$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ceef92dd-ffef-35a7-9def-455b260a3f30.roa File: ceef92dd-ffef-35a7-9def-455b260a3f30.roa (raw, json) Hash identifier: 4ak15LaT4++MvzUE21mQMsS07xDKCFSmX3dFxPomNpE= Subject key identifier: F6:46:C2:79:A9:C9:EC:4B:73:9A:77:65:0C:F2:94:A8:DE:21:24:20 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A9E9665921F89172C9DE867A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ceef92dd-ffef-35a7-9def-455b260a3f30.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 173.188.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:65:92:1f:89:17:2c:9d:e8:67:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=39e99c73-a8c1-4b29-928e-a66c35cb1a0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b1:7e:a0:ef:5e:40:b6:24:04:a6:c5:05:d4: d5:a8:a0:6d:ae:25:ac:97:05:f3:13:19:fd:a5:ca: 56:b2:f2:af:5e:50:f0:c2:d3:cf:ab:e1:de:0a:24: 77:23:8c:2c:32:77:36:07:fd:57:81:62:ed:42:f2: f1:76:56:d7:0c:ce:bd:49:32:91:30:23:99:7e:d8: af:b8:de:60:52:69:f9:f0:16:8d:0b:3f:ac:5e:8c: c3:0a:16:86:fb:69:b4:2a:48:d4:0b:dd:00:3e:10: aa:3a:01:63:bb:0d:34:c7:e8:63:b2:c9:0b:b2:4b: 65:36:77:85:22:33:06:5e:71:92:af:5c:bb:fd:a0: 0a:3a:22:93:0a:3f:60:11:dc:56:8d:2b:44:80:fe: ac:01:07:15:3f:c8:a9:10:3e:58:9e:10:53:4c:11: 6f:43:16:25:cf:96:41:80:5d:b8:15:33:80:9d:60: a0:a1:16:b6:d0:8f:9e:f8:33:3b:ae:e4:bd:2b:ab: bf:58:e8:43:23:bf:88:98:01:44:d9:be:97:f5:8e: 84:5e:50:e9:da:58:eb:ba:44:52:85:78:03:ab:7a: 90:33:a1:96:da:7b:e3:a3:40:81:fa:bb:9b:3c:8d: f5:eb:4b:9b:d4:93:a4:3a:d6:08:ad:bb:a9:b5:7f: 88:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:46:C2:79:A9:C9:EC:4B:73:9A:77:65:0C:F2:94:A8:DE:21:24:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ceef92dd-ffef-35a7-9def-455b260a3f30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:8c:34:83:a3:a0:16:96:2b:bb:19:4d:6c:80:12:40:38:77: 6b:ee:d4:0e:1a:e2:7c:3d:60:56:85:d4:df:ac:2e:22:1c:01: a7:dc:18:79:bc:0f:e5:00:7d:e2:3f:2b:42:cd:93:55:1f:fd: 6e:6e:9b:39:93:d1:3e:c4:7a:e3:2c:c3:a1:0e:31:c2:77:63: 44:4d:bf:3c:1a:0d:90:28:ac:90:48:25:85:12:41:2e:e1:14: 62:df:e6:55:7b:42:2d:54:ca:b6:47:a4:0f:e7:6d:04:07:b0: 3b:f2:88:4c:79:8d:85:d2:a6:43:ab:a1:38:3e:72:30:d1:29: 8e:0a:12:c1:6d:e8:e0:83:96:93:61:5a:73:96:5a:ea:72:17: a1:3e:da:3a:80:d1:09:e9:89:29:1d:20:27:f4:41:f9:19:03: e8:d8:7f:f3:21:bd:3b:66:84:d8:12:ff:f9:6a:e0:b8:a1:18: 06:84:ec:00:8b:6d:1e:64:25:9d:18:1e:4f:4c:65:6e:82:f1: 15:db:fb:56:98:4d:a9:8d:37:5f:d5:ea:c2:a1:95:8a:32:bd: ea:d0:2c:65:5a:49:37:1c:9c:90:60:6b:ca:ac:75:5f:bd:69: 25:a3:88:aa:f7:07:4c:0c:6e:ae:47:f5:30:d6:b0:aa:25:47: 2a:16:9c:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelmWSH4kXLJ3oZ6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MzllOTljNzMtYThjMS00YjI5LTkyOGUtYTY2YzM1Y2IxYTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbF+oO9eQLYkBKbFBdTVqKBtriWslwXzExn9 pcpWsvKvXlDwwtPPq+HeCiR3I4wsMnc2B/1XgWLtQvLxdlbXDM69STKRMCOZftiv uN5gUmn58BaNCz+sXozDChaG+2m0KkjUC90APhCqOgFjuw00x+hjsskLsktlNneF IjMGXnGSr1y7/aAKOiKTCj9gEdxWjStEgP6sAQcVP8ipED5YnhBTTBFvQxYlz5ZB gF24FTOAnWCgoRa20I+e+DM7ruS9K6u/WOhDI7+ImAFE2b6X9Y6EXlDp2ljrukRS hXgDq3qQM6GW2nvjo0CB+rubPI3160ub1JOkOtYIrbuptX+INwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZGwnmpyexLc5p3ZQzylKjeISQgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2VlZjkyZGQtZmZlZi0z NWE3LTlkZWYtNDU1YjI2MGEzZjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbwSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqMNIOjoBaWK7sZTWyAEkA4d2vu1A4a4nw9YFaF1N+sLiIcAafcGHm8 D+UAfeI/K0LNk1Uf/W5umzmT0T7EeuMsw6EOMcJ3Y0RNvzwaDZAorJBIJYUSQS7h FGLf5lV7Qi1UyrZHpA/nbQQHsDvyiEx5jYXSpkOroTg+cjDRKY4KEsFt6OCDlpNh WnOWWupyF6E+2jqA0QnpiSkdICf0QfkZA+jYf/MhvTtmhNgS//lq4LihGAaE7ACL bR5kJZ0YHk9MZW6C8RXb+1aYTamNN1/V6sKhlYoyverQLGVaSTccnJBga8qsdV+9 aSWjiKr3B0wMbq5H9TDWsKolRyoWnDE= -----END CERTIFICATE-----Generated at Mon Aug 4 18:34:16 2025 by rpki-client