$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bdcc1688-3489-357f-95be-95cce13504c4.roa File: bdcc1688-3489-357f-95be-95cce13504c4.roa (raw, json) Hash identifier: QmMyi8KzVFkVMuNzyyPx1kRPdxoX4HZX0sWyNC+L4yI= Subject key identifier: 60:25:B9:2A:15:BE:AB:30:4B:2B:84:8C:D4:80:47:6D:BC:5A:4A:97 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB38628C980493328356C8300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bdcc1688-3489-357f-95be-95cce13504c4.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 7029 IP address blocks: 173.189.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:28:c9:80:49:33:28:35:6c:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=4af99010-3d7d-4981-967b-cef97cdb3064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:21:5b:60:97:96:6a:67:8a:04:64:23:98:b9: 91:55:3c:16:94:b1:48:69:21:d7:11:f1:c0:10:a3: 07:ef:2a:c0:9c:2e:c2:30:65:29:4e:19:8e:35:e6: bd:a6:50:96:52:03:82:8f:79:0f:54:44:7f:0a:50: 2f:dd:4e:9f:d9:bb:65:94:84:b1:67:85:ff:c9:5a: 26:39:53:eb:f5:cd:c0:d0:e9:cd:50:72:55:87:cb: 5d:63:91:6e:62:06:10:a1:2a:70:de:8d:c9:f2:97: e0:4a:c7:a7:73:30:56:3b:3e:df:41:3d:c8:af:8c: e6:08:89:2d:ba:89:0c:dc:c0:ea:31:99:d6:4d:51: de:d6:e4:66:cf:f2:7a:20:9d:6a:08:6d:88:d7:42: 69:5c:bb:7c:8c:64:87:08:dc:58:7c:82:b2:05:65: c7:e4:35:fb:f5:cb:8f:41:e6:e9:55:30:2a:d8:02: 85:e9:2f:bf:d8:6a:f5:93:b1:d0:22:d0:25:14:1b: d2:f5:c4:0d:01:f9:6f:3a:bc:98:3a:d0:1c:bb:b8: 9f:ba:29:04:d8:70:93:79:02:96:cf:65:1a:42:4c: c7:b3:97:6c:15:0c:ee:cf:0a:2b:13:96:c6:80:3c: 4c:27:36:2d:f0:af:77:91:9c:1b:b0:7e:45:df:e9: 18:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:25:B9:2A:15:BE:AB:30:4B:2B:84:8C:D4:80:47:6D:BC:5A:4A:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bdcc1688-3489-357f-95be-95cce13504c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:ba:3e:56:6f:60:fc:f9:b7:ed:e3:4c:9c:5e:74:26:a3:c6: c7:d6:d3:60:ed:54:08:ca:d2:70:71:bd:34:76:74:b6:0f:9f: 81:5e:e4:3a:92:c0:bf:88:e0:37:26:82:a6:6b:97:66:e4:ab: 55:14:f9:b6:d3:37:25:64:3e:0e:75:d8:83:bb:eb:11:14:f5: 8e:a5:82:79:64:4b:d8:86:d8:b3:67:3b:c8:8f:d7:53:86:7b: 67:5f:81:a0:73:7e:51:14:a1:f0:f7:7e:61:01:27:46:76:e8: 1c:61:85:7c:d3:6a:d3:9d:dc:ef:c1:e4:48:54:4e:d1:ae:e8: 4e:90:a7:ea:39:71:e2:6a:10:71:53:70:eb:52:eb:bd:11:9d: 15:40:7c:15:3e:3a:37:d9:ad:28:79:a2:f0:69:a5:8e:3e:3b: 92:e8:98:0c:8d:3f:1e:e6:11:7e:28:e0:c5:cc:fa:05:29:ad: bb:f2:75:27:c5:4f:de:bb:bb:a7:b4:8d:7b:65:79:31:fc:6a: 20:6e:41:71:97:a0:e5:28:27:ff:05:2e:76:42:07:3d:04:88: eb:5c:15:e5:4d:e0:35:ba:41:83:df:aa:90:84:d0:79:81:24: 86:69:1f:30:3d:83:73:2f:13:9e:e2:d1:4a:16:09:a1:b2:78: 1b:58:26:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhijJgEkzKDVsgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk NGFmOTkwMTAtM2Q3ZC00OTgxLTk2N2ItY2VmOTdjZGIzMDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiFbYJeWameKBGQjmLmRVTwWlLFIaSHXEfHA EKMH7yrAnC7CMGUpThmONea9plCWUgOCj3kPVER/ClAv3U6f2btllISxZ4X/yVom OVPr9c3A0OnNUHJVh8tdY5FuYgYQoSpw3o3J8pfgSsenczBWOz7fQT3Ir4zmCIkt uokM3MDqMZnWTVHe1uRmz/J6IJ1qCG2I10JpXLt8jGSHCNxYfIKyBWXH5DX79cuP QebpVTAq2AKF6S+/2Gr1k7HQItAlFBvS9cQNAflvOryYOtAcu7ifuikE2HCTeQKW z2UaQkzHs5dsFQzuzworE5bGgDxMJzYt8K93kZwbsH5F3+kYGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAluSoVvqswSyuEjNSAR228WkqXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmRjYzE2ODgtMzQ4OS0z NTdmLTk1YmUtOTVjY2UxMzUwNGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrb1sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB26PlZvYPz5t+3jTJxedCajxsfW02DtVAjK0nBxvTR2dLYPn4Fe5DqS wL+I4DcmgqZrl2bkq1UU+bbTNyVkPg512IO76xEU9Y6lgnlkS9iG2LNnO8iP11OG e2dfgaBzflEUofD3fmEBJ0Z26BxhhXzTatOd3O/B5EhUTtGu6E6Qp+o5ceJqEHFT cOtS670RnRVAfBU+OjfZrSh5ovBppY4+O5LomAyNPx7mEX4o4MXM+gUprbvydSfF T967u6e0jXtleTH8aiBuQXGXoOUoJ/8FLnZCBz0EiOtcFeVN4DW6QYPfqpCE0HmB JIZpHzA9g3MvE57i0UoWCaGyeBtYJuE= -----END CERTIFICATE-----Generated at Sun Aug 10 16:01:08 2025 by rpki-client