$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1de2955a-2d09-31d2-89d1-1e9f05fa16fe.roa File: 1de2955a-2d09-31d2-89d1-1e9f05fa16fe.roa (raw, json) Hash identifier: kC1JouSNFX0RJPWNsS4GhBStSdgy3bPIn/7RlBJQaek= Subject key identifier: 8F:90:31:2E:CD:65:6D:6C:32:E7:4F:BA:20:E7:B5:C1:EE:89:07:77 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8C70DBACA480C345B9506680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1de2955a-2d09-31d2-89d1-1e9f05fa16fe.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 173.187.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:db:ac:a4:80:c3:45:b9:50:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=e225482f-5822-41ac-a3a1-033c7a6e446d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cd:83:ea:1c:98:cb:cd:30:63:bc:3b:60:54: bf:ed:69:42:07:84:c4:2d:67:c0:fe:42:21:05:4f: 86:61:0a:5e:fb:58:ee:c5:7d:b9:96:da:08:3f:46: 00:50:82:95:de:31:e7:4c:a4:4e:c4:9e:c1:b8:20: 83:14:60:e2:62:23:74:b8:21:b3:b4:16:06:07:a8: 9e:45:5b:4c:01:a6:a6:c9:dd:39:0c:e2:36:a7:ff: ab:52:d5:b5:cd:24:fb:f6:58:d5:d9:20:24:42:71: c1:0f:7d:23:d1:5c:a7:42:5b:09:6a:29:4e:0f:11: 83:53:92:2a:99:8e:f5:a1:32:95:c0:5e:48:57:66: 55:ff:4b:88:14:c5:52:ac:cd:0f:17:1c:7f:e7:c1: 9d:48:dc:d1:c9:10:57:b2:2b:bc:01:7d:18:f0:0d: d4:6c:3e:69:2c:13:b4:93:f7:f5:b4:a4:cf:61:41: 79:25:d9:0a:22:0d:26:cc:35:57:0f:74:a9:d2:cc: 20:8c:66:3d:01:70:74:3e:2a:27:e5:68:92:ed:72: 6f:d7:fd:d9:85:84:e0:8a:29:1f:f8:7f:97:91:c6: c5:17:b0:9a:98:97:a1:fb:20:a6:fa:51:f3:95:0d: bc:2a:d1:09:bf:22:d5:f2:a1:cd:16:be:f8:12:57: d6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:90:31:2E:CD:65:6D:6C:32:E7:4F:BA:20:E7:B5:C1:EE:89:07:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1de2955a-2d09-31d2-89d1-1e9f05fa16fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:dd:84:1e:e8:cc:0c:49:9c:8b:d5:e6:21:6f:1b:87:10:f2: 57:b9:50:8b:72:4a:f0:16:78:3d:37:48:2b:32:cb:df:4a:b2: c4:67:a8:d8:6b:90:55:ea:15:8a:bb:16:42:20:15:be:b8:fd: 87:0f:f1:cc:b1:59:08:ff:84:bd:f7:31:f2:80:2d:90:26:e0: 34:d9:92:4d:55:8b:3d:57:a1:90:2e:9c:fd:13:8d:18:90:95: 41:6b:81:ea:02:a2:d4:5b:8d:45:d9:0a:2a:2a:ab:b2:ac:5d: e3:5a:05:b8:a7:42:6d:e5:fb:8e:cf:53:c2:db:27:7c:47:34: aa:65:cd:e9:1c:93:fa:ef:c8:11:90:0f:fb:e8:6c:ad:fb:98: e6:95:4b:df:4c:af:2b:68:89:ed:6d:0b:7d:35:b2:9e:c3:aa: 24:b4:6e:d8:6a:19:a0:a9:2f:56:42:95:14:1e:a1:15:ea:dc: cf:f0:24:e3:ba:cc:69:84:c0:28:21:7e:83:03:03:bc:9a:29: 97:60:09:1a:25:18:d2:92:90:5a:13:c3:6c:02:f3:56:55:28: b5:51:30:48:8a:a1:57:4a:de:12:5e:54:d1:55:7f:e4:a3:f9: 66:a8:97:55:78:60:71:dc:f2:5f:3b:b1:f2:33:6f:92:1e:b4: a3:25:14:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcNuspIDDRblQZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk ZTIyNTQ4MmYtNTgyMi00MWFjLWEzYTEtMDMzYzdhNmU0NDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo82D6hyYy80wY7w7YFS/7WlCB4TELWfA/kIh BU+GYQpe+1juxX25ltoIP0YAUIKV3jHnTKROxJ7BuCCDFGDiYiN0uCGztBYGB6ie RVtMAaamyd05DOI2p/+rUtW1zST79ljV2SAkQnHBD30j0VynQlsJailODxGDU5Iq mY71oTKVwF5IV2ZV/0uIFMVSrM0PFxx/58GdSNzRyRBXsiu8AX0Y8A3UbD5pLBO0 k/f1tKTPYUF5JdkKIg0mzDVXD3Sp0swgjGY9AXB0Pion5WiS7XJv1/3ZhYTgiikf +H+XkcbFF7CamJeh+yCm+lHzlQ28KtEJvyLV8qHNFr74ElfW2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+QMS7NZW1sMudPuiDntcHuiQd3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWRlMjk1NWEtMmQwOS0z MWQyLTg5ZDEtMWU5ZjA1ZmExNmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbvIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETdhB7ozAxJnIvV5iFvG4cQ8le5UItySvAWeD03SCsyy99KssRnqNhr kFXqFYq7FkIgFb64/YcP8cyxWQj/hL33MfKALZAm4DTZkk1Viz1XoZAunP0TjRiQ lUFrgeoCotRbjUXZCioqq7KsXeNaBbinQm3l+47PU8LbJ3xHNKplzekck/rvyBGQ D/vobK37mOaVS99Mrytoie1tC301sp7DqiS0bthqGaCpL1ZClRQeoRXq3M/wJOO6 zGmEwCghfoMDA7yaKZdgCRolGNKSkFoTw2wC81ZVKLVRMEiKoVdK3hJeVNFVf+Sj +Waol1V4YHHc8l87sfIzb5IetKMlFKk= -----END CERTIFICATE-----Generated at Tue Aug 5 16:49:42 2025 by rpki-client