$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5400a5f1-6b08-3c9e-9e25-22d26516e4af.roa File: 5400a5f1-6b08-3c9e-9e25-22d26516e4af.roa (raw, json) Hash identifier: pqo5jskdtGHUniAXGCuWsZoAibFaU6Fdaewe3i2swN4= Subject key identifier: AA:F0:A2:43:5E:6D:7F:3C:89:E7:9A:06:30:FD:E8:A7:D5:2E:8B:94 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8C70DB8E4CAA3B8B02E53600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5400a5f1-6b08-3c9e-9e25-22d26516e4af.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 173.185.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:db:8e:4c:aa:3b:8b:02:e5:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=1909f7cb-4aad-4188-af87-b73bb164b76f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:02:dd:4e:7f:a0:9d:59:6f:d3:36:88:37:68: 74:37:ed:36:e4:ea:d7:e1:01:93:e2:5f:eb:78:f9: 0b:b1:87:6a:7e:c1:1f:50:d7:52:00:ad:0b:e7:fb: d2:83:97:92:09:5c:89:4d:26:eb:75:1e:21:bd:a5: 5a:a1:6f:31:63:12:be:f3:30:95:27:71:49:a9:92: c3:1a:cd:9c:b3:b4:fb:dc:99:e8:f9:01:07:d5:c0: 31:0c:e0:6a:da:cc:c0:e3:dd:ca:ad:e3:61:3e:1d: d0:3b:d3:30:55:85:5e:d3:49:f7:9e:1a:b5:44:97: 54:8a:5b:c8:d3:ac:06:96:28:76:82:9a:94:28:fc: 46:5c:44:ee:d5:fd:d9:d6:a6:c9:71:a9:4d:30:9f: 64:10:e8:c4:47:8e:ec:e0:ec:a0:4d:85:44:29:40: f7:54:6b:41:30:76:ae:24:ad:0b:63:9f:ab:89:31: f5:90:2d:aa:18:5a:c9:8d:39:49:18:05:f1:7c:73: 2d:79:91:1f:9c:9d:14:c4:cb:c8:43:ec:b1:31:72: ee:ba:90:41:2a:9c:7e:7b:ff:ce:d5:fc:d2:24:d6: 64:db:71:9c:f7:2c:5d:18:92:43:8e:c8:d1:4e:23: ff:6b:51:fe:b2:e6:ff:15:e2:37:96:87:79:d9:78: 77:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F0:A2:43:5E:6D:7F:3C:89:E7:9A:06:30:FD:E8:A7:D5:2E:8B:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5400a5f1-6b08-3c9e-9e25-22d26516e4af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:7a:0a:d8:de:fa:fe:3c:1a:14:60:10:1d:da:52:1c:f9:db: 57:68:c9:00:56:87:7b:18:a8:56:d2:7c:f9:89:3c:6f:7c:3e: c6:01:8d:b9:26:cc:5e:b9:cf:9b:42:6c:f6:63:07:2b:66:91: e0:5f:d1:4c:db:75:b6:c4:f4:a6:07:a9:16:12:a3:47:34:99: cb:6c:4e:38:78:68:4e:a1:e1:8d:ca:09:b3:30:3f:1b:bf:e1: e9:48:84:44:11:80:e5:7f:8d:27:66:0e:a9:8b:1e:8b:a9:7c: 58:b8:41:a3:f7:ac:7b:1d:51:fb:12:6c:00:5a:f2:f7:f5:d7: fc:18:92:0c:a8:bb:04:d1:99:ee:23:08:2a:75:08:bc:24:f2: 94:f7:d2:f7:00:aa:9c:23:e0:1e:6c:02:bb:38:21:c6:7d:6c: cc:df:75:38:cf:22:50:20:4b:4f:68:37:33:cd:05:57:af:ff: c5:5a:94:33:89:87:a5:de:56:8f:c1:af:98:e0:6e:54:6f:99: 89:b2:fc:83:04:ed:d7:17:cc:96:60:0f:ed:62:6c:a0:a8:5b: c0:35:6c:85:02:38:ef:8d:75:d7:70:50:7a:6c:93:3b:3a:01: ae:2a:e9:20:e4:8f:50:43:b4:31:d0:0e:81:a4:39:ea:dd:af: 45:18:ff:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcNuOTKo7iwLlNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk MTkwOWY3Y2ItNGFhZC00MTg4LWFmODctYjczYmIxNjRiNzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQLdTn+gnVlv0zaIN2h0N+025OrX4QGT4l/r ePkLsYdqfsEfUNdSAK0L5/vSg5eSCVyJTSbrdR4hvaVaoW8xYxK+8zCVJ3FJqZLD Gs2cs7T73Jno+QEH1cAxDOBq2szA493KreNhPh3QO9MwVYVe00n3nhq1RJdUilvI 06wGlih2gpqUKPxGXETu1f3Z1qbJcalNMJ9kEOjER47s4OygTYVEKUD3VGtBMHau JK0LY5+riTH1kC2qGFrJjTlJGAXxfHMteZEfnJ0UxMvIQ+yxMXLuupBBKpx+e//O 1fzSJNZk23Gc9yxdGJJDjsjRTiP/a1H+sub/FeI3lod52Xh3TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrwokNebX88ieeaBjD96KfVLouUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTQwMGE1ZjEtNmIwOC0z YzllLTllMjUtMjJkMjY1MTZlNGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADR6Ctje+v48GhRgEB3aUhz521doyQBWh3sYqFbSfPmJPG98PsYBjbkm zF65z5tCbPZjBytmkeBf0UzbdbbE9KYHqRYSo0c0mctsTjh4aE6h4Y3KCbMwPxu/ 4elIhEQRgOV/jSdmDqmLHoupfFi4QaP3rHsdUfsSbABa8vf11/wYkgyouwTRme4j CCp1CLwk8pT30vcAqpwj4B5sArs4IcZ9bMzfdTjPIlAgS09oNzPNBVev/8ValDOJ h6XeVo/Br5jgblRvmYmy/IME7dcXzJZgD+1ibKCoW8A1bIUCOO+NdddwUHpskzs6 Aa4q6SDkj1BDtDHQDoGkOerdr0UY/0Q= -----END CERTIFICATE-----Generated at Wed Aug 6 13:12:25 2025 by rpki-client