$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1106f7e2-ef2c-3e84-9950-2cf84d642ccb.roa File: 1106f7e2-ef2c-3e84-9950-2cf84d642ccb.roa (raw, json) Hash identifier: rn4rcCclMwAfzNYsjgEPF0HTk3plFKA3zWNrGL7g7B0= Subject key identifier: 51:91:F2:DA:1F:E3:F2:29:2C:48:95:30:CC:22:60:A9:A7:7C:CE:18 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3821B1318F9967CAD95EC9C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1106f7e2-ef2c-3e84-9950-2cf84d642ccb.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 173.186.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:b1:31:8f:99:67:ca:d9:5e:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=32015204-d609-4f92-b2d3-754504b043a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:eb:6b:7a:f2:04:60:3d:41:1b:61:c5:b3:e7: c4:6e:4f:6f:1a:11:bc:75:9e:b2:79:07:72:3f:c7: 9a:06:43:9b:94:bc:60:18:4b:58:6a:fb:c4:1a:a6: 27:c5:68:89:3c:14:26:b1:4e:7d:77:20:1d:6a:12: 45:c8:c4:a2:c1:8a:75:21:44:9f:79:69:7f:9a:d9: b9:af:1d:8d:f0:0d:8a:ed:26:38:f1:a6:7d:ed:0b: 3f:c6:5d:cb:2a:5a:ef:8c:79:b2:dc:c1:cf:9e:a1: bc:86:3c:7b:bc:0a:63:95:f2:b5:ea:8c:47:09:1e: e3:ff:b7:9f:71:03:c4:00:cd:71:2f:3d:4e:fd:b4: 2c:1e:3e:39:3f:46:0e:fd:7f:2a:16:a5:1a:db:47: 3e:46:34:34:17:bc:54:f6:e2:f4:1c:15:e1:3e:73: 95:a8:09:4e:44:1d:72:87:9e:fc:ca:95:ac:61:24: cb:91:c6:ea:64:7e:39:6f:a5:e7:24:bf:eb:8e:8e: c5:23:bd:4a:3e:d0:81:0b:b5:20:27:21:ae:b5:0c: 6a:ec:b6:94:06:33:59:dc:fa:45:43:d8:9d:b6:7a: d3:9d:dd:28:0f:ae:b3:b7:75:16:b0:59:c5:d2:61: f8:8c:d5:9a:d5:55:f1:2c:47:2e:80:3c:be:b4:ae: bc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:91:F2:DA:1F:E3:F2:29:2C:48:95:30:CC:22:60:A9:A7:7C:CE:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1106f7e2-ef2c-3e84-9950-2cf84d642ccb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:67:46:aa:87:7d:57:e4:c1:ba:86:f9:41:38:ec:09:5a:93: 13:24:13:dc:53:48:85:5a:0d:3c:e0:4a:c4:93:b6:55:ac:d7: fd:29:10:f4:cf:7b:54:db:f5:11:f9:74:47:a3:98:b9:85:a7: 70:07:bd:c5:a2:85:2f:10:f6:1d:de:66:db:7e:c4:9a:0d:12: b7:9a:06:ea:fd:d9:70:c9:b0:3a:e2:83:c5:9a:57:f8:7f:8b: 50:86:0d:74:e5:f5:06:7a:2c:3f:b0:93:12:cb:1b:c6:bc:cc: d9:00:5a:7f:cf:69:10:61:76:56:d2:ac:8a:fb:df:38:46:52: 6f:45:87:ef:70:92:44:a0:d2:35:13:94:e7:11:01:96:5f:7e: 4a:88:3e:d1:19:53:56:d2:53:ef:b6:58:6d:42:be:35:d0:24: 2e:46:74:60:47:02:cf:2a:70:ae:4b:0a:d1:1f:4f:e1:48:8e: 1a:52:05:16:03:2e:3c:26:2b:fb:d1:aa:48:c6:3a:8d:58:b1: cb:d9:0a:0f:9d:22:1d:9c:3b:6a:91:4c:23:37:d1:e8:ce:7e: c3:6f:79:3d:d7:93:8a:ea:bd:7f:12:37:3b:65:b5:7e:51:d9: a3:6e:da:f4:c6:36:4b:68:d3:d6:24:b5:fe:ec:e8:ca:ce:ba: dc:b1:32:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IbExj5lnytleycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk MzIwMTUyMDQtZDYwOS00ZjkyLWIyZDMtNzU0NTA0YjA0M2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhutrevIEYD1BG2HFs+fEbk9vGhG8dZ6yeQdy P8eaBkOblLxgGEtYavvEGqYnxWiJPBQmsU59dyAdahJFyMSiwYp1IUSfeWl/mtm5 rx2N8A2K7SY48aZ97Qs/xl3LKlrvjHmy3MHPnqG8hjx7vApjlfK16oxHCR7j/7ef cQPEAM1xLz1O/bQsHj45P0YO/X8qFqUa20c+RjQ0F7xU9uL0HBXhPnOVqAlORB1y h578ypWsYSTLkcbqZH45b6XnJL/rjo7FI71KPtCBC7UgJyGutQxq7LaUBjNZ3PpF Q9idtnrTnd0oD66zt3UWsFnF0mH4jNWa1VXxLEcugDy+tK68MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGR8tof4/IpLEiVMMwiYKmnfM4YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTEwNmY3ZTItZWYyYy0z ZTg0LTk5NTAtMmNmODRkNjQyY2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbrvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZnRqqHfVfkwbqG+UE47AlakxMkE9xTSIVaDTzgSsSTtlWs1/0pEPTP e1Tb9RH5dEejmLmFp3AHvcWihS8Q9h3eZtt+xJoNEreaBur92XDJsDrig8WaV/h/ i1CGDXTl9QZ6LD+wkxLLG8a8zNkAWn/PaRBhdlbSrIr73zhGUm9Fh+9wkkSg0jUT lOcRAZZffkqIPtEZU1bSU++2WG1CvjXQJC5GdGBHAs8qcK5LCtEfT+FIjhpSBRYD LjwmK/vRqkjGOo1YscvZCg+dIh2cO2qRTCM30ejOfsNveT3Xk4rqvX8SNztltX5R 2aNu2vTGNkto09Yktf7s6MrOutyxMvg= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:22 2025 by rpki-client