$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b25c8058-1850-3968-9f35-481350719a64.roa File: b25c8058-1850-3968-9f35-481350719a64.roa (raw, json) Hash identifier: rITzrvYpgqC5BgTBFShMTyDfJl0wKePplVtAWhVflQ0= Subject key identifier: F9:06:B9:08:D8:22:19:7E:77:A1:DC:6B:51:B0:F7:FF:CF:D3:A4:5C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A9E96653001B64863D1778760 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b25c8058-1850-3968-9f35-481350719a64.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 173.187.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:65:30:01:b6:48:63:d1:77:87:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=34ebcaa3-f57a-4a51-86a8-07f2368ba3ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:af:e5:a1:40:00:fc:d0:e2:cf:c2:08:bf:b8: ba:15:82:55:08:c6:02:b9:40:ed:d0:c8:55:c2:ef: 87:bf:d0:f5:b8:1e:61:34:8a:63:df:22:67:e8:53: d7:5e:5f:8c:dd:9b:33:ce:56:69:b3:64:e1:c9:fd: a1:4e:a4:83:75:f7:b8:bc:fd:24:08:00:cd:d5:ef: a2:d1:f2:7d:30:39:26:31:a6:1b:7e:9a:f9:2c:bd: 07:2a:d2:8c:bb:69:e0:bb:38:8d:e9:83:5a:06:12: 2f:39:94:74:c1:14:eb:53:a9:d6:c4:bb:22:12:19: 53:fd:ec:39:75:a2:ce:7a:ca:d9:36:9b:7b:2b:ae: 16:87:2e:44:a1:ad:2d:7d:57:93:fa:bd:75:59:2b: 02:b1:01:98:a2:79:07:04:47:92:c7:f3:dd:64:d2: 34:04:6a:e8:49:6f:21:eb:1b:f5:7c:3f:a6:c8:34: ca:c9:79:f8:db:dc:c9:d3:5b:50:61:28:b2:f0:37: 35:a6:9d:2d:0b:32:5a:f3:04:90:5a:47:dd:63:01: ad:77:1f:c3:f4:eb:4b:fa:86:8c:94:ab:1d:04:5b: 18:28:d9:8a:04:f6:36:cd:23:aa:c1:2d:c8:23:fb: 81:ba:46:6b:3b:cb:09:ab:57:8c:d9:95:86:e1:9b: 4d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:06:B9:08:D8:22:19:7E:77:A1:DC:6B:51:B0:F7:FF:CF:D3:A4:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b25c8058-1850-3968-9f35-481350719a64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:3d:51:66:19:a8:1e:9a:33:07:7a:99:83:e5:a0:ce:b6:82: c7:5d:06:22:10:19:b8:4a:c2:b2:bb:52:fb:6d:42:4f:a1:01: 80:5e:ca:f3:98:72:72:d7:a9:47:44:95:10:cc:54:5f:b8:5e: 55:d3:d2:1e:94:03:28:af:1a:fe:5a:0c:9d:21:6e:03:f7:8a: 51:e2:75:7f:04:37:f0:3c:14:e5:41:f0:9b:ac:6b:40:71:50: 56:78:0a:71:e1:76:16:54:66:cc:50:fc:4d:ad:a8:3b:16:54: c2:5d:c4:41:ce:c5:bc:ed:b6:63:3f:1f:24:a9:94:7a:d4:e4: 03:85:0a:81:1d:dd:9b:34:9f:f3:66:05:54:0e:28:3a:2c:95: 4c:09:b9:48:f2:40:91:92:6b:32:1b:d1:08:72:c2:1d:8c:e0: bc:99:bc:f2:27:60:41:30:05:2e:27:b7:b7:eb:10:4c:8e:87: ee:ed:b7:3f:1c:4f:de:7d:f2:ec:e4:ed:33:cb:ce:33:c6:36: f0:c2:bc:41:d4:2b:d3:12:f6:b0:d3:cb:d7:20:7c:82:c7:bc: 89:9b:6c:80:60:40:91:2c:53:7d:6f:ac:62:19:26:a8:c2:fd: 60:91:09:78:84:a5:53:39:a3:9a:7a:b0:a2:52:5f:b4:62:db: 0f:02:16:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelmUwAbZIY9F3h2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MzRlYmNhYTMtZjU3YS00YTUxLTg2YTgtMDdmMjM2OGJhM2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6/loUAA/NDiz8IIv7i6FYJVCMYCuUDt0MhV wu+Hv9D1uB5hNIpj3yJn6FPXXl+M3ZszzlZps2Thyf2hTqSDdfe4vP0kCADN1e+i 0fJ9MDkmMaYbfpr5LL0HKtKMu2nguziN6YNaBhIvOZR0wRTrU6nWxLsiEhlT/ew5 daLOesrZNpt7K64Why5Eoa0tfVeT+r11WSsCsQGYonkHBEeSx/PdZNI0BGroSW8h 6xv1fD+myDTKyXn429zJ01tQYSiy8Dc1pp0tCzJa8wSQWkfdYwGtdx/D9OtL+oaM lKsdBFsYKNmKBPY2zSOqwS3II/uBukZrO8sJq1eM2ZWG4ZtNUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkGuQjYIhl+d6Hca1Gw9//P06RcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjI1YzgwNTgtMTg1MC0z OTY4LTlmMzUtNDgxMzUwNzE5YTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbuiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFc9UWYZqB6aMwd6mYPloM62gsddBiIQGbhKwrK7UvttQk+hAYBeyvOY cnLXqUdElRDMVF+4XlXT0h6UAyivGv5aDJ0hbgP3ilHidX8EN/A8FOVB8Jusa0Bx UFZ4CnHhdhZUZsxQ/E2tqDsWVMJdxEHOxbzttmM/HySplHrU5AOFCoEd3Zs0n/Nm BVQOKDoslUwJuUjyQJGSazIb0Qhywh2M4LyZvPInYEEwBS4nt7frEEyOh+7ttz8c T9598uzk7TPLzjPGNvDCvEHUK9MS9rDTy9cgfILHvImbbIBgQJEsU31vrGIZJqjC /WCRCXiEpVM5o5p6sKJSX7Ri2w8CFnA= -----END CERTIFICATE-----Generated at Sat Aug 9 02:47:20 2025 by rpki-client