$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f94b44f-a7be-33b2-9ed9-1c86754ce2aa.roa File: 9f94b44f-a7be-33b2-9ed9-1c86754ce2aa.roa (raw, json) Hash identifier: mUzE/g6hG7jpRmlGPT7TmqDGa4qiiVZptquGjOmaroQ= Subject key identifier: 41:B5:0C:67:08:50:43:97:4D:8B:0F:DA:1C:24:69:3B:02:DD:1D:D8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB22126D9DF2F7E300FE25340 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f94b44f-a7be-33b2-9ed9-1c86754ce2aa.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 7029 IP address blocks: 173.186.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:26:d9:df:2f:7e:30:0f:e2:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=8d53d4ea-c2e5-4fe1-b0a7-6d49166f77bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:63:e8:39:3f:f1:78:8a:f9:0a:3b:cc:8c:77: 97:71:38:31:69:3a:d3:99:a8:68:a0:68:ad:58:c3: 5f:be:bc:3a:04:da:0b:51:d4:66:37:bc:78:cb:ad: 27:45:3c:a3:91:17:da:a1:fe:96:60:a2:f2:76:af: 8f:66:db:ff:37:5c:45:d0:83:06:1e:98:de:c3:cd: e6:cb:c3:34:f0:76:2c:eb:08:39:56:52:22:6e:ea: 63:70:b0:80:ac:d5:98:63:0d:04:24:fe:42:2c:af: fe:56:13:8e:80:b7:51:df:56:db:bb:df:c3:4f:cc: 20:82:d3:24:c0:b8:06:9e:ee:c5:7d:71:d1:14:d0: b3:31:0f:4e:a2:8e:52:c5:fa:e6:4f:e0:30:25:79: f3:74:2c:f3:11:88:9f:a7:bc:a4:14:11:47:35:37: 3b:37:8d:05:44:6a:ba:04:db:d5:1d:04:ad:3c:f9: 89:52:3b:5f:5c:e9:b7:08:0a:fc:b1:70:6b:a1:d7: d7:1d:71:45:b2:14:5d:be:c6:66:15:a2:22:2e:44: f7:cc:95:49:48:e2:d6:9a:40:04:5d:6b:66:cb:fa: cf:82:8b:82:35:51:c9:dc:c8:4e:f1:c6:5b:ad:a5: 80:ab:56:25:fb:6c:b8:b1:1e:55:2a:73:50:e9:94: 01:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B5:0C:67:08:50:43:97:4D:8B:0F:DA:1C:24:69:3B:02:DD:1D:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f94b44f-a7be-33b2-9ed9-1c86754ce2aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:13:e0:c8:b3:dc:76:05:13:c0:b2:12:ca:4d:28:1a:19:56: 9b:7b:06:e8:ec:81:fb:9b:4c:72:61:28:35:86:dc:da:a1:8d: c6:a4:72:6e:49:aa:b8:0e:d5:77:42:d7:b9:58:36:47:74:7a: aa:77:94:87:33:24:01:fa:7e:d7:e4:37:46:b6:79:35:76:13: bf:4d:19:3f:dd:d8:27:11:bf:32:23:46:df:78:06:28:69:78: 42:67:ee:d5:d9:4b:e3:7a:77:a7:32:48:fe:0b:62:8f:39:3b: 17:10:24:92:ee:02:6a:26:1f:d5:57:b5:ef:03:b0:dc:a3:3a: 11:e9:3d:f1:bf:61:29:7b:71:8e:34:84:65:2f:9d:03:26:63: 0c:ae:53:b0:3b:60:2c:b9:24:e5:80:f9:6c:85:c8:97:b2:37: 9a:cb:5a:c7:55:d0:41:24:bc:e5:43:5f:89:95:30:b9:49:14: 9f:da:af:23:cd:98:3f:48:f7:bb:a3:dd:72:f4:28:ba:95:db: 71:bb:39:a9:a7:61:1b:c5:62:a8:ef:b3:93:0d:f9:b5:76:f8: 77:52:9c:46:a4:33:e0:cd:19:72:cb:dd:00:2a:55:87:84:e4: 4b:c7:45:96:74:64:ab:07:f9:2c:5a:89:9a:3f:4c:a8:a4:fb: a5:89:e2:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyISbZ3y9+MA/iU0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk OGQ1M2Q0ZWEtYzJlNS00ZmUxLWIwYTctNmQ0OTE2NmY3N2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmPoOT/xeIr5CjvMjHeXcTgxaTrTmahooGit WMNfvrw6BNoLUdRmN7x4y60nRTyjkRfaof6WYKLydq+PZtv/N1xF0IMGHpjew83m y8M08HYs6wg5VlIibupjcLCArNWYYw0EJP5CLK/+VhOOgLdR31bbu9/DT8wggtMk wLgGnu7FfXHRFNCzMQ9Ooo5SxfrmT+AwJXnzdCzzEYifp7ykFBFHNTc7N40FRGq6 BNvVHQStPPmJUjtfXOm3CAr8sXBrodfXHXFFshRdvsZmFaIiLkT3zJVJSOLWmkAE XWtmy/rPgouCNVHJ3MhO8cZbraWAq1Yl+2y4sR5VKnNQ6ZQBAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEG1DGcIUEOXTYsP2hwkaTsC3R3YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWY5NGI0NGYtYTdiZS0z M2IyLTllZDktMWM4Njc1NGNlMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8T4Miz3HYFE8CyEspNKBoZVpt7BujsgfubTHJhKDWG3Nqhjcakcm5J qrgO1XdC17lYNkd0eqp3lIczJAH6ftfkN0a2eTV2E79NGT/d2CcRvzIjRt94Bihp eEJn7tXZS+N6d6cySP4LYo85OxcQJJLuAmomH9VXte8DsNyjOhHpPfG/YSl7cY40 hGUvnQMmYwyuU7A7YCy5JOWA+WyFyJeyN5rLWsdV0EEkvOVDX4mVMLlJFJ/aryPN mD9I97uj3XL0KLqV23G7OamnYRvFYqjvs5MN+bV2+HdSnEakM+DNGXLL3QAqVYeE 5EvHRZZ0ZKsH+SxaiZo/TKik+6WJ4oE= -----END CERTIFICATE-----Generated at Wed Aug 6 04:09:47 2025 by rpki-client