$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/741043d5-25b2-3b17-899c-4e53d971fee2.roa File: 741043d5-25b2-3b17-899c-4e53d971fee2.roa (raw, json) Hash identifier: a9mQLhzZ2v3lNp5KB5ayw/J8zHRB078roTJcZGzAgDU= Subject key identifier: 45:72:28:D9:E0:C4:0C:EE:82:EA:89:CB:79:90:04:62:A7:89:19:3C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0FDB3BD6B6616244E4A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/741043d5-25b2-3b17-899c-4e53d971fee2.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 173.221.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:fd:b3:bd:6b:66:16:24:4e:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=e31e6b2c-c424-47a7-8af6-079720f9b4a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:86:02:07:fa:83:1b:6f:af:08:a0:c5:33:79: 57:a2:35:a8:d1:34:f4:dd:aa:e7:c5:99:78:32:e7: b1:89:ab:e5:a1:21:c2:03:c3:a4:4a:3f:f6:3c:2a: a7:1a:84:ed:7e:c5:62:fa:40:6e:f9:0b:6f:fa:de: 7f:a7:c3:39:02:e8:42:87:07:fa:ec:09:cb:8f:2d: a5:54:0f:5c:a3:71:fe:f3:27:5a:29:5e:fe:62:5a: 1a:20:ca:9b:07:cb:e2:03:04:d1:7a:16:c0:fb:e3: 76:ff:e4:eb:59:6c:6a:a7:7a:1b:91:d4:bc:fa:d9: f2:c0:75:c9:a8:45:4f:96:5d:59:1a:e2:c8:12:c9: b3:25:5d:b5:eb:a2:ac:36:5b:8c:d0:a3:92:22:15: b7:96:b8:f5:8b:e4:ed:a4:9c:10:0b:e5:c4:64:48: 1b:8f:0b:88:61:41:84:81:17:7b:2f:51:65:f2:4d: 0c:9c:a1:e5:cd:8f:87:00:1f:a9:f4:65:ed:7c:21: c5:29:65:e0:75:f1:1a:23:72:29:8c:97:43:1a:63: 5c:57:4c:1b:8f:40:f7:86:34:dd:3b:6c:a8:2b:fa: fb:b6:57:81:ab:6a:7d:a1:57:e3:8b:c5:91:ef:7d: 64:d1:30:08:25:db:9e:b3:b6:67:91:28:20:7f:eb: a6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:72:28:D9:E0:C4:0C:EE:82:EA:89:CB:79:90:04:62:A7:89:19:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/741043d5-25b2-3b17-899c-4e53d971fee2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.221.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:08:81:43:cf:12:ae:49:08:d4:bb:fd:3a:98:4f:e3:be:89: 1b:7b:ee:09:1c:a1:dd:2a:c0:c8:d7:6a:30:65:dd:4c:e9:74: 9f:ac:14:14:30:fc:28:4d:b6:80:9a:7e:13:6b:45:40:aa:7a: 76:97:6b:80:e1:a0:d9:94:ea:4f:c3:aa:e4:72:db:88:42:ee: f2:9f:75:43:dc:dc:d7:f2:0f:1a:70:4f:f9:4d:35:e3:04:c1: ce:aa:d8:f6:d1:65:d5:7c:1a:64:f4:46:eb:29:b2:5c:5f:7f: 21:66:9a:6a:63:ec:dc:16:09:6d:30:9a:73:47:03:5e:df:c4: a6:d6:79:bc:85:4c:67:76:05:f2:8a:b8:4b:77:97:3d:bb:ae: 94:11:0a:76:e0:99:72:5a:4f:98:52:29:f2:3f:86:40:8e:9b: 5f:bb:74:3e:4c:eb:96:59:26:56:aa:5d:d1:67:92:20:78:92: 3d:3b:51:76:1e:49:ab:51:56:5b:40:cb:f4:42:93:87:25:22: 82:a1:bd:4a:ea:37:c3:99:11:c7:d2:5b:d1:fd:01:37:37:b1: 23:7c:af:1c:0d:f1:2c:40:2e:76:3e:27:b7:37:33:3a:7a:83: 92:14:b0:a3:af:01:e9:db:04:41:4b:33:2f:bd:44:52:26:5c: 30:e3:15:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoP2zvWtmFiROSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZTMxZTZiMmMtYzQyNC00N2E3LThhZjYtMDc5NzIwZjliNGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYYCB/qDG2+vCKDFM3lXojWo0TT03arnxZl4 MuexiavloSHCA8OkSj/2PCqnGoTtfsVi+kBu+Qtv+t5/p8M5AuhChwf67AnLjy2l VA9co3H+8ydaKV7+YloaIMqbB8viAwTRehbA++N2/+TrWWxqp3obkdS8+tnywHXJ qEVPll1ZGuLIEsmzJV2166KsNluM0KOSIhW3lrj1i+TtpJwQC+XEZEgbjwuIYUGE gRd7L1Fl8k0MnKHlzY+HAB+p9GXtfCHFKWXgdfEaI3IpjJdDGmNcV0wbj0D3hjTd O2yoK/r7tleBq2p9oVfji8WR731k0TAIJdues7ZnkSggf+umEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVyKNngxAzuguqJy3mQBGKniRk8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzQxMDQzZDUtMjViMi0z YjE3LTg5OWMtNGU1M2Q5NzFmZWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArd2WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkIgUPPEq5JCNS7/TqYT+O+iRt77gkcod0qwMjXajBl3UzpdJ+sFBQw /ChNtoCafhNrRUCqenaXa4DhoNmU6k/DquRy24hC7vKfdUPc3NfyDxpwT/lNNeME wc6q2PbRZdV8GmT0RuspslxffyFmmmpj7NwWCW0wmnNHA17fxKbWebyFTGd2BfKK uEt3lz27rpQRCnbgmXJaT5hSKfI/hkCOm1+7dD5M65ZZJlaqXdFnkiB4kj07UXYe SatRVltAy/RCk4clIoKhvUrqN8OZEcfSW9H9ATc3sSN8rxwN8SxALnY+J7c3Mzp6 g5IUsKOvAenbBEFLMy+9RFImXDDjFUM= -----END CERTIFICATE-----Generated at Tue Aug 5 16:46:05 2025 by rpki-client