$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4768268f-c950-35a6-997d-7ddaad2b5ac6.roa File: 4768268f-c950-35a6-997d-7ddaad2b5ac6.roa (raw, json) Hash identifier: 3sqNR2V68efmXISeEpCYjjNcpbHzmHs0sXBWjCVIwY8= Subject key identifier: 53:B4:D8:29:60:EC:D2:5B:13:DE:96:83:3F:87:97:B9:23:D2:D3:A4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A9E9665593A6DEF57F666C480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4768268f-c950-35a6-997d-7ddaad2b5ac6.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 173.187.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:65:59:3a:6d:ef:57:f6:66:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=2d697d96-230a-4442-a2bf-fec0bdcb220c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d8:6c:7a:44:77:1a:00:bc:4c:ba:09:88:84: c3:81:f3:d0:72:a6:81:32:bc:bf:a3:47:64:ea:5c: b2:2e:fc:7f:2f:a8:89:29:cb:99:c1:80:53:eb:22: 2d:a0:6c:c3:35:25:dd:63:2f:0d:a2:f2:08:67:34: 94:87:f0:91:a1:f9:47:af:5e:64:ca:05:e6:a6:34: 3e:6e:fa:68:2e:31:9d:7b:d8:39:10:88:34:b3:9b: f8:83:0e:22:e7:57:24:7e:13:bf:00:64:3e:e9:0e: 54:ab:3f:e4:c9:e7:5c:95:88:33:39:03:89:ac:aa: c3:4b:1c:e9:f7:de:e3:a7:6b:9d:43:4d:2c:57:9c: 38:ec:3d:2d:61:98:e7:0e:5b:f3:87:37:a6:6e:2c: 20:a6:b6:50:42:2c:2c:11:c3:3b:d5:32:0f:04:47: f2:4f:ba:48:78:1d:c3:eb:9d:bb:21:42:c7:ef:8a: 04:a6:82:d1:c5:1a:36:6d:65:e6:a7:a5:6a:ef:75: e1:d1:b1:01:c0:90:76:76:4f:f5:f0:21:26:96:d3: 6e:05:04:2e:f2:83:60:16:7e:66:8f:b3:cd:6e:b9: d5:37:6f:be:49:20:3f:a0:9f:84:e9:7b:ec:83:8f: 3f:27:72:90:4c:f2:02:31:fe:87:6c:86:3a:af:c6: b8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B4:D8:29:60:EC:D2:5B:13:DE:96:83:3F:87:97:B9:23:D2:D3:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4768268f-c950-35a6-997d-7ddaad2b5ac6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:9c:53:68:e1:55:2a:bc:bc:92:40:0a:93:51:94:ad:6f:15: 3e:35:57:12:19:09:96:f4:eb:e3:71:db:8f:88:03:50:bd:0d: 89:9b:e5:aa:d7:8a:58:4b:44:ad:48:72:23:10:e1:9f:f7:91: 5d:aa:bd:d6:10:3c:4a:9b:86:c6:d5:b4:bb:5a:a3:fb:88:38: 47:76:d2:73:f7:1c:8f:47:dc:0f:dd:c9:75:89:6c:f5:2b:00: 81:63:7b:76:3f:2f:1f:12:12:17:03:d8:df:c4:78:5f:cf:59: 65:0e:1b:8c:b3:79:62:d4:15:bb:5c:50:e4:bb:49:52:68:3f: 06:12:dc:c1:79:35:ba:bd:8b:55:5a:e3:1e:59:0f:ed:11:a0: e0:42:14:0a:32:b4:b1:f4:51:f2:18:64:31:51:ce:99:5f:6f: 99:8a:87:17:79:64:85:25:f1:9f:ad:ac:7d:7f:d2:06:09:d3: 04:df:c3:0c:80:7d:b8:1d:22:3f:a5:7f:c7:3e:e1:71:03:9f: b8:74:cc:c5:a2:7d:51:f4:8a:3a:3c:02:26:17:4e:9d:1f:7f: 8a:16:66:4a:89:3b:9d:88:7d:95:b8:6f:dd:5f:e3:93:57:e7: de:e4:72:e8:11:db:e6:01:52:66:55:b7:21:9a:6f:a7:e6:3e: 44:38:2f:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelmVZOm3vV/ZmxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MmQ2OTdkOTYtMjMwYS00NDQyLWEyYmYtZmVjMGJkY2IyMjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldhsekR3GgC8TLoJiITDgfPQcqaBMry/o0dk 6lyyLvx/L6iJKcuZwYBT6yItoGzDNSXdYy8NovIIZzSUh/CRoflHr15kygXmpjQ+ bvpoLjGde9g5EIg0s5v4gw4i51ckfhO/AGQ+6Q5Uqz/kyedclYgzOQOJrKrDSxzp 997jp2udQ00sV5w47D0tYZjnDlvzhzembiwgprZQQiwsEcM71TIPBEfyT7pIeB3D 6527IULH74oEpoLRxRo2bWXmp6Vq73Xh0bEBwJB2dk/18CEmltNuBQQu8oNgFn5m j7PNbrnVN2++SSA/oJ+E6Xvsg48/J3KQTPICMf6HbIY6r8a4fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFO02Clg7NJbE96Wgz+Hl7kj0tOkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDc2ODI2OGYtYzk1MC0z NWE2LTk5N2QtN2RkYWFkMmI1YWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbvCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGacU2jhVSq8vJJACpNRlK1vFT41VxIZCZb06+Nx24+IA1C9DYmb5arX ilhLRK1IciMQ4Z/3kV2qvdYQPEqbhsbVtLtao/uIOEd20nP3HI9H3A/dyXWJbPUr AIFje3Y/Lx8SEhcD2N/EeF/PWWUOG4yzeWLUFbtcUOS7SVJoPwYS3MF5Nbq9i1Va 4x5ZD+0RoOBCFAoytLH0UfIYZDFRzplfb5mKhxd5ZIUl8Z+trH1/0gYJ0wTfwwyA fbgdIj+lf8c+4XEDn7h0zMWifVH0ijo8AiYXTp0ff4oWZkqJO52IfZW4b91f45NX 597kcugR2+YBUmZVtyGab6fmPkQ4Ly4= -----END CERTIFICATE-----Generated at Wed Aug 6 10:10:25 2025 by rpki-client