$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea022aaa-e4f1-3bf9-9ae2-d0cdd9c3eb5b.roa File: ea022aaa-e4f1-3bf9-9ae2-d0cdd9c3eb5b.roa (raw, json) Hash identifier: Xjh/oMys7IGASluVou9bu5mY78VYv6+8FNKcf5JoAQQ= Subject key identifier: 1B:4D:1C:11:7F:6F:D0:CE:4A:C5:BA:FC:23:20:B8:5A:C5:DF:B8:99 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E605FC9472CCA0DBF210900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea022aaa-e4f1-3bf9-9ae2-d0cdd9c3eb5b.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 174.130.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:5f:c9:47:2c:ca:0d:bf:21:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=441cf634-1a98-45cf-aaa2-2a9b99c6888e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ff:c0:a2:38:4f:b3:31:d8:eb:19:61:6d:ce: de:a7:50:e1:a1:c0:f4:cd:e3:9f:58:01:7b:11:d3: 7c:a5:ee:a3:e3:89:34:e2:4c:87:e2:a2:1d:4c:79: 79:3b:83:e4:c7:d3:b3:39:9b:70:df:a6:f5:18:2e: 20:36:3e:07:06:e1:62:5b:d8:b6:50:f8:2e:33:72: 2a:6a:ac:dd:22:02:64:c3:bf:8b:b5:fb:e8:06:b8: 15:f0:4f:75:ac:ee:6a:81:bd:69:84:a0:65:08:6d: 93:e2:53:65:21:39:59:e6:6f:95:f7:76:b0:a3:3c: 25:2c:db:35:86:a9:e0:91:2f:3f:46:cf:a1:28:50: 14:e6:00:8e:7a:d8:7b:75:06:5b:ea:64:94:4a:88: 76:0b:8a:d7:a9:e4:5f:3f:49:fb:14:41:b5:60:ec: 82:11:74:e0:ef:be:df:82:89:42:4e:8d:a2:fa:f8: 2a:31:d3:91:4e:02:96:7b:07:3f:27:c7:db:dc:b4: f2:65:ff:1f:22:24:a7:3f:9e:ae:d7:2d:d8:ad:cb: da:de:9b:be:a8:90:51:b8:cc:72:96:1e:5b:5c:d2: b6:e5:6f:ec:be:3d:53:ae:02:88:b4:61:1e:c2:df: 51:97:5a:fe:f9:93:f7:5d:0f:4b:11:de:4c:ed:a4: 35:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4D:1C:11:7F:6F:D0:CE:4A:C5:BA:FC:23:20:B8:5A:C5:DF:B8:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea022aaa-e4f1-3bf9-9ae2-d0cdd9c3eb5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:af:ff:c2:1f:7e:de:f2:0b:7b:3f:55:17:a7:38:39:a5:9d: 29:52:24:16:15:1e:21:9f:aa:6b:96:35:63:eb:74:ec:5a:a3: 0e:a3:e1:9d:20:3f:1f:1d:6d:c8:1f:4d:53:fe:40:1a:a9:86: 0b:41:5b:da:c9:05:b3:8c:68:6b:df:1b:32:48:6c:6b:d8:50: 90:43:f1:73:cf:dc:89:f3:1a:9a:25:b3:41:ca:f9:3d:e1:1f: 11:3e:bd:51:cd:32:60:2e:44:dd:fc:c6:6a:85:57:e4:5f:0e: 32:b9:83:13:24:e4:65:e2:9a:59:2a:fc:fe:2a:48:24:07:19: 9e:80:eb:53:38:35:71:c9:74:05:09:6b:19:76:b8:b5:53:85: 59:5e:f1:3e:5f:20:76:59:26:88:70:e1:66:9a:f0:f0:db:54: ad:ae:eb:ec:0a:37:99:88:4a:e2:49:d0:90:7f:46:06:b8:cb: 76:33:e6:f4:8b:43:aa:c4:85:cd:63:06:d8:f3:f7:32:8a:32: 5e:b8:0f:06:4c:2b:5b:e7:12:78:70:49:8a:cc:a3:ff:d5:63: 62:f0:ba:81:ab:32:d0:39:eb:eb:cc:d2:17:83:75:e9:c9:c4: 24:7f:18:49:9c:14:93:ab:88:3a:eb:83:b6:8e:6e:14:e4:d7: 76:62:65:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYF/JRyzKDb8hCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk NDQxY2Y2MzQtMWE5OC00NWNmLWFhYTItMmE5Yjk5YzY4ODhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv/AojhPszHY6xlhbc7ep1DhocD0zeOfWAF7 EdN8pe6j44k04kyH4qIdTHl5O4Pkx9OzOZtw36b1GC4gNj4HBuFiW9i2UPguM3Iq aqzdIgJkw7+LtfvoBrgV8E91rO5qgb1phKBlCG2T4lNlITlZ5m+V93awozwlLNs1 hqngkS8/Rs+hKFAU5gCOeth7dQZb6mSUSoh2C4rXqeRfP0n7FEG1YOyCEXTg777f golCTo2i+vgqMdORTgKWewc/J8fb3LTyZf8fIiSnP56u1y3Yrcva3pu+qJBRuMxy lh5bXNK25W/svj1TrgKItGEewt9Rl1r++ZP3XQ9LEd5M7aQ19QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtNHBF/b9DOSsW6/CMguFrF37iZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWEwMjJhYWEtZTRmMS0z YmY5LTlhZTItZDBjZGQ5YzNlYjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAroKXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESv/8Ifft7yC3s/VRenODmlnSlSJBYVHiGfqmuWNWPrdOxaow6j4Z0g Px8dbcgfTVP+QBqphgtBW9rJBbOMaGvfGzJIbGvYUJBD8XPP3InzGpols0HK+T3h HxE+vVHNMmAuRN38xmqFV+RfDjK5gxMk5GXimlkq/P4qSCQHGZ6A61M4NXHJdAUJ axl2uLVThVle8T5fIHZZJohw4Waa8PDbVK2u6+wKN5mISuJJ0JB/Rga4y3Yz5vSL Q6rEhc1jBtjz9zKKMl64DwZMK1vnEnhwSYrMo//VY2LwuoGrMtA56+vM0heDdenJ xCR/GEmcFJOriDrrg7aObhTk13ZiZZ8= -----END CERTIFICATE-----Generated at Wed Jul 9 12:49:48 2025 by rpki-client