$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37ba3cd5-c664-374e-a449-0a19748669f1.roa File: 37ba3cd5-c664-374e-a449-0a19748669f1.roa (raw, json) Hash identifier: mnVWF/DgayvAzFi0O86sgJCtZ1l3onVjHyKMpFoLnBI= Subject key identifier: 64:E2:90:CE:7B:F0:D4:49:3D:94:B3:1B:64:EF:0F:48:19:EC:12:17 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8C70D4EAD02A0452C68B7F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37ba3cd5-c664-374e-a449-0a19748669f1.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 173.189.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:d4:ea:d0:2a:04:52:c6:8b:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=eec71531-0b6e-4ec9-ad71-9ecbe10bbfac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d4:26:62:5b:b8:e4:12:d8:ed:41:bd:51:56: 68:74:6e:09:c2:32:a0:94:5e:d7:f7:7a:89:a3:bb: 20:9d:b8:7b:1b:c7:e4:d8:79:9e:ca:57:c1:34:ad: 2a:15:a5:76:4d:31:8c:b6:d0:1c:57:79:48:18:16: 0a:55:8f:81:10:34:34:8d:fa:bd:c0:4c:e4:e9:02: a4:d7:64:ac:b3:d3:65:aa:86:94:38:0d:ab:b7:7e: 4b:99:e0:88:66:3b:ac:99:b2:10:2a:12:e9:86:20: 41:4b:ae:66:82:5c:92:65:d4:5b:4c:c0:78:a0:9f: dd:b6:59:2d:76:8f:01:76:77:aa:38:32:45:f8:c3: d4:37:13:4b:b4:de:08:e3:3c:05:46:82:1b:97:07: f5:46:26:52:e1:44:38:da:f7:7c:97:1b:ae:f5:6e: f4:67:5f:86:da:b0:a1:03:67:66:b2:ba:49:be:0c: 45:f1:ae:26:ec:6b:46:d5:1c:f9:95:38:da:7b:41: 50:6e:77:0f:0b:91:18:cf:1f:04:75:06:94:b1:a7: 4b:84:53:3b:ea:d0:a4:ec:b0:2f:e0:b3:8c:f9:b7: f5:2e:c8:a2:61:c2:d7:ad:7b:bc:da:b1:cf:aa:34: b4:83:68:b2:b4:aa:c8:aa:d1:bc:36:72:28:78:8c: 7e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E2:90:CE:7B:F0:D4:49:3D:94:B3:1B:64:EF:0F:48:19:EC:12:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37ba3cd5-c664-374e-a449-0a19748669f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:20:56:ea:e1:63:2d:4c:8b:f6:03:67:09:50:b2:c2:ff:16: 57:9c:dd:34:dc:61:09:dc:b1:3a:8f:d5:a5:40:c4:65:8e:dd: 0c:11:9f:0c:62:95:da:23:e6:92:e3:f9:a2:1a:14:a4:b5:29: 0f:2a:6c:57:d5:dc:6b:9a:17:ef:3b:e3:eb:54:57:b2:31:c8: 91:94:d8:f9:92:35:e0:7d:34:8c:a1:6d:d5:81:53:7a:c0:d5: a2:d6:4c:95:72:41:d3:b8:d3:19:46:a8:2e:a9:e5:14:d2:cd: 2a:b8:42:81:fd:07:40:a6:25:c9:ec:91:03:fe:5b:41:d2:68: 08:85:64:69:cf:84:96:05:28:df:9e:dc:52:5a:1d:14:5e:96: ff:59:33:a3:57:58:c5:3e:9e:13:2f:d6:de:39:37:53:cc:34: 02:f3:f6:8f:32:b5:9c:b1:40:c0:7e:2a:86:e4:b4:ac:38:9f: 9b:e3:ed:ba:c3:3c:86:4c:c7:9a:1b:1d:39:65:e6:a9:28:4f: 68:24:90:4b:0c:b4:d1:a9:71:bf:ab:4c:79:1c:62:c9:ed:e0: b1:a1:28:70:c0:0d:ab:8f:cb:02:f6:5b:19:a0:0e:02:37:ae: 07:dc:38:d4:22:c5:bc:6f:2b:48:26:6f:60:a4:35:54:ea:a7: fc:11:39:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcNTq0CoEUsaLf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk ZWVjNzE1MzEtMGI2ZS00ZWM5LWFkNzEtOWVjYmUxMGJiZmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNQmYlu45BLY7UG9UVZodG4JwjKglF7X93qJ o7sgnbh7G8fk2HmeylfBNK0qFaV2TTGMttAcV3lIGBYKVY+BEDQ0jfq9wEzk6QKk 12Sss9NlqoaUOA2rt35LmeCIZjusmbIQKhLphiBBS65mglySZdRbTMB4oJ/dtlkt do8BdneqODJF+MPUNxNLtN4I4zwFRoIblwf1RiZS4UQ42vd8lxuu9W70Z1+G2rCh A2dmsrpJvgxF8a4m7GtG1Rz5lTjae0FQbncPC5EYzx8EdQaUsadLhFM76tCk7LAv 4LOM+bf1LsiiYcLXrXu82rHPqjS0g2iytKrIqtG8NnIoeIx+aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTikM578NRJPZSzG2TvD0gZ7BIXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzdiYTNjZDUtYzY2NC0z NzRlLWE0NDktMGExOTc0ODY2OWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEgVurhYy1Mi/YDZwlQssL/Flec3TTcYQncsTqP1aVAxGWO3QwRnwxi ldoj5pLj+aIaFKS1KQ8qbFfV3GuaF+874+tUV7IxyJGU2PmSNeB9NIyhbdWBU3rA 1aLWTJVyQdO40xlGqC6p5RTSzSq4QoH9B0CmJcnskQP+W0HSaAiFZGnPhJYFKN+e 3FJaHRRelv9ZM6NXWMU+nhMv1t45N1PMNALz9o8ytZyxQMB+KobktKw4n5vj7brD PIZMx5obHTll5qkoT2gkkEsMtNGpcb+rTHkcYsnt4LGhKHDADauPywL2WxmgDgI3 rgfcONQixbxvK0gmb2CkNVTqp/wROfw= -----END CERTIFICATE-----Generated at Wed Aug 6 07:57:18 2025 by rpki-client