$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3fb1de1-24c4-3ca8-81b2-3aeb8099c5b3.roa File: a3fb1de1-24c4-3ca8-81b2-3aeb8099c5b3.roa (raw, json) Hash identifier: J9CXzuHRY2jE20VbSuOtHTSHjrZxMd/jXEIk5mDmbhI= Subject key identifier: D0:C8:22:2B:C5:50:AE:85:DA:B4:16:30:23:74:90:90:51:8D:65:96 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB22126C31FE7CF3A52077740 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3fb1de1-24c4-3ca8-81b2-3aeb8099c5b3.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 7029 IP address blocks: 173.185.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:26:c3:1f:e7:cf:3a:52:07:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=fa46f26f-86ba-4700-a8e8-6f410249aab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b9:60:4e:0b:be:57:a0:2d:3d:6e:32:5d:8f: 89:cf:3c:13:19:03:c4:05:04:de:c8:1b:98:3b:b7: c6:20:bf:df:8c:27:e9:6f:33:ad:bd:0d:91:53:b6: 8a:02:6d:dc:de:d0:30:79:d8:ce:b3:ed:73:a0:92: 51:7e:d2:c2:78:55:cd:3e:eb:a6:07:c8:42:a9:77: f6:9a:35:84:2d:3a:02:41:67:c0:0d:b3:2f:1b:25: 52:d9:63:6a:48:f6:7c:9e:ac:4a:80:37:b6:85:e9: 40:14:c5:b8:b9:dc:2e:84:bd:f5:4f:0a:68:b7:50: cf:e1:e8:95:bd:29:70:42:6d:bf:ac:e1:b1:d8:4f: 99:25:dc:bf:75:14:2e:2d:d7:fd:77:45:ba:8b:1f: 67:ad:62:84:db:26:e7:b0:71:5c:4e:3b:61:9a:38: be:47:d5:25:86:20:75:46:7c:ea:29:70:ca:0d:61: d9:27:4d:26:d3:83:57:2c:04:75:c7:28:7d:b4:db: 60:ca:06:a2:70:dc:28:a9:93:43:02:5e:27:2f:e4: bb:e1:e1:9e:bc:2d:1a:7a:65:4e:cc:72:54:d6:46: d1:e0:fa:27:ac:8b:1b:21:7c:20:45:81:9e:63:6d: 8c:25:f2:4a:58:3a:bc:39:af:69:36:44:37:46:ad: 99:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C8:22:2B:C5:50:AE:85:DA:B4:16:30:23:74:90:90:51:8D:65:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3fb1de1-24c4-3ca8-81b2-3aeb8099c5b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:f6:57:65:7a:eb:0e:fe:da:ff:df:f9:8f:81:e9:4b:f2:54: 50:35:07:41:14:8d:3f:15:1f:24:4d:1a:75:f2:e2:69:be:5d: 71:e0:43:78:72:13:1a:a7:65:e6:a4:89:b7:05:b2:11:d4:d4: c9:91:9c:31:21:d9:aa:de:58:6c:11:e8:d2:7a:d8:e5:c1:83: fb:ca:eb:34:a7:2c:da:62:46:7b:02:3c:d6:da:7e:21:5e:81: 4e:c6:2e:b8:34:b6:79:8b:c1:71:b2:71:c0:97:6f:32:54:b5: 88:ff:f2:58:fc:77:7a:e9:7c:8d:fb:a2:c7:e5:9f:88:4d:cc: 52:40:33:d1:de:82:97:59:8b:2e:f0:8c:81:ac:e3:3b:95:a5: 6a:ae:ef:d9:9b:43:83:75:b9:d2:f9:e1:75:d6:5c:f9:e7:66: 26:18:9d:af:12:bb:fe:9c:1d:9f:f4:27:7d:55:64:a0:65:b6: 9c:63:f9:29:48:ae:c1:df:bc:a1:4d:68:c8:69:cf:7b:3d:85: c0:1e:25:63:cb:64:7b:f6:69:92:fc:07:ed:61:4a:d5:72:11: 31:72:d0:7c:d5:be:e9:cd:b0:8f:1f:03:c8:4b:25:25:24:7a: 36:26:8a:e5:a9:86:7e:47:1d:a7:d1:fc:b2:f6:73:52:c7:3f: d0:f5:a8:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyISbDH+fPOlIHd0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZmE0NmYyNmYtODZiYS00NzAwLWE4ZTgtNmY0MTAyNDlhYWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArblgTgu+V6AtPW4yXY+JzzwTGQPEBQTeyBuY O7fGIL/fjCfpbzOtvQ2RU7aKAm3c3tAwedjOs+1zoJJRftLCeFXNPuumB8hCqXf2 mjWELToCQWfADbMvGyVS2WNqSPZ8nqxKgDe2helAFMW4udwuhL31Twpot1DP4eiV vSlwQm2/rOGx2E+ZJdy/dRQuLdf9d0W6ix9nrWKE2ybnsHFcTjthmji+R9UlhiB1 RnzqKXDKDWHZJ00m04NXLAR1xyh9tNtgygaicNwoqZNDAl4nL+S74eGevC0aemVO zHJU1kbR4PonrIsbIXwgRYGeY22MJfJKWDq8Oa9pNkQ3Rq2ZlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDIIivFUK6F2rQWMCN0kJBRjWWWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTNmYjFkZTEtMjRjNC0z Y2E4LTgxYjItM2FlYjgwOTljNWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbnIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIP2V2V66w7+2v/f+Y+B6UvyVFA1B0EUjT8VHyRNGnXy4mm+XXHgQ3hy ExqnZeakibcFshHU1MmRnDEh2areWGwR6NJ62OXBg/vK6zSnLNpiRnsCPNbafiFe gU7GLrg0tnmLwXGyccCXbzJUtYj/8lj8d3rpfI37osfln4hNzFJAM9HegpdZiy7w jIGs4zuVpWqu79mbQ4N1udL54XXWXPnnZiYYna8Su/6cHZ/0J31VZKBltpxj+SlI rsHfvKFNaMhpz3s9hcAeJWPLZHv2aZL8B+1hStVyETFy0HzVvunNsI8fA8hLJSUk ejYmiuWphn5HHafR/LL2c1LHP9D1qH0= -----END CERTIFICATE-----Generated at Mon Aug 4 19:06:34 2025 by rpki-client