$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/885c11da-75ed-30f3-be92-905354edd7ef.roa File: 885c11da-75ed-30f3-be92-905354edd7ef.roa (raw, json) Hash identifier: tvuDp4Z7Yi14cGDt40BXMlh8FVgqAWYhy+rT7EY3kLs= Subject key identifier: 72:E6:7B:46:09:32:AA:3B:03:A8:75:2F:4B:51:E3:23:43:20:86:ED Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB38622BCB78E2810CD093080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/885c11da-75ed-30f3-be92-905354edd7ef.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 7029 IP address blocks: 173.189.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:22:bc:b7:8e:28:10:cd:09:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=687832cf-ecb5-4219-9bf1-b8183cf7964a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:92:dc:cd:3a:36:2e:a4:04:af:51:b1:40:5b: d2:cd:04:22:46:35:32:ba:1e:f2:35:0e:f1:19:eb: a6:72:62:65:cd:45:36:85:a5:e1:bb:f5:51:e0:7f: 3d:24:cb:64:84:a7:c8:fb:9b:91:a5:b8:4f:6e:f6: a4:2a:cd:3c:ae:a7:07:e8:da:31:b0:d5:9b:bc:16: fc:fd:54:a4:c8:97:29:d4:42:35:12:cb:77:ac:0a: 2e:80:d4:dc:6a:84:f1:2d:dc:4d:f4:28:b8:0d:3b: 59:c0:11:27:af:ea:b9:8d:b3:80:be:c4:03:88:5e: f0:86:23:d2:a6:0d:9c:1c:33:5e:c4:b2:47:67:65: 3c:43:9c:82:d2:c4:49:7b:a4:20:86:aa:2a:7c:50: a1:4b:18:dc:e0:96:0f:da:80:7d:44:91:1f:22:5c: 27:5a:6c:a3:09:5b:b1:93:db:bb:e7:76:17:95:89: 0b:b6:d6:d7:e9:31:5f:63:18:d1:d0:d7:3f:c1:31: 65:e0:e8:2d:8a:a2:d0:4c:a3:bd:16:ee:8f:0a:e5: 26:e2:70:22:c0:09:03:9e:c8:4b:14:0f:1c:77:f5: 91:85:63:21:cc:2d:20:1d:2b:a7:de:30:86:3f:e7: 68:fe:35:34:e5:e3:3c:03:5c:b4:71:c0:83:ff:58: fb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E6:7B:46:09:32:AA:3B:03:A8:75:2F:4B:51:E3:23:43:20:86:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/885c11da-75ed-30f3-be92-905354edd7ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:9f:9b:bb:55:94:b5:63:38:1f:9c:5b:4e:fc:9d:85:d8:c4: 52:10:aa:13:e7:ca:81:54:54:db:35:9b:27:ac:2d:3c:d5:93: a0:cf:79:25:09:32:ba:93:24:6e:ab:91:44:f0:55:f1:89:af: bd:ae:e5:28:7d:36:b6:ce:39:d7:93:6a:57:4c:46:05:ea:3c: a1:1f:76:12:c8:80:71:66:1a:aa:f2:99:2a:90:f9:c9:fb:66: ba:6e:42:76:fb:90:51:2c:f3:80:8f:38:aa:e9:70:c9:4f:33: 80:68:20:06:20:5d:b4:23:e3:43:95:ac:e4:7e:d7:3e:e6:e7: 91:9f:f4:75:e7:af:68:7a:81:a6:a0:23:74:d2:0e:fa:e5:72: 4a:c8:b8:b0:f3:11:fd:40:c4:11:99:2f:74:25:c3:57:2d:b1: fc:21:79:68:a8:ad:5d:e5:d2:2e:84:f8:e5:43:1f:bf:fa:fa: fb:b6:67:eb:78:6c:1a:3d:5b:97:97:fc:a9:e9:c8:06:ed:49: 9a:15:bb:a1:fe:3a:3a:ef:da:33:a7:2c:ff:5d:76:92:c8:68: 87:e0:83:8a:52:be:be:f0:3d:f0:ce:65:58:b0:2b:c4:d7:30: bf:ea:28:6d:d9:bf:90:23:d2:ab:73:b0:29:46:3d:74:d3:a5: dc:f1:73:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhiK8t44oEM0JMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk Njg3ODMyY2YtZWNiNS00MjE5LTliZjEtYjgxODNjZjc5NjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJLczTo2LqQEr1GxQFvSzQQiRjUyuh7yNQ7x GeumcmJlzUU2haXhu/VR4H89JMtkhKfI+5uRpbhPbvakKs08rqcH6NoxsNWbvBb8 /VSkyJcp1EI1Est3rAougNTcaoTxLdxN9Ci4DTtZwBEnr+q5jbOAvsQDiF7whiPS pg2cHDNexLJHZ2U8Q5yC0sRJe6QghqoqfFChSxjc4JYP2oB9RJEfIlwnWmyjCVux k9u753YXlYkLttbX6TFfYxjR0Nc/wTFl4OgtiqLQTKO9Fu6PCuUm4nAiwAkDnshL FA8cd/WRhWMhzC0gHSun3jCGP+do/jU05eM8A1y0ccCD/1j7UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLme0YJMqo7A6h1L0tR4yNDIIbtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODg1YzExZGEtNzVlZC0z MGYzLWJlOTItOTA1MzU0ZWRkN2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb1vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEafm7tVlLVjOB+cW078nYXYxFIQqhPnyoFUVNs1myesLTzVk6DPeSUJ MrqTJG6rkUTwVfGJr72u5Sh9NrbOOdeTaldMRgXqPKEfdhLIgHFmGqrymSqQ+cn7 ZrpuQnb7kFEs84CPOKrpcMlPM4BoIAYgXbQj40OVrOR+1z7m55Gf9HXnr2h6gaag I3TSDvrlckrIuLDzEf1AxBGZL3Qlw1ctsfwheWiorV3l0i6E+OVDH7/6+vu2Z+t4 bBo9W5eX/KnpyAbtSZoVu6H+Ojrv2jOnLP9ddpLIaIfgg4pSvr7wPfDOZViwK8TX ML/qKG3Zv5Aj0qtzsClGPXTTpdzxc00= -----END CERTIFICATE-----Generated at Sat Aug 9 22:44:14 2025 by rpki-client