$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d099c79-b523-35e4-9393-0d26efd95ac1.roa File: 0d099c79-b523-35e4-9393-0d26efd95ac1.roa (raw, json) Hash identifier: zi03hJdqjLnc8bDoJkK56c+oJtJrDoBJ4hJJZ94V5xw= Subject key identifier: 69:DF:F1:8A:72:C0:8B:CB:7D:C2:9E:19:BC:D9:78:91:68:E4:66:DC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8B0B74C3727C7FA1778A7FA6 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d099c79-b523-35e4-9393-0d26efd95ac1.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 7029 IP address blocks: 173.186.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:74:c3:72:7c:7f:a1:77:8a:7f:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=a13e90d6-b32e-4689-a853-d72a104b6d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2a:11:43:35:46:a7:ea:19:d8:28:b4:f9:5c: 2b:44:ed:99:2d:52:af:4d:d1:fc:8f:7e:36:ef:6e: ed:07:2d:c3:6f:6d:ef:6f:fc:22:38:85:58:69:bb: 75:8c:bb:81:75:98:3a:67:02:4c:cd:81:af:2b:5a: e4:d2:c5:a1:40:fb:0c:22:a8:9f:70:f5:0c:5a:f0: 36:2d:7c:3f:cb:17:9a:b9:ea:e5:e5:03:fd:97:e3: 3c:36:4c:49:74:33:a2:b9:78:ed:2a:6b:94:47:f5: ed:43:e5:eb:db:26:42:d4:d0:00:de:ee:6d:e6:46: cd:c4:d0:65:c0:b3:01:9c:78:7f:95:c8:f7:80:e5: e1:89:ee:6f:6e:29:5c:35:6a:dc:66:77:0b:fa:4b: f5:bc:f2:84:c9:10:06:65:89:94:48:3f:a0:1d:8c: f8:c1:7d:c2:df:93:81:b0:c0:82:73:13:33:1a:af: 46:82:0f:ae:59:f4:67:29:6a:96:50:b1:4c:50:56: d0:6f:d0:df:2b:ed:5a:a1:6c:37:7b:29:95:c7:fc: bb:08:35:f5:cb:44:10:52:86:5f:50:1a:a1:9f:1a: f6:b3:3a:a6:d3:ae:71:f3:85:1d:f3:77:d4:fd:bd: 5e:9f:b3:0c:6d:2a:ec:04:a5:56:77:e3:4f:00:70: 9a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DF:F1:8A:72:C0:8B:CB:7D:C2:9E:19:BC:D9:78:91:68:E4:66:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d099c79-b523-35e4-9393-0d26efd95ac1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:33:15:3c:3b:5e:d6:cb:1d:33:14:88:23:77:6d:29:e3:62: 7c:80:74:5e:93:d1:86:58:86:06:8c:55:e0:fd:ff:c6:ce:20: ef:a2:9b:f2:c8:ac:1c:c8:dd:d8:95:90:39:f8:a8:d5:2f:fa: be:fa:6e:1d:95:d8:52:bc:97:b6:c1:d1:3d:cc:21:e8:f7:ef: c4:f1:3c:45:c8:2b:08:29:c3:aa:23:81:b7:c2:cc:4e:f9:32: 12:9c:b7:1e:73:d6:25:23:30:2f:34:fa:dd:f2:3a:d8:b5:42: 85:c4:d1:87:83:d0:fc:8b:49:75:e5:cb:f8:bf:16:e3:b4:e0: dc:ea:da:0c:32:67:07:d1:2a:51:9b:f6:6c:6a:33:a5:89:35: 04:70:4a:3a:c2:88:ce:cf:3a:3d:e2:ef:a9:a3:90:d7:3a:d0: 99:9a:de:c0:84:b2:37:73:7b:66:ce:27:de:fb:c0:14:31:bd: 8f:c7:95:5e:04:8a:e4:53:45:79:7d:ec:d7:a6:ec:10:57:0c: 1e:51:79:d7:ea:b9:04:57:5b:48:dd:54:7e:fa:ab:d9:84:02: f8:79:c9:32:ad:4e:9a:c5:11:0d:47:77:32:ee:db:cb:48:ca: c3:14:92:05:f8:30:b1:28:05:cd:59:90:bb:c6:62:11:a4:34: f8:3e:71:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC3TDcnx/oXeKf6YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk YTEzZTkwZDYtYjMyZS00Njg5LWE4NTMtZDcyYTEwNGI2ZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiioRQzVGp+oZ2Ci0+VwrRO2ZLVKvTdH8j342 727tBy3Db23vb/wiOIVYabt1jLuBdZg6ZwJMzYGvK1rk0sWhQPsMIqifcPUMWvA2 LXw/yxeauerl5QP9l+M8NkxJdDOiuXjtKmuUR/XtQ+Xr2yZC1NAA3u5t5kbNxNBl wLMBnHh/lcj3gOXhie5vbilcNWrcZncL+kv1vPKEyRAGZYmUSD+gHYz4wX3C35OB sMCCcxMzGq9Ggg+uWfRnKWqWULFMUFbQb9DfK+1aoWw3eymVx/y7CDX1y0QQUoZf UBqhnxr2szqm065x84Ud83fU/b1en7MMbSrsBKVWd+NPAHCaAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnf8YpywIvLfcKeGbzZeJFo5GbcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGQwOTljNzktYjUyMy0z NWU0LTkzOTMtMGQyNmVmZDk1YWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUzFTw7XtbLHTMUiCN3bSnjYnyAdF6T0YZYhgaMVeD9/8bOIO+im/LI rBzI3diVkDn4qNUv+r76bh2V2FK8l7bB0T3MIej378TxPEXIKwgpw6ojgbfCzE75 MhKctx5z1iUjMC80+t3yOti1QoXE0YeD0PyLSXXly/i/FuO04Nzq2gwyZwfRKlGb 9mxqM6WJNQRwSjrCiM7POj3i76mjkNc60Jma3sCEsjdze2bOJ977wBQxvY/HlV4E iuRTRXl97Nem7BBXDB5RedfquQRXW0jdVH76q9mEAvh5yTKtTprFEQ1HdzLu28tI ysMUkgX4MLEoBc1ZkLvGYhGkNPg+cdk= -----END CERTIFICATE-----Generated at Wed Aug 6 11:01:04 2025 by rpki-client