$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/89846d46-28f0-3533-9faf-dbd4d19bcbf6.roa File: 89846d46-28f0-3533-9faf-dbd4d19bcbf6.roa (raw, json) Hash identifier: ucUIF7PRDuQtYd/lXnBjqk0e0UKUDbJkiTiuNfpEYkA= Subject key identifier: 41:72:EF:3A:F9:67:6E:F6:50:BE:D5:A2:D3:AF:31:A3:07:A0:0C:AA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B7F52405A783BB171E63C61F8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/89846d46-28f0-3533-9faf-dbd4d19bcbf6.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 173.187.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:40:5a:78:3b:b1:71:e6:3c:61:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=b313f9f5-2619-4e17-a262-d2222c7a7f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:32:2b:65:03:89:23:10:b1:62:3f:35:9e:2f: 7f:30:82:50:2f:87:ec:ab:50:f0:01:2f:94:22:4e: bd:a3:8d:dc:28:c9:84:76:e6:d9:92:e8:f6:e6:cd: e9:6f:09:e5:13:1c:eb:c2:35:3f:81:f1:5b:d1:40: 73:28:ee:4f:06:9f:67:51:83:96:c1:9d:d5:a4:4e: 88:34:88:f1:9a:af:08:5c:b1:ca:93:b3:27:ea:96: 55:c4:94:35:d8:fc:f8:92:6c:e7:fb:c4:bf:60:68: f8:ca:75:f8:ad:b5:a7:fc:14:bc:15:e3:fc:b8:73: e0:97:bb:a6:bd:c2:05:24:0e:86:ad:22:3b:f3:52: d1:e9:8a:df:af:0f:a2:ed:c4:b9:7e:19:d9:ad:1c: 9d:02:84:3b:ed:15:3e:78:e9:b1:1c:df:1c:fc:85: 45:34:b1:03:7f:4b:55:ef:2f:32:cc:b9:07:1d:bf: b4:35:c0:ad:9b:70:e7:b5:8f:cc:d3:f2:0c:53:54: 37:7e:42:87:64:30:7a:04:ce:d0:9e:60:af:51:9c: 8b:21:c5:c7:cd:6b:83:0e:8a:34:dd:46:2c:2b:eb: 9d:41:af:b9:96:c8:bb:33:19:95:a4:7c:96:0f:8e: 5d:ed:eb:c4:84:ff:27:c0:55:e6:3b:ee:e4:af:25: 47:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:72:EF:3A:F9:67:6E:F6:50:BE:D5:A2:D3:AF:31:A3:07:A0:0C:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/89846d46-28f0-3533-9faf-dbd4d19bcbf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:4b:0a:85:04:f6:81:19:4d:93:61:7a:f3:4a:d0:86:87:52: 79:b3:a6:c5:f9:38:c7:09:e1:61:e2:37:b7:19:db:d5:00:15: 9b:31:05:ee:46:44:fe:0b:06:ee:79:79:02:5f:11:67:b7:72: a1:20:b2:bd:f1:d8:3b:5b:1a:a9:c0:0c:4f:b5:d0:3e:33:f1: 99:2c:06:6b:6d:e1:05:9e:81:34:82:a4:35:73:8f:c6:22:ac: 38:36:01:94:86:35:7c:26:0f:d1:4e:8b:95:32:ff:5f:56:98: 69:94:91:b3:ba:f0:cc:b7:7b:9e:b1:1d:ff:a2:7b:51:84:ac: 2c:71:fa:e1:9e:14:59:60:76:72:6a:d1:07:e2:16:96:cb:ce: 53:ca:92:2f:55:ae:9f:60:9d:a0:0e:d5:0e:00:60:0a:9e:97: 73:64:79:88:e3:b3:50:02:e9:59:f2:49:da:48:ca:6a:5a:3b: a1:5a:42:12:98:c5:74:47:de:38:9f:57:ca:76:97:18:c5:28: 85:d2:84:ec:1f:c9:e3:5b:4f:7f:1f:c0:78:17:95:09:6d:63: 57:9e:9d:ae:b6:3e:9e:4f:a2:a9:48:99:f7:c2:97:12:10:53: 90:b8:c4:bd:c2:50:af:71:04:72:4e:93:cb:5c:b8:ee:51:b9: 3a:4e:46:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UkBaeDuxceY8YfgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YjMxM2Y5ZjUtMjYxOS00ZTE3LWEyNjItZDIyMjJjN2E3ZjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjIrZQOJIxCxYj81ni9/MIJQL4fsq1DwAS+U Ik69o43cKMmEdubZkuj25s3pbwnlExzrwjU/gfFb0UBzKO5PBp9nUYOWwZ3VpE6I NIjxmq8IXLHKk7Mn6pZVxJQ12Pz4kmzn+8S/YGj4ynX4rbWn/BS8FeP8uHPgl7um vcIFJA6GrSI781LR6Yrfrw+i7cS5fhnZrRydAoQ77RU+eOmxHN8c/IVFNLEDf0tV 7y8yzLkHHb+0NcCtm3DntY/M0/IMU1Q3fkKHZDB6BM7QnmCvUZyLIcXHzWuDDoo0 3UYsK+udQa+5lsi7MxmVpHyWD45d7evEhP8nwFXmO+7kryVHcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFy7zr5Z272UL7VotOvMaMHoAyqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODk4NDZkNDYtMjhmMC0z NTMzLTlmYWYtZGJkNGQxOWJjYmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbvGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxLCoUE9oEZTZNhevNK0IaHUnmzpsX5OMcJ4WHiN7cZ29UAFZsxBe5G RP4LBu55eQJfEWe3cqEgsr3x2DtbGqnADE+10D4z8ZksBmtt4QWegTSCpDVzj8Yi rDg2AZSGNXwmD9FOi5Uy/19WmGmUkbO68My3e56xHf+ie1GErCxx+uGeFFlgdnJq 0QfiFpbLzlPKki9Vrp9gnaAO1Q4AYAqel3NkeYjjs1AC6VnySdpIympaO6FaQhKY xXRH3jifV8p2lxjFKIXShOwfyeNbT38fwHgXlQltY1eena62Pp5PoqlImffClxIQ U5C4xL3CUK9xBHJOk8tcuO5RuTpORmM= -----END CERTIFICATE-----Generated at Tue Nov 4 19:15:10 2025 by rpki-client