$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d03a215c-cd4e-37d2-8a48-2b31308c35d6.roa File: d03a215c-cd4e-37d2-8a48-2b31308c35d6.roa (raw, json) Hash identifier: 301z/svAEXZfemFjWYU9KT2POwN6C+p1zllhUvAJDCc= Subject key identifier: 3E:04:B2:E2:AA:FA:CC:67:29:E9:F9:52:F2:47:1F:7F:97:31:4E:68 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AADF0FB3A013FEE26CC6A7F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d03a215c-cd4e-37d2-8a48-2b31308c35d6.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 173.189.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f0:fb:3a:01:3f:ee:26:cc:6a:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=230b1476-ee1f-42f4-8abf-6b4a237b3b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a9:86:4b:4a:23:96:cf:b5:c9:bc:11:14:14: 38:01:61:d3:96:37:b8:b5:6c:08:7d:5e:fc:d6:39: 3a:9f:49:eb:c0:26:6d:6e:03:99:09:fe:1e:e2:cd: 96:ec:8e:f1:23:85:4c:c4:ce:d3:fb:ad:73:92:2f: 5c:8b:7b:9d:9a:6c:0f:3f:f1:69:bd:38:95:c1:f0: 39:95:4f:af:8d:b4:6a:b7:6a:51:7b:1a:9f:18:97: 7c:30:35:e9:29:ed:35:03:64:cc:c4:51:73:26:e7: 9b:69:76:2b:bc:1b:a3:ec:df:5f:30:f4:64:53:6b: 82:d0:9a:c6:e7:a1:9b:72:e7:84:52:c4:b7:8e:a4: 36:33:73:8a:ff:bd:3e:45:76:c1:97:d4:0d:68:3d: e0:f0:fa:3a:a1:4c:e9:8e:ce:41:67:e2:2c:68:21: 76:c5:6b:4e:1b:83:63:fe:f1:e1:29:89:0e:c7:30: 44:7c:bd:c5:56:b9:b9:e1:28:b9:2a:10:48:72:1e: c2:3b:dc:09:34:18:7c:02:6d:e0:35:7f:25:62:e2: 03:f8:62:bb:de:00:aa:d4:af:a6:ef:39:da:5f:ef: c4:b4:60:97:d7:68:f0:aa:4e:c3:da:37:ba:b7:08: dc:6e:e7:df:61:3e:2f:a2:bf:14:4f:ab:b0:a3:79: 4a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:04:B2:E2:AA:FA:CC:67:29:E9:F9:52:F2:47:1F:7F:97:31:4E:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d03a215c-cd4e-37d2-8a48-2b31308c35d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:a1:de:81:07:a6:5d:67:27:e6:76:0d:6b:ef:d3:d4:26:8f: 7b:21:43:f0:77:a4:7e:ad:9f:a5:3e:f6:8f:2a:bf:5b:c3:cb: 8d:c2:b0:75:ba:ad:91:ed:9b:8f:c6:4e:a6:02:c1:c9:26:06: 50:2f:8f:73:27:48:f6:64:68:b2:85:f4:ab:d9:b8:72:c4:04: 78:50:16:6e:df:5f:58:83:62:5c:a1:f4:7c:b1:a3:41:2a:1e: 70:04:0d:14:5b:90:81:ee:8b:43:37:d9:f0:ba:95:60:25:b4: c3:00:68:aa:ad:cb:86:67:59:4c:7d:63:d1:24:a8:68:17:30: e6:7d:09:c2:3b:13:0b:ab:54:b2:66:fe:55:e7:2a:ca:45:17: 3c:f7:1b:9d:87:c3:df:77:c5:9b:06:24:42:e9:8d:b3:8c:8d: 46:16:9e:b1:bc:19:4e:a4:43:3b:5f:50:e9:39:a6:db:43:34: 08:58:71:b3:29:2b:86:67:bc:b0:23:52:43:ff:01:49:5d:09: b1:ed:78:b5:0f:c5:6c:f3:48:2b:40:36:c3:18:99:8e:3f:9c: c3:1a:56:fb:ac:77:d2:69:af:fb:05:87:53:fe:91:9c:e0:b6: 31:ef:60:80:e0:3c:b1:39:33:0f:02:db:46:bc:e8:e2:cc:02: 3d:d6:2f:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8Ps6AT/uJsxqfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk MjMwYjE0NzYtZWUxZi00MmY0LThhYmYtNmI0YTIzN2IzYjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKmGS0ojls+1ybwRFBQ4AWHTlje4tWwIfV78 1jk6n0nrwCZtbgOZCf4e4s2W7I7xI4VMxM7T+61zki9ci3udmmwPP/FpvTiVwfA5 lU+vjbRqt2pRexqfGJd8MDXpKe01A2TMxFFzJuebaXYrvBuj7N9fMPRkU2uC0JrG 56GbcueEUsS3jqQ2M3OK/70+RXbBl9QNaD3g8Po6oUzpjs5BZ+IsaCF2xWtOG4Nj /vHhKYkOxzBEfL3FVrm54Si5KhBIch7CO9wJNBh8Am3gNX8lYuID+GK73gCq1K+m 7znaX+/EtGCX12jwqk7D2je6twjcbuffYT4vor8UT6uwo3lKRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4EsuKq+sxnKen5UvJHH3+XMU5oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDAzYTIxNWMtY2Q0ZS0z N2QyLThhNDgtMmIzMTMwOGMzNWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrb1oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6h3oEHpl1nJ+Z2DWvv09Qmj3shQ/B3pH6tn6U+9o8qv1vDy43CsHW6 rZHtm4/GTqYCwckmBlAvj3MnSPZkaLKF9KvZuHLEBHhQFm7fX1iDYlyh9Hyxo0Eq HnAEDRRbkIHui0M32fC6lWAltMMAaKqty4ZnWUx9Y9EkqGgXMOZ9CcI7EwurVLJm /lXnKspFFzz3G52Hw993xZsGJELpjbOMjUYWnrG8GU6kQztfUOk5pttDNAhYcbMp K4ZnvLAjUkP/AUldCbHteLUPxWzzSCtANsMYmY4/nMMaVvusd9Jpr/sFh1P+kZzg tjHvYIDgPLE5Mw8C20a86OLMAj3WLxA= -----END CERTIFICATE-----Generated at Mon Aug 4 16:07:40 2025 by rpki-client