d9e-9dfb-33de4fd87911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ff:a5:99:e2:4a:e4:66:96:6c:2e:18:67:26: f7:61:b8:fb:3b:81:da:79:df:f2:33:68:d5:b2:c2: ac:49:ee:04:5f:d4:e9:47:02:3c:96:e6:80:28:24: 5e:29:df:1c:c1:ab:94:f1:37:e3:d5:f1:da:28:d5: 8c:98:9c:6f:9e:cd:ec:26:5b:94:12:98:62:8d:a6: fb:50:d7:16:92:4e:54:7b:47:e7:3c:9e:43:0b:52: 7e:82:02:9c:d6:49:9b:ed:bd:c3:a3:ae:e1:fc:be: 0c:35:18:57:fe:9c:6c:d4:16:81:53:90:77:86:13: ce:cb:3e:23:97:bd:e3:63:70:4c:8e:cb:91:af:03: 22:51:87:fd:ac:49:99:48:a9:82:20:70:3a:4d:25: 81:b0:b7:8a:ba:8d:a7:26:36:21:15:ff:4e:f1:ee: 9b:08:ca:d4:84:fa:44:69:3e:06:c3:2b:eb:79:80: 45:89:8a:ba:c4:f5:4b:b8:b3:a5:d8:5a:c7:6f:f3: 26:40:17:24:6c:35:93:aa:fa:85:ff:70:10:57:eb: 29:01:37:2d:72:19:4d:2b:1c:5c:09:53:86:07:03: 2e:3c:78:f4:cf:73:ee:f5:52:05:b3:08:b8:fc:55: f1:c0:74:fa:fa:9b:b3:88:46:53:c9:a4:e9:48:1b: 73:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D8:2E:32:58:C4:4A:C7:F3:41:27:45:CE:0F:AE:4F:46:A5:6B:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b87d8c86-75bb-339b-8fd8-3d7173a88cc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:fe:75:b8:98:6d:7b:83:d3:06:fd:45:66:4f:67:92:f8:90: 91:ab:05:5b:aa:af:af:8b:ad:c6:d4:04:bf:12:3d:a1:7c:0c: 1f:fc:cc:4c:06:64:fc:11:21:cd:6e:dc:85:9e:ad:2f:69:fa: a3:4e:c6:92:ee:64:58:2d:8a:ae:d2:b7:f4:79:de:d5:51:b1: 3f:60:1d:ce:9c:b7:3c:26:c0:2c:a3:df:d8:5a:54:b2:9e:4b: 4a:ba:7a:67:3a:ac:0b:78:c1:11:d1:29:37:3f:0b:34:f9:da: 13:a4:85:9c:51:93:af:63:ac:fe:7e:4a:82:54:df:2a:49:bd: 1e:47:f8:80:60:b6:10:12:2d:ce:70:a5:3d:b4:0d:21:d1:a4: a9:30:73:4d:a5:52:10:d4:e2:24:78:36:b4:7a:3e:e1:6f:90: ab:be:a5:e0:14:56:26:96:eb:bb:86:12:79:0d:43:f1:ea:3b: c8:e2:14:10:ad:68:89:e1:22:a2:e9:7f:f8:60:26:db:04:e8: 07:51:2d:04:98:e1:35:c0:26:5f:44:d6:67:22:02:5c:a1:10: bf:94:a2:28:f0:ea:bd:09:0a:5a:b1:a4:4a:b1:4c:ec:0c:d1: 47:f7:81:9c:5f:0d:63:11:a8:7e:f1:3c:7d:3d:19:d3:4d:3d: bf:bf:a7:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYF5uTby61hu99RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk ZDQ5OGQwOWQtNWVjYS00ZDllLTlkZmItMzNkZTRmZDg3OTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP+lmeJK5GaWbC4YZyb3Ybj7O4Haed/yM2jV ssKsSe4EX9TpRwI8luaAKCReKd8cwauU8Tfj1fHaKNWMmJxvns3sJluUEphijab7 UNcWkk5Ue0fnPJ5DC1J+ggKc1kmb7b3Do67h/L4MNRhX/pxs1BaBU5B3hhPOyz4j l73jY3BMjsuRrwMiUYf9rEmZSKmCIHA6TSWBsLeKuo2nJjYhFf9O8e6bCMrUhPpE aT4GwyvreYBFiYq6xPVLuLOl2FrHb/MmQBckbDWTqvqF/3AQV+spATctchlNKxxc CVOGBwMuPHj0z3Pu9VIFswi4/FXxwHT6+puziEZTyaTpSBtz4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHYLjJYxErH80EnRc4Prk9GpWtDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjg3ZDhjODYtNzViYi0z MzliLThmZDgtM2Q3MTczYTg4Y2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBroKUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEr+dbiYbXuD0wb9RWZPZ5L4kJGrBVuqr6+LrcbUBL8SPaF8DB/8zEwG ZPwRIc1u3IWerS9p+qNOxpLuZFgtiq7St/R53tVRsT9gHc6ctzwmwCyj39haVLKe S0q6emc6rAt4wRHRKTc/CzT52hOkhZxRk69jrP5+SoJU3ypJvR5H+IBgthASLc5w pT20DSHRpKkwc02lUhDU4iR4NrR6PuFvkKu+peAUViaW67uGEnkNQ/HqO8jiFBCt aInhIqLpf/hgJtsE6AdRLQSY4TXAJl9E1mciAlyhEL+Uoijw6r0JClqxpEqxTOwM 0Uf3gZxfDWMRqH7xPH09GdNNPb+/pyE= -----END CERTIFICATE-----Generated at Wed Jul 9 13:32:13 2025 by rpki-client