$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cc0c1dd-cb09-3709-bb88-090ec6e939dd.roa File: 9cc0c1dd-cb09-3709-bb88-090ec6e939dd.roa (raw, json) Hash identifier: 7F09C9UFnUFhmOWTQTHQJbmMdDRBudBMpKCdvXKA6VU= Subject key identifier: 83:B8:A9:0E:B5:D1:DF:33:9A:EB:BB:CD:04:70:95:53:F2:59:33:74 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AA160C724C739D0D11B3BA080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cc0c1dd-cb09-3709-bb88-090ec6e939dd.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 173.185.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:c7:24:c7:39:d0:d1:1b:3b:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=8c23acee-4893-408f-9de8-7d16ccb26aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:54:22:65:bb:54:e4:c4:6d:f7:33:56:b8:e7: 6e:f9:c4:56:94:35:f2:b1:4b:e6:94:2d:8b:35:44: e1:3e:b8:3d:3f:2f:15:f1:93:df:b2:f3:d5:85:0a: a0:76:1c:46:5b:33:dc:55:2f:22:7e:07:51:60:e2: 40:e4:89:56:9d:65:e6:43:c1:70:4a:d9:8a:e3:c8: d0:a5:23:8a:ed:c7:85:41:ba:b0:59:b4:ff:ea:c9: ff:15:db:0c:74:6b:49:c1:7c:46:ee:eb:8e:2a:fb: e9:6a:87:69:90:08:8c:9f:0b:cb:eb:58:65:ec:39: 9e:3e:ed:5e:8a:d8:34:f3:2a:44:a7:27:dc:4e:37: e3:36:54:06:8d:f4:04:29:25:05:5d:1b:a4:b7:af: ba:f5:7b:24:57:4c:32:34:fd:f0:65:9c:cf:18:af: 0f:22:ac:f4:8f:b5:54:16:08:d2:5b:71:e0:18:ff: 5b:a4:c5:8d:fa:7c:83:80:fb:e1:ae:d7:29:6a:a3: 16:28:42:0e:9e:27:d4:89:73:f7:c3:00:40:29:4e: 69:b2:87:30:7f:75:b8:60:ec:fd:57:11:db:b8:cf: f9:20:51:e7:c7:f0:59:20:ec:be:d1:82:d0:0b:2e: e0:6c:dc:49:b0:cc:08:b6:fa:71:50:28:5e:86:d2: 01:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B8:A9:0E:B5:D1:DF:33:9A:EB:BB:CD:04:70:95:53:F2:59:33:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cc0c1dd-cb09-3709-bb88-090ec6e939dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:cd:ca:3f:02:6e:48:00:9e:aa:1d:55:2b:75:d0:0b:f1:5f: dc:09:82:85:5c:fe:7e:cd:9e:5a:a4:a1:f1:80:cd:d1:b2:28: e3:eb:74:b4:ef:61:b9:68:2e:87:1e:da:f1:77:11:01:cd:a7: 62:5b:0d:e2:ff:b2:45:60:a5:46:e7:30:92:47:11:09:65:0e: 64:4c:0f:46:f4:b5:2d:ef:8e:0b:a9:f6:83:f1:61:54:3e:d0: c0:36:94:c5:30:9e:ee:9d:84:bd:22:aa:75:04:f5:69:ae:a1: 43:7f:4b:a9:65:b0:f0:f7:a9:1c:3f:df:a5:e6:61:73:47:7e: 70:33:24:64:65:2a:d9:6c:5c:16:13:08:12:c2:40:69:d7:7d: 75:40:41:dc:b9:e4:42:04:b8:a7:38:15:d2:87:b9:26:34:45: c4:8f:50:a1:ad:27:85:8f:7a:95:ec:fa:fb:6e:17:30:31:33: 59:b5:72:7d:b2:ad:13:c7:04:6c:c3:5d:9e:c2:71:0d:28:41: c2:67:d7:52:70:55:f5:ba:8c:30:d8:6c:49:5a:d1:f9:ff:fd: 9d:ff:8b:c5:8b:7c:45:8d:61:17:a5:b1:0f:ab:30:24:b7:7c: 4d:c8:cd:35:14:4b:0b:b6:a2:8e:06:52:9b:3f:42:dd:7e:63: b1:e1:87:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYMckxznQ0Rs7oIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk OGMyM2FjZWUtNDg5My00MDhmLTlkZTgtN2QxNmNjYjI2YWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1QiZbtU5MRt9zNWuOdu+cRWlDXysUvmlC2L NUThPrg9Py8V8ZPfsvPVhQqgdhxGWzPcVS8ifgdRYOJA5IlWnWXmQ8FwStmK48jQ pSOK7ceFQbqwWbT/6sn/FdsMdGtJwXxG7uuOKvvpaodpkAiMnwvL61hl7DmePu1e itg08ypEpyfcTjfjNlQGjfQEKSUFXRukt6+69XskV0wyNP3wZZzPGK8PIqz0j7VU FgjSW3HgGP9bpMWN+nyDgPvhrtcpaqMWKEIOnifUiXP3wwBAKU5psocwf3W4YOz9 VxHbuM/5IFHnx/BZIOy+0YLQCy7gbNxJsMwItvpxUChehtIB8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIO4qQ610d8zmuu7zQRwlVPyWTN0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWNjMGMxZGQtY2IwOS0z NzA5LWJiODgtMDkwZWM2ZTkzOWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvNyj8CbkgAnqodVSt10AvxX9wJgoVc/n7NnlqkofGAzdGyKOPrdLTv YbloLoce2vF3EQHNp2JbDeL/skVgpUbnMJJHEQllDmRMD0b0tS3vjgup9oPxYVQ+ 0MA2lMUwnu6dhL0iqnUE9WmuoUN/S6llsPD3qRw/36XmYXNHfnAzJGRlKtlsXBYT CBLCQGnXfXVAQdy55EIEuKc4FdKHuSY0RcSPUKGtJ4WPepXs+vtuFzAxM1m1cn2y rRPHBGzDXZ7CcQ0oQcJn11JwVfW6jDDYbEla0fn//Z3/i8WLfEWNYRelsQ+rMCS3 fE3IzTUUSwu2oo4GUps/Qt1+Y7Hhh8U= -----END CERTIFICATE-----Generated at Thu Aug 7 02:05:25 2025 by rpki-client