$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/81d0f20e-f265-3da1-965e-2d9fcae3fe5a.roa File: 81d0f20e-f265-3da1-965e-2d9fcae3fe5a.roa (raw, json) Hash identifier: k9R+S9Av2Xdg+YvtsOeyf9nny2ZHUECbceMS4sw6OfE= Subject key identifier: BA:78:27:92:45:17:A5:6B:B1:BB:8F:E0:F2:36:09:F3:4E:60:02:95 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A86DB6D83CB51A45E34979C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/81d0f20e-f265-3da1-965e-2d9fcae3fe5a.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 173.191.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:6d:83:cb:51:a4:5e:34:97:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=f6227e05-5156-4ca7-9abc-989d24bb8f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d6:92:bb:d0:17:f6:58:56:a6:94:56:c6:90: e9:f9:99:57:d8:c4:16:f5:62:76:30:88:06:59:a5: 4b:18:a2:7d:9b:03:c6:be:88:ae:54:f9:5c:23:d8: b1:02:35:e2:f6:6a:77:c0:3a:19:db:b4:80:f4:64: 20:83:8c:57:88:17:3d:6c:99:6b:a1:1f:60:07:19: e1:71:a2:34:c2:29:a8:22:70:9b:17:fa:0f:b1:d8: 0c:34:f6:b4:5f:6f:8d:14:7d:98:70:16:04:df:7d: 23:8b:4e:57:3b:34:97:49:76:8b:73:ae:05:d7:19: c8:11:4e:df:2a:f6:63:07:ea:96:eb:d9:2f:22:08: 29:25:a6:10:9e:27:61:46:35:f5:99:da:df:c7:62: e7:39:2c:5c:f4:b0:0d:3d:73:ee:cd:39:5a:dc:51: 34:a3:02:b8:87:2a:9a:ff:df:2d:37:e9:e2:e8:96: e4:30:6a:eb:28:fe:99:9f:6e:e9:ed:08:03:03:98: fe:2a:64:c0:86:72:28:86:54:95:a4:15:c4:ab:58: 96:5a:7d:25:2b:11:db:fb:f9:5f:b8:bd:23:98:e7: 4f:78:0c:dc:a8:28:ae:89:6c:d0:59:12:e6:a5:a4: c7:f3:9d:10:27:17:1c:28:53:36:94:5d:9d:28:de: 2b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:78:27:92:45:17:A5:6B:B1:BB:8F:E0:F2:36:09:F3:4E:60:02:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/81d0f20e-f265-3da1-965e-2d9fcae3fe5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:95:e4:6b:0d:46:fb:bc:97:2d:d0:f1:0f:47:0e:36:6f:6d: 0b:6d:c0:e1:43:3e:e2:ee:ed:8c:65:fa:f0:95:96:9c:7c:04: fe:01:08:5c:44:d2:6e:85:85:ea:a9:d5:6e:48:3c:5a:58:4c: d7:46:d9:b7:f5:0c:04:1e:97:2f:e6:bf:01:23:f6:db:7e:c9: 01:51:51:72:8b:ff:d8:f5:24:40:d7:f0:85:32:4e:0e:c3:c0: 41:ef:a8:aa:74:94:c3:95:87:62:ea:f7:7d:a2:ec:a1:a8:3e: 19:98:03:5a:90:82:d9:e7:c3:4e:cd:17:98:a8:d0:0f:92:3c: 93:ea:71:e5:01:80:8c:8e:28:f0:79:9d:a9:86:ad:67:bf:61: 2f:b2:c6:65:d2:f0:9a:b6:3a:dc:33:e7:fa:05:29:dd:58:f9: 13:1c:cc:c5:1b:ca:75:df:30:87:04:81:10:ba:ee:1f:f9:2e: 95:a7:bb:b5:57:bf:1f:52:ce:52:60:c5:eb:bd:5b:c0:34:a2: 29:d0:d6:42:4f:21:d4:65:95:d0:cd:a0:40:5c:d7:c3:0e:1f: 02:be:f2:4a:3d:bd:9d:64:da:23:79:ec:70:1d:27:61:a5:54: c8:68:22:39:0a:11:d3:e5:f5:76:bb:ef:f8:0d:34:6d:54:e7: d0:8f:97:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG222Dy1GkXjSXnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZjYyMjdlMDUtNTE1Ni00Y2E3LTlhYmMtOTg5ZDI0YmI4ZjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1taSu9AX9lhWppRWxpDp+ZlX2MQW9WJ2MIgG WaVLGKJ9mwPGvoiuVPlcI9ixAjXi9mp3wDoZ27SA9GQgg4xXiBc9bJlroR9gBxnh caI0wimoInCbF/oPsdgMNPa0X2+NFH2YcBYE330ji05XOzSXSXaLc64F1xnIEU7f KvZjB+qW69kvIggpJaYQnidhRjX1mdrfx2LnOSxc9LANPXPuzTla3FE0owK4hyqa /98tN+ni6JbkMGrrKP6Zn27p7QgDA5j+KmTAhnIohlSVpBXEq1iWWn0lKxHb+/lf uL0jmOdPeAzcqCiuiWzQWRLmpaTH850QJxccKFM2lF2dKN4rfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLp4J5JFF6VrsbuP4PI2CfNOYAKVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODFkMGYyMGUtZjI2NS0z ZGExLTk2NWUtMmQ5ZmNhZTNmZTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb+WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSV5GsNRvu8ly3Q8Q9HDjZvbQttwOFDPuLu7Yxl+vCVlpx8BP4BCFxE 0m6Fheqp1W5IPFpYTNdG2bf1DAQely/mvwEj9tt+yQFRUXKL/9j1JEDX8IUyTg7D wEHvqKp0lMOVh2Lq932i7KGoPhmYA1qQgtnnw07NF5io0A+SPJPqceUBgIyOKPB5 namGrWe/YS+yxmXS8Jq2Otwz5/oFKd1Y+RMczMUbynXfMIcEgRC67h/5LpWnu7VX vx9SzlJgxeu9W8A0oinQ1kJPIdRlldDNoEBc18MOHwK+8ko9vZ1k2iN57HAdJ2Gl VMhoIjkKEdPl9Xa77/gNNG1U59CPl1U= -----END CERTIFICATE-----Generated at Mon Aug 4 19:12:23 2025 by rpki-client