$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43e83b85-58c0-3ba9-8b83-7bbfc778bcb9.roa File: 43e83b85-58c0-3ba9-8b83-7bbfc778bcb9.roa (raw, json) Hash identifier: XUI4ZZlnL5GI7fT/B6pWTiRXFmuxYBXRMN5ppqS2V2Q= Subject key identifier: 21:B1:55:09:5B:79:74:2B:F1:F1:A0:80:60:D4:16:D6:DE:BC:F5:C4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0CEDC796EC4B6E0EB5E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43e83b85-58c0-3ba9-8b83-7bbfc778bcb9.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 173.189.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ce:dc:79:6e:c4:b6:e0:eb:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=aa55eca8-454e-4d17-ac58-352678847319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:db:48:84:9a:02:a4:5c:6e:7f:de:4b:53:be: c6:1e:e9:e4:e6:88:3f:60:ac:c1:f3:83:c6:91:9c: ab:55:8b:22:14:d3:f7:b8:34:b0:70:e9:4d:85:5f: 9c:c9:1e:c1:78:0f:7b:e0:6e:2c:13:3f:2f:a2:5f: f7:4c:e1:62:fd:bf:36:cc:49:ac:f5:de:36:55:b9: b6:97:0a:fc:32:25:99:c8:0b:47:c1:28:dc:76:2f: b4:07:e3:f2:4d:b5:d1:cf:62:8d:e3:e8:9d:34:e0: 37:96:95:74:fb:75:73:40:b0:a5:5d:0b:2d:80:b7: ef:60:ad:b6:6b:2a:61:51:e9:1d:79:d4:1f:6d:3b: 16:47:a0:68:ea:dd:86:8d:70:12:d8:1a:69:5f:3c: 59:3d:54:8d:6a:fe:03:68:db:3c:e4:cc:c2:34:29: 4f:61:28:46:9f:af:97:57:61:24:24:2f:be:12:5d: 21:db:36:cb:9d:10:c4:5b:a4:a1:76:7f:74:57:d8: 9d:b9:d5:54:ba:05:af:de:f1:7c:53:d3:33:42:f4: 30:d4:dc:ed:6e:5d:8f:9b:53:e5:33:9a:d3:ff:4a: 05:a4:59:de:93:fb:f6:6d:dc:51:2e:cc:2a:ee:f2: e3:3e:79:a9:72:89:cb:d6:4c:b7:d4:2f:e5:b3:cf: fe:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B1:55:09:5B:79:74:2B:F1:F1:A0:80:60:D4:16:D6:DE:BC:F5:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43e83b85-58c0-3ba9-8b83-7bbfc778bcb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:1c:12:5b:ab:e7:27:12:72:c2:62:a2:16:7f:7e:32:9d:8d: 7e:7c:ac:0c:34:8b:22:e5:6f:50:c6:1b:cb:2a:16:7c:d2:08: 5a:0d:75:43:20:b1:37:cb:24:34:0a:ce:28:44:d8:24:6b:e0: a9:1d:4e:51:da:0e:d0:dc:3d:97:75:d9:3b:21:35:41:91:92: c5:76:e8:fb:ff:ad:05:84:6a:87:29:a4:9f:82:f9:f4:bd:f8: b0:4a:d0:81:e6:50:d1:2c:66:ad:46:9d:12:cd:c2:f3:c2:85: 18:c3:d6:54:12:17:1c:7c:50:d6:d4:d2:1c:60:28:fb:7a:8d: 3e:91:ca:94:ec:5d:bb:24:36:72:3d:8c:04:41:0e:54:fb:f5: 9c:31:5d:33:3c:6e:8b:f1:5e:6b:d3:09:ae:56:fe:84:ca:43: 29:e3:85:9f:df:d9:9c:70:b0:1d:f9:38:51:e4:1a:77:b4:9d: 8e:bb:2e:3c:d7:85:ab:65:78:5a:37:30:88:fc:5f:54:7f:74: d0:f0:9e:ed:0b:9e:22:6c:e7:2d:bc:9f:4f:cb:c2:d9:62:69: 32:91:34:a0:5c:25:e4:c8:52:a4:66:c7:3c:82:8a:bf:e3:99: 67:ac:ae:57:ef:32:eb:e8:36:d9:1f:34:e5:3e:51:83:55:28: 0d:a9:eb:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoM7ceW7EtuDrXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YWE1NWVjYTgtNDU0ZS00ZDE3LWFjNTgtMzUyNjc4ODQ3MzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9tIhJoCpFxuf95LU77GHunk5og/YKzB84PG kZyrVYsiFNP3uDSwcOlNhV+cyR7BeA974G4sEz8vol/3TOFi/b82zEms9d42Vbm2 lwr8MiWZyAtHwSjcdi+0B+PyTbXRz2KN4+idNOA3lpV0+3VzQLClXQstgLfvYK22 ayphUekdedQfbTsWR6Bo6t2GjXAS2BppXzxZPVSNav4DaNs85MzCNClPYShGn6+X V2EkJC++El0h2zbLnRDEW6Shdn90V9idudVUugWv3vF8U9MzQvQw1Nztbl2Pm1Pl M5rT/0oFpFnek/v2bdxRLswq7vLjPnmpconL1ky31C/ls8/+8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGxVQlbeXQr8fGggGDUFtbevPXEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDNlODNiODUtNThjMC0z YmE5LThiODMtN2JiZmM3NzhiY2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrb1wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABccElur5ycScsJiohZ/fjKdjX58rAw0iyLlb1DGG8sqFnzSCFoNdUMg sTfLJDQKzihE2CRr4KkdTlHaDtDcPZd12TshNUGRksV26Pv/rQWEaocppJ+C+fS9 +LBK0IHmUNEsZq1GnRLNwvPChRjD1lQSFxx8UNbU0hxgKPt6jT6RypTsXbskNnI9 jARBDlT79ZwxXTM8bovxXmvTCa5W/oTKQynjhZ/f2ZxwsB35OFHkGne0nY67LjzX hatleFo3MIj8X1R/dNDwnu0LniJs5y28n0/LwtliaTKRNKBcJeTIUqRmxzyCir/j mWesrlfvMuvoNtkfNOU+UYNVKA2p6xQ= -----END CERTIFICATE-----Generated at Mon Aug 4 16:09:04 2025 by rpki-client