$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/909b082f-ad12-3779-982d-fd882f9a76c4.roa File: 909b082f-ad12-3779-982d-fd882f9a76c4.roa (raw, json) Hash identifier: yBpEHX8DoiuHY1sI2CyazNRACC/S22HpIRh1KcrONaA= Subject key identifier: 49:6B:FC:A6:4E:DF:ED:61:ED:6C:EB:B6:5B:C5:AB:BE:E1:A4:79:F9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0FDC488EE7CB520903DC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/909b082f-ad12-3779-982d-fd882f9a76c4.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 173.221.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:fd:c4:88:ee:7c:b5:20:90:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=711c1b2b-806d-4baf-a7d0-576c6bf8d652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:98:9f:32:79:88:db:b8:4d:12:82:92:a5:15: 08:eb:3b:46:5a:40:ed:e8:34:44:ec:22:71:89:91: f1:f4:7a:37:10:60:a6:3c:eb:30:5d:5a:e8:17:36: 32:ca:15:15:d8:29:50:24:ee:11:20:f8:33:f0:16: 73:3e:cb:5c:e0:b1:50:dd:73:0a:81:3a:47:a7:2b: 48:17:1a:09:05:75:7a:a4:d1:69:4d:e3:3f:e4:82: 10:94:99:55:62:92:d7:5f:a0:41:e7:dc:4f:bf:92: 6e:98:b4:68:94:e6:ef:b6:32:23:91:78:e2:a4:53: 3d:b2:b5:57:a9:91:62:50:64:56:39:d2:d3:37:f6: e2:e3:ac:4c:54:26:a5:fb:0e:98:d3:82:a6:3f:08: a1:9a:d9:93:3b:6f:b4:77:4c:af:63:b1:e9:4b:02: a1:b8:a0:13:3c:07:65:00:68:aa:7d:13:45:20:51: bc:12:76:01:9d:24:95:4d:79:3b:fd:3e:e0:e2:c0: aa:2c:c4:dc:2c:a3:e3:95:75:05:cd:92:26:b2:84: 41:e7:13:73:bd:31:14:4e:a9:f2:9d:b9:6d:1a:95: a1:4e:8c:6a:ea:04:96:a6:31:83:14:74:e9:79:a5: 8a:c6:c5:4d:3a:e9:84:c0:3c:a5:6e:71:b2:79:f1: a2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6B:FC:A6:4E:DF:ED:61:ED:6C:EB:B6:5B:C5:AB:BE:E1:A4:79:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/909b082f-ad12-3779-982d-fd882f9a76c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.221.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:43:61:c6:4f:5a:df:9d:b8:59:52:79:9f:b8:01:b9:88:0d: 26:cd:5f:23:22:c6:b7:a2:79:3e:2d:cd:d5:fe:e2:4d:f7:5a: 71:fa:f0:86:34:11:b8:99:6f:9a:63:67:4f:76:ab:d3:d5:af: d8:fc:ad:28:bc:4e:a5:a4:bb:89:19:de:88:55:18:f8:d3:31: 1b:52:d1:be:d6:15:0c:f2:8f:6f:e6:58:ad:01:82:4b:27:71: 8a:b9:78:4d:56:f8:f8:c8:06:3f:ad:cd:be:14:e2:2c:af:a8: 6e:ce:87:d6:71:e6:b0:cd:be:7e:87:4f:71:e7:29:ae:92:73: 6e:b4:d7:5b:00:cd:7a:e2:30:e5:3f:f3:83:88:50:39:54:0c: 22:d6:ac:86:b8:36:06:34:67:e9:0f:00:8c:aa:26:1f:83:1e: ed:60:4a:b9:09:64:f5:71:33:61:2a:e5:9a:22:4a:1e:d9:de: c4:4f:9b:d0:38:44:37:99:41:6e:d0:fc:50:43:fe:73:ba:67: 59:3c:9f:3b:8e:30:9f:11:78:a6:b6:ba:b0:20:06:80:a5:22: 7e:95:bd:7a:a7:54:2f:70:67:9d:13:75:ae:53:6f:ee:23:1d: 35:da:e5:be:1a:1a:c4:73:21:c1:d7:2a:05:05:cf:8f:c1:90: dd:52:cc:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoP3EiO58tSCQPcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NzExYzFiMmItODA2ZC00YmFmLWE3ZDAtNTc2YzZiZjhkNjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25ifMnmI27hNEoKSpRUI6ztGWkDt6DRE7CJx iZHx9Ho3EGCmPOswXVroFzYyyhUV2ClQJO4RIPgz8BZzPstc4LFQ3XMKgTpHpytI FxoJBXV6pNFpTeM/5IIQlJlVYpLXX6BB59xPv5JumLRolObvtjIjkXjipFM9srVX qZFiUGRWOdLTN/bi46xMVCal+w6Y04KmPwihmtmTO2+0d0yvY7HpSwKhuKATPAdl AGiqfRNFIFG8EnYBnSSVTXk7/T7g4sCqLMTcLKPjlXUFzZImsoRB5xNzvTEUTqny nbltGpWhToxq6gSWpjGDFHTpeaWKxsVNOumEwDylbnGyefGiCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElr/KZO3+1h7WzrtlvFq77hpHn5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTA5YjA4MmYtYWQxMi0z Nzc5LTk4MmQtZmQ4ODJmOWE3NmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArd2XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1DYcZPWt+duFlSeZ+4AbmIDSbNXyMixreieT4tzdX+4k33WnH68IY0 EbiZb5pjZ092q9PVr9j8rSi8TqWku4kZ3ohVGPjTMRtS0b7WFQzyj2/mWK0Bgksn cYq5eE1W+PjIBj+tzb4U4iyvqG7Oh9Zx5rDNvn6HT3HnKa6Sc26011sAzXriMOU/ 84OIUDlUDCLWrIa4NgY0Z+kPAIyqJh+DHu1gSrkJZPVxM2Eq5ZoiSh7Z3sRPm9A4 RDeZQW7Q/FBD/nO6Z1k8nzuOMJ8ReKa2urAgBoClIn6VvXqnVC9wZ50Tda5Tb+4j HTXa5b4aGsRzIcHXKgUFz4/BkN1SzHc= -----END CERTIFICATE-----Generated at Wed Aug 6 13:14:45 2025 by rpki-client