$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ccc9c4f-76f8-35e7-aadd-4606709ea75c.roa File: 4ccc9c4f-76f8-35e7-aadd-4606709ea75c.roa (raw, json) Hash identifier: NcxF/YPJRWRzxLrwfhlGvAXxhu6wMTGPResdCR8XsgU= Subject key identifier: 4E:0B:3C:2C:BB:D9:D8:F6:CA:A5:33:B6:32:7D:77:7E:4B:73:44:32 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A9900CAC882C9DA6C3CF9BB00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ccc9c4f-76f8-35e7-aadd-4606709ea75c.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 173.185.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:ca:c8:82:c9:da:6c:3c:f9:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=a510e99e-108f-4f14-8898-26e953770fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:96:03:4c:b7:5e:67:79:12:1f:1e:e2:70:6e: 01:35:7b:03:4e:ec:71:55:8f:68:58:f7:9e:29:32: 8f:96:c2:67:03:70:b6:ee:02:65:82:bd:1a:b8:99: ff:33:1a:de:82:1d:59:53:b8:34:fb:18:81:53:a9: a2:fc:8d:f1:e4:83:03:e0:2c:ef:27:70:d7:df:a4: f9:4f:5f:2f:5e:dc:18:92:6d:22:9a:cb:f1:83:44: e6:9d:49:e7:43:cc:4d:cd:e1:82:d6:e7:2a:a1:26: 0a:a0:76:c1:2a:41:42:f7:4b:97:78:2a:10:d3:40: a9:ea:cb:53:51:96:2a:5d:41:a1:2c:bb:dd:fc:bc: 95:08:53:28:6e:ed:02:c4:44:43:a4:c9:10:eb:ee: 33:6b:8c:fd:9a:57:20:bc:2e:d8:6b:50:4a:3c:d2: e0:15:17:5a:ff:3a:13:f5:4c:40:b7:7f:11:6f:6a: 99:ed:6b:8f:c9:b3:76:aa:54:5e:a9:c8:96:99:e0: 93:06:4f:11:20:79:55:ef:fb:5f:37:ce:2a:da:cc: d3:35:45:9a:30:10:5d:33:82:be:fd:ca:d1:49:86: 06:83:c8:80:98:8c:50:73:a8:73:1a:27:09:90:cd: 2f:54:e2:f6:26:0f:a7:b7:89:98:cb:04:58:09:ca: 61:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:0B:3C:2C:BB:D9:D8:F6:CA:A5:33:B6:32:7D:77:7E:4B:73:44:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ccc9c4f-76f8-35e7-aadd-4606709ea75c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:6c:66:c5:7c:64:77:e4:1b:97:45:7d:ca:e6:44:6c:6a:e3: 51:d7:72:75:ad:6a:6a:28:fa:5b:33:e2:89:1d:f1:b5:ee:f2: a4:2d:8d:ec:df:b4:d3:fc:d3:07:27:82:31:ae:da:9b:67:5e: c0:03:4e:9e:08:ce:6b:b2:f6:bb:0a:82:8a:33:76:2c:89:81: 71:db:4e:d5:f8:0b:e0:c9:fd:8d:0b:f3:0a:37:c4:87:e4:2c: 59:74:25:8b:1a:e3:97:4b:d6:9d:fb:74:88:7d:21:4c:16:db: 6e:59:67:1d:35:31:01:40:77:54:0d:c1:4a:a7:6e:49:74:f9: 6a:86:08:9b:7b:b9:ac:6b:0e:aa:51:b7:56:68:04:61:bc:45: 09:2d:a8:02:b5:0a:7a:0b:de:aa:df:12:25:ce:c7:40:5f:da: 69:ca:c0:cb:54:c5:a9:b6:0e:96:0c:2e:3e:c6:5b:24:05:9b: c1:c3:ff:15:80:7f:f5:7b:a7:0b:99:82:e7:c7:98:ac:1c:5c: f4:89:65:f5:bd:60:d7:f0:92:71:b2:df:df:e2:93:5e:e0:e2: 37:88:9d:42:84:8d:be:09:5e:6d:6e:47:70:22:70:31:c7:61: f3:8b:b5:ca:30:d6:d9:38:25:19:68:5c:db:3c:39:a8:b6:81: 8b:37:17:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMrIgsnabDz5uwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk YTUxMGU5OWUtMTA4Zi00ZjE0LTg4OTgtMjZlOTUzNzcwZmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5YDTLdeZ3kSHx7icG4BNXsDTuxxVY9oWPee KTKPlsJnA3C27gJlgr0auJn/Mxregh1ZU7g0+xiBU6mi/I3x5IMD4CzvJ3DX36T5 T18vXtwYkm0imsvxg0TmnUnnQ8xNzeGC1ucqoSYKoHbBKkFC90uXeCoQ00Cp6stT UZYqXUGhLLvd/LyVCFMobu0CxERDpMkQ6+4za4z9mlcgvC7Ya1BKPNLgFRda/zoT 9UxAt38Rb2qZ7WuPybN2qlReqciWmeCTBk8RIHlV7/tfN84q2szTNUWaMBBdM4K+ /crRSYYGg8iAmIxQc6hzGicJkM0vVOL2Jg+nt4mYywRYCcpheQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4LPCy72dj2yqUztjJ9d35Lc0QyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGNjYzljNGYtNzZmOC0z NWU3LWFhZGQtNDYwNjcwOWVhNzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVsZsV8ZHfkG5dFfcrmRGxq41HXcnWtamoo+lsz4okd8bXu8qQtjezf tNP80wcngjGu2ptnXsADTp4Izmuy9rsKgoozdiyJgXHbTtX4C+DJ/Y0L8wo3xIfk LFl0JYsa45dL1p37dIh9IUwW225ZZx01MQFAd1QNwUqnbkl0+WqGCJt7uaxrDqpR t1ZoBGG8RQktqAK1CnoL3qrfEiXOx0Bf2mnKwMtUxam2DpYMLj7GWyQFm8HD/xWA f/V7pwuZgufHmKwcXPSJZfW9YNfwknGy39/ik17g4jeInUKEjb4JXm1uR3AicDHH YfOLtcow1tk4JRloXNs8Oai2gYs3FxQ= -----END CERTIFICATE-----Generated at Mon Aug 4 19:01:19 2025 by rpki-client