$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/789fd90b-0242-3510-a897-d82a8d84d6e7.roa File: 789fd90b-0242-3510-a897-d82a8d84d6e7.roa (raw, json) Hash identifier: W9XQuh6Aqxv/IHSapRxLPo7AHVYXMMz97mqoQPmgIs4= Subject key identifier: E3:1E:BF:40:6B:27:57:64:E2:33:03:D2:62:60:B6:D3:A9:8A:9F:2E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8C70D4B8E51D08ADD225DFA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/789fd90b-0242-3510-a897-d82a8d84d6e7.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 173.185.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:d4:b8:e5:1d:08:ad:d2:25:df:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=5918cdb1-4452-408d-9db0-7d2c1e0ccc80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:6f:2f:76:09:77:4f:89:66:00:1b:b2:cc:f3: 0b:90:4d:df:6a:bf:ee:c9:1b:18:9c:54:4b:09:1d: 64:ee:ee:12:23:cf:af:f5:e0:46:f2:3b:bf:21:0d: 00:a1:2f:11:06:c5:4d:1f:fb:14:0b:69:0d:d1:bd: 1f:f4:ef:3e:e9:a0:48:04:4c:f4:d1:d8:c0:49:8e: 62:5d:aa:1f:36:6c:8e:11:48:51:98:c4:1f:57:d2: 96:b7:2d:1a:5d:d8:0f:d1:1b:55:85:fe:48:54:62: 99:95:41:0b:cb:1d:12:d4:d5:1e:40:41:c2:63:11: 73:b5:1b:0b:e9:84:8a:ed:6c:9e:a8:51:d2:cf:9a: 39:58:01:86:86:e2:d2:66:ab:fc:fa:31:c2:7b:47: 24:16:d8:27:02:c3:9c:15:23:13:86:c1:3c:89:a6: 1b:a0:3f:06:f7:c3:13:89:2a:f3:f9:59:52:bb:58: 5c:51:63:88:0f:b6:fb:e1:ac:3a:0d:db:67:0b:8d: e5:0d:a4:29:7c:66:52:26:02:59:1d:fc:e8:e2:ea: d1:c0:30:80:36:e1:8b:44:e8:d0:1d:89:e9:67:d4: a0:71:70:f5:a0:63:d4:45:79:af:a7:37:6a:81:7e: 49:ce:a1:58:b8:ae:fa:b8:05:de:db:cc:0d:a6:59: de:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1E:BF:40:6B:27:57:64:E2:33:03:D2:62:60:B6:D3:A9:8A:9F:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/789fd90b-0242-3510-a897-d82a8d84d6e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:bc:70:29:01:5f:47:9b:9e:55:2e:20:c5:3f:e9:6b:df:b7: 59:88:bf:60:17:af:13:0f:d2:34:10:6d:1b:c2:d4:30:2b:ac: 01:4f:79:06:ae:d2:a2:97:c2:ba:77:64:3d:96:a9:df:84:1d: f8:f0:fa:1a:38:64:06:76:93:e5:f2:f8:29:94:11:94:ce:d5: 07:0f:a4:9c:62:4e:fd:f4:8c:27:75:91:d4:c0:1a:5e:47:ad: 4a:95:6a:b9:f3:f1:ea:01:44:ca:18:3f:79:6d:c5:b4:34:a7: c1:75:82:8e:0f:d5:a2:b3:cd:3e:a2:02:a1:b5:3c:12:40:76: ea:cf:24:73:3c:02:0b:1f:22:14:27:d3:14:77:4c:65:07:60: 7b:2e:45:9f:23:99:6b:da:b9:10:60:b2:c1:ed:77:01:57:2d: 49:aa:5c:3b:03:fb:19:5d:45:59:b8:56:46:33:1a:79:08:c4: 35:ef:dd:82:3e:ee:85:cf:5d:f7:08:8d:36:a0:b7:2e:25:ec: db:6d:fe:d2:01:21:52:da:13:ef:ac:fa:ef:d5:fa:1d:2a:89: 60:8e:1e:8d:86:6b:e5:de:3b:d5:6c:c4:7e:cd:fb:41:a1:ff: 3f:62:e7:c8:67:03:26:fa:f6:38:41:21:c7:c9:37:6b:e4:58: 1b:dc:83:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcNS45R0IrdIl36AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk NTkxOGNkYjEtNDQ1Mi00MDhkLTlkYjAtN2QyYzFlMGNjYzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA528vdgl3T4lmABuyzPMLkE3far/uyRsYnFRL CR1k7u4SI8+v9eBG8ju/IQ0AoS8RBsVNH/sUC2kN0b0f9O8+6aBIBEz00djASY5i XaofNmyOEUhRmMQfV9KWty0aXdgP0RtVhf5IVGKZlUELyx0S1NUeQEHCYxFztRsL 6YSK7WyeqFHSz5o5WAGGhuLSZqv8+jHCe0ckFtgnAsOcFSMThsE8iaYboD8G98MT iSrz+VlSu1hcUWOID7b74aw6DdtnC43lDaQpfGZSJgJZHfzo4urRwDCANuGLROjQ HYnpZ9SgcXD1oGPURXmvpzdqgX5JzqFYuK76uAXe28wNplneBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMev0BrJ1dk4jMD0mJgttOpip8uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzg5ZmQ5MGItMDI0Mi0z NTEwLWE4OTctZDgyYThkODRkNmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbloMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH28cCkBX0ebnlUuIMU/6Wvft1mIv2AXrxMP0jQQbRvC1DArrAFPeQau 0qKXwrp3ZD2Wqd+EHfjw+ho4ZAZ2k+Xy+CmUEZTO1QcPpJxiTv30jCd1kdTAGl5H rUqVarnz8eoBRMoYP3ltxbQ0p8F1go4P1aKzzT6iAqG1PBJAdurPJHM8AgsfIhQn 0xR3TGUHYHsuRZ8jmWvauRBgssHtdwFXLUmqXDsD+xldRVm4VkYzGnkIxDXv3YI+ 7oXPXfcIjTagty4l7Ntt/tIBIVLaE++s+u/V+h0qiWCOHo2Ga+XeO9VsxH7N+0Gh /z9i58hnAyb69jhBIcfJN2vkWBvcg5k= -----END CERTIFICATE-----Generated at Mon Aug 4 16:12:05 2025 by rpki-client