$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f9e13f2-242e-3632-ac7f-25413d6418e7.roa File: 0f9e13f2-242e-3632-ac7f-25413d6418e7.roa (raw, json) Hash identifier: u+gnCKG0ksCmmwUn8w+98xFG5LEZMPkJ3NfbS6Jw8FM= Subject key identifier: 8F:3D:B2:F7:6B:62:5D:C6:63:A6:7B:83:E5:82:A1:BE:96:55:EF:4F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3F1C69EEC81FE90588414AA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f9e13f2-242e-3632-ac7f-25413d6418e7.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 173.190.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:69:ee:c8:1f:e9:05:88:41:4a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=3b95d18b-76fd-4a11-86c3-c4312e04ceb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e2:18:58:12:15:af:19:f1:b2:b5:f2:b0:5a: 9e:3a:45:e9:1f:10:5a:f0:66:96:37:3e:12:ce:1a: 63:5c:a8:e5:10:f3:32:42:03:8a:d2:bd:92:f3:fc: f6:1f:00:ed:10:41:28:65:a5:91:b7:8d:2f:ff:aa: 85:de:c2:d7:43:9d:76:f4:95:78:09:59:a1:e4:86: 3c:4c:df:7b:bf:7a:26:46:2a:71:d9:50:8e:fd:67: 4c:a9:41:24:45:19:03:5b:12:80:06:e4:c3:54:e3: 28:36:bc:a4:db:36:14:15:5f:d0:af:d2:c4:20:8b: e6:39:10:2e:14:de:5b:f0:49:18:6e:9e:23:64:6a: d8:0c:ad:ea:ba:8d:d8:73:23:db:39:9c:a8:0b:cb: cf:ec:e3:7f:49:26:d5:16:8a:7a:84:08:17:d5:92: da:f1:cc:b5:e0:50:32:17:ed:36:82:6f:40:08:2d: 9d:cf:f3:ef:87:65:ed:09:50:b1:17:5d:0f:af:01: 8a:f5:70:e5:e3:fc:9f:6a:65:ef:9d:fe:5e:c3:ca: ef:5c:25:0e:2e:90:2a:b3:9e:6c:9b:dc:47:26:25: 8e:9e:3f:06:f1:ab:90:b2:65:f9:ec:54:c4:99:41: ff:37:42:6f:7d:72:32:57:b9:58:89:4f:ec:8a:03: 4e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:3D:B2:F7:6B:62:5D:C6:63:A6:7B:83:E5:82:A1:BE:96:55:EF:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f9e13f2-242e-3632-ac7f-25413d6418e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:7a:f1:ca:b0:ad:dd:d8:cd:c4:09:cd:f9:99:a6:f0:7b:0f: 72:10:38:ce:95:2d:75:07:c1:7a:f7:64:66:4d:d7:c4:27:68: fd:59:8c:8e:77:a2:ca:5b:22:c2:cc:72:5d:6d:80:50:0a:b6: a7:98:39:f9:7f:cf:49:1e:59:28:9c:19:05:55:c9:39:7c:5d: 39:00:03:80:c2:dc:0c:46:5b:80:84:41:f5:11:e3:5b:e5:24: f7:55:9c:9f:0f:ec:7a:e5:39:3c:26:fd:bf:c4:1e:02:8b:01: 28:b2:e0:84:0c:da:a7:75:0b:80:46:ab:f1:f7:ff:f3:4f:3c: e6:8b:70:c8:c8:13:ca:e0:b8:d5:91:ed:22:6c:d0:25:32:65: ba:b4:7c:cb:19:d7:4f:d4:ff:5d:0c:6d:3b:8a:d8:cf:26:c4: 17:36:8b:01:a1:23:da:fc:21:f8:9f:dc:c4:b4:cc:e4:7e:15: dc:3c:65:d1:af:f8:d3:62:9e:21:43:a3:94:6c:37:81:df:0c: d1:d6:94:1f:8b:59:86:db:d8:b0:b1:a1:0d:ef:e2:21:b7:75: 8a:45:56:16:0d:bd:fd:8e:f1:44:ff:44:b9:06:70:59:28:fd: d2:f8:72:b2:77:bb:36:34:0f:f2:01:80:da:3d:d5:ab:b4:38: 2b:d8:8d:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HGnuyB/pBYhBSqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk M2I5NWQxOGItNzZmZC00YTExLTg2YzMtYzQzMTJlMDRjZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOIYWBIVrxnxsrXysFqeOkXpHxBa8GaWNz4S zhpjXKjlEPMyQgOK0r2S8/z2HwDtEEEoZaWRt40v/6qF3sLXQ5129JV4CVmh5IY8 TN97v3omRipx2VCO/WdMqUEkRRkDWxKABuTDVOMoNryk2zYUFV/Qr9LEIIvmORAu FN5b8EkYbp4jZGrYDK3quo3YcyPbOZyoC8vP7ON/SSbVFop6hAgX1ZLa8cy14FAy F+02gm9ACC2dz/Pvh2XtCVCxF10PrwGK9XDl4/yfamXvnf5ew8rvXCUOLpAqs55s m9xHJiWOnj8G8auQsmX57FTEmUH/N0JvfXIyV7lYiU/sigNORQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI89svdrYl3GY6Z7g+WCob6WVe9PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGY5ZTEzZjItMjQyZS0z NjMyLWFjN2YtMjU0MTNkNjQxOGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrb7KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZ68cqwrd3YzcQJzfmZpvB7D3IQOM6VLXUHwXr3ZGZN18QnaP1ZjI53 ospbIsLMcl1tgFAKtqeYOfl/z0keWSicGQVVyTl8XTkAA4DC3AxGW4CEQfUR41vl JPdVnJ8P7HrlOTwm/b/EHgKLASiy4IQM2qd1C4BGq/H3//NPPOaLcMjIE8rguNWR 7SJs0CUyZbq0fMsZ10/U/10MbTuK2M8mxBc2iwGhI9r8Ifif3MS0zOR+Fdw8ZdGv +NNiniFDo5RsN4HfDNHWlB+LWYbb2LCxoQ3v4iG3dYpFVhYNvf2O8UT/RLkGcFko /dL4crJ3uzY0D/IBgNo91au0OCvYjdw= -----END CERTIFICATE-----Generated at Tue Nov 4 19:15:48 2025 by rpki-client