$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0432f3fc-8388-33b7-9f29-1f0f4f5b0486.roa File: 0432f3fc-8388-33b7-9f29-1f0f4f5b0486.roa (raw, json) Hash identifier: ZyLTtWK5EWW6gxm2L0Y7X+lPXTNOdrjkWmhzkpZt/B8= Subject key identifier: 7E:D0:32:6F:DB:E0:AA:F6:85:ED:DE:A0:4E:F0:3C:DE:F4:02:E1:BA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB38627ABCCE85DE9EE56B300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0432f3fc-8388-33b7-9f29-1f0f4f5b0486.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 7029 IP address blocks: 173.189.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:27:ab:cc:e8:5d:e9:ee:56:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=e71722be-3d86-4ff8-8fd9-5643250d65f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:76:ab:b8:62:9b:38:74:a2:85:b0:25:ec:dd: df:74:e1:45:96:34:f7:19:1f:8e:22:9b:1d:83:c1: ee:0a:c2:b5:48:f7:58:6e:6c:a2:57:8c:79:a8:5d: f0:0d:cc:e5:5a:12:de:79:b6:1a:28:13:67:93:9d: e8:3d:95:66:c8:b6:33:6a:22:82:f2:0a:f9:58:75: ed:c4:23:b2:3a:71:26:b2:d7:83:db:90:12:d6:ab: fb:1e:55:d9:dd:5e:67:42:fb:39:9d:31:89:0e:71: 55:8c:d8:42:d8:07:79:6a:af:e3:7a:69:66:b5:79: ca:57:3a:c4:0d:68:dd:6e:39:ad:30:b5:8c:79:fd: 6d:f9:56:bb:cb:3c:f7:71:5a:3e:df:cb:5d:8a:eb: 34:23:d2:a2:81:37:a3:54:ce:c0:bb:4d:5b:c8:bd: 33:c0:09:14:4d:8a:fc:02:3b:7b:12:5b:7c:80:65: a1:87:0e:ea:e9:5f:5c:37:d6:cc:2a:c1:15:98:42: d9:71:0e:0b:34:08:9b:8d:84:4a:1d:d2:1b:02:ed: 59:8e:e6:8a:c0:27:3c:40:8b:c7:ac:48:4f:03:04: c5:a9:71:f3:00:c6:c4:e7:5c:9f:1c:27:5b:f3:5e: b2:71:69:85:91:a5:7b:72:bb:a1:9e:9e:91:07:d3: 2c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D0:32:6F:DB:E0:AA:F6:85:ED:DE:A0:4E:F0:3C:DE:F4:02:E1:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0432f3fc-8388-33b7-9f29-1f0f4f5b0486.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:cb:f0:74:0d:23:cb:42:b9:e6:2c:9b:a2:96:64:3b:fc:3c: c5:a4:1b:cd:0f:7a:ab:e2:8d:f0:21:3c:09:95:6d:cb:aa:17: 40:d4:3e:b4:3d:fc:7b:df:93:1d:a3:64:e0:8a:d5:fc:a0:a4: d5:4f:e2:e8:2b:7e:e4:28:2c:f0:b2:d7:81:96:ef:17:30:b5: 56:2e:7b:53:1b:bd:a4:a8:a4:fc:aa:c2:a6:be:1e:3c:74:07: 3a:97:f2:31:65:04:f2:ec:1e:57:08:b9:25:60:ec:7e:96:c7: f3:c7:61:69:73:72:80:2a:1c:96:53:24:8e:cb:73:6b:7b:fc: b7:b0:40:4c:10:84:6b:95:1f:fb:ea:47:1e:4d:95:a2:17:41: 5a:72:ac:76:b1:ad:5b:78:3f:d2:9c:3a:d2:b2:55:f9:94:39: 33:ac:ac:fa:f0:03:13:67:51:72:d8:62:fb:10:b6:11:ba:2f: 8a:93:d9:ac:c6:68:f7:07:e9:3b:45:f7:4a:cb:37:81:ad:ce: b4:0e:9f:a4:c3:94:63:04:fe:9f:19:8e:4c:83:56:df:14:59: 47:d1:02:13:77:54:f2:04:c5:34:65:f6:df:ca:a1:2a:99:dd: bf:0b:04:1f:f1:38:a5:a6:63:9d:52:f4:f1:88:1b:cb:f6:55: cb:17:57:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhierzOhd6e5WswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk ZTcxNzIyYmUtM2Q4Ni00ZmY4LThmZDktNTY0MzI1MGQ2NWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHaruGKbOHSihbAl7N3fdOFFljT3GR+OIpsd g8HuCsK1SPdYbmyiV4x5qF3wDczlWhLeebYaKBNnk53oPZVmyLYzaiKC8gr5WHXt xCOyOnEmsteD25AS1qv7HlXZ3V5nQvs5nTGJDnFVjNhC2Ad5aq/jemlmtXnKVzrE DWjdbjmtMLWMef1t+Va7yzz3cVo+38tdius0I9KigTejVM7Au01byL0zwAkUTYr8 Ajt7Elt8gGWhhw7q6V9cN9bMKsEVmELZcQ4LNAibjYRKHdIbAu1ZjuaKwCc8QIvH rEhPAwTFqXHzAMbE51yfHCdb816ycWmFkaV7cruhnp6RB9MsewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7QMm/b4Kr2he3eoE7wPN70AuG6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDQzMmYzZmMtODM4OC0z M2I3LTlmMjktMWYwZjRmNWIwNDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb1uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPL8HQNI8tCueYsm6KWZDv8PMWkG80PeqvijfAhPAmVbcuqF0DUPrQ9 /Hvfkx2jZOCK1fygpNVP4ugrfuQoLPCy14GW7xcwtVYue1MbvaSopPyqwqa+Hjx0 BzqX8jFlBPLsHlcIuSVg7H6Wx/PHYWlzcoAqHJZTJI7Lc2t7/LewQEwQhGuVH/vq Rx5NlaIXQVpyrHaxrVt4P9KcOtKyVfmUOTOsrPrwAxNnUXLYYvsQthG6L4qT2azG aPcH6TtF90rLN4GtzrQOn6TDlGME/p8ZjkyDVt8UWUfRAhN3VPIExTRl9t/KoSqZ 3b8LBB/xOKWmY51S9PGIG8v2VcsXV64= -----END CERTIFICATE-----Generated at Wed Aug 6 05:13:19 2025 by rpki-client