$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1359896e-50e4-34a1-9043-424e4c0414c3.roa File: 1359896e-50e4-34a1-9043-424e4c0414c3.roa (raw, json) Hash identifier: dDUeSjLNJWb2iWFNnyIS8iLyOO332zfM9x/HzNk1npk= Subject key identifier: D5:7E:D3:C2:6A:7B:25:27:8F:89:E0:70:39:29:11:26:0F:5B:58:07 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB38627C3AF1F1426CCA5F000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1359896e-50e4-34a1-9043-424e4c0414c3.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 7029 IP address blocks: 173.187.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:27:c3:af:1f:14:26:cc:a5:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=0a07a0c6-4000-48a8-8dfa-bd8d8ed95c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:df:4c:08:76:1d:01:31:2c:3c:a6:21:c4:d2: 30:f3:c2:8b:2a:02:59:44:17:17:77:1d:33:59:f0: 86:72:c6:e0:ac:ed:81:af:fd:01:dd:f6:96:0a:37: c5:a9:6e:fc:ed:56:16:bd:72:d3:4f:ab:9e:2f:71: 5e:e9:28:d5:e9:4a:c8:71:6a:c4:d3:c9:92:c6:69: 5a:ed:09:9b:34:fb:27:d7:a9:03:5c:c6:b7:e8:38: 53:68:76:79:91:c1:81:27:de:da:4d:2d:f8:8e:13: 33:47:53:b2:ff:e5:24:11:8b:ef:d0:f9:d9:58:83: 7b:a0:ed:b6:af:b9:0e:ce:5f:a9:38:61:cb:d2:fd: 46:1e:c8:0c:6a:59:c2:2e:16:17:c5:43:3f:30:1d: ba:89:9d:fa:af:3f:fc:87:b6:8f:11:86:4c:32:a8: c6:2a:16:32:e1:87:ba:f0:5f:b8:07:52:ae:1f:ca: 9a:1e:31:c7:b0:cc:66:be:1c:23:26:e9:65:e7:dd: a7:98:40:cf:12:48:48:4f:db:bd:ab:bf:87:63:1b: 87:d9:2f:03:d3:1a:57:1e:94:b2:3f:1e:17:90:95: 0c:72:50:7e:bf:bc:7c:a3:4c:eb:72:df:f9:4c:c2: bc:4d:cb:1f:93:83:59:24:6a:3c:8f:28:61:5d:9a: 8b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7E:D3:C2:6A:7B:25:27:8F:89:E0:70:39:29:11:26:0F:5B:58:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1359896e-50e4-34a1-9043-424e4c0414c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:4f:a0:c9:0f:d6:7d:9c:47:32:13:3f:4a:c2:2b:44:06:d2: 20:f7:0a:47:c4:42:2a:3b:5a:83:4e:32:2f:ed:ee:58:fd:56: e3:c6:3a:7f:8f:bd:17:e8:f9:99:05:51:ab:4e:34:e2:16:3d: a8:f4:89:d4:2a:2c:f5:6b:2d:3a:da:60:48:ee:c5:9b:d3:d7: 7c:7d:49:a3:52:35:fc:45:62:dd:a3:52:e8:ec:ba:ac:89:6e: 14:a9:be:c3:78:b4:b4:01:6f:af:23:d8:08:84:c4:73:9d:fc: bd:d1:d7:ab:9e:be:a8:b7:72:53:57:16:9e:9d:1c:a1:10:e4: 37:ea:98:a2:f3:2f:76:62:9f:99:c2:0e:8f:22:a6:33:4c:92: 36:7d:33:f8:29:67:e0:d0:9d:d5:c8:fe:e5:a7:99:1d:e3:53: 01:91:a7:5f:29:2a:fd:e7:6b:cb:9b:71:f5:47:63:1b:51:ac: 4c:00:b9:8a:07:2c:ab:75:4a:76:af:3a:96:8a:94:e7:e2:62: 9b:1c:fd:3d:8f:4c:4f:80:2e:7e:f6:3a:d0:1a:72:45:e4:59: f7:c4:a2:d5:78:81:17:5d:83:d9:82:10:39:ac:9b:6c:d8:df: a9:b5:27:75:0d:f7:72:6f:dc:d1:ce:22:11:45:b1:ff:52:19: 38:45:f4:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhifDrx8UJsyl8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk MGEwN2EwYzYtNDAwMC00OGE4LThkZmEtYmQ4ZDhlZDk1YzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt99MCHYdATEsPKYhxNIw88KLKgJZRBcXdx0z WfCGcsbgrO2Br/0B3faWCjfFqW787VYWvXLTT6ueL3Fe6SjV6UrIcWrE08mSxmla 7QmbNPsn16kDXMa36DhTaHZ5kcGBJ97aTS34jhMzR1Oy/+UkEYvv0PnZWIN7oO22 r7kOzl+pOGHL0v1GHsgMalnCLhYXxUM/MB26iZ36rz/8h7aPEYZMMqjGKhYy4Ye6 8F+4B1KuH8qaHjHHsMxmvhwjJull592nmEDPEkhIT9u9q7+HYxuH2S8D0xpXHpSy Px4XkJUMclB+v7x8o0zrct/5TMK8Tcsfk4NZJGo8jyhhXZqLTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNV+08JqeyUnj4ngcDkpESYPW1gHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTM1OTg5NmUtNTBlNC0z NGExLTkwNDMtNDI0ZTRjMDQxNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9PoMkP1n2cRzITP0rCK0QG0iD3CkfEQio7WoNOMi/t7lj9VuPGOn+P vRfo+ZkFUatONOIWPaj0idQqLPVrLTraYEjuxZvT13x9SaNSNfxFYt2jUujsuqyJ bhSpvsN4tLQBb68j2AiExHOd/L3R16uevqi3clNXFp6dHKEQ5DfqmKLzL3Zin5nC Do8ipjNMkjZ9M/gpZ+DQndXI/uWnmR3jUwGRp18pKv3na8ubcfVHYxtRrEwAuYoH LKt1SnavOpaKlOfiYpsc/T2PTE+ALn72OtAackXkWffEotV4gRddg9mCEDmsm2zY 36m1J3UN93Jv3NHOIhFFsf9SGThF9CQ= -----END CERTIFICATE-----Generated at Wed Aug 6 11:18:25 2025 by rpki-client