$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4141b05-3c99-3589-8111-c183d6fd4bb0.roa File: e4141b05-3c99-3589-8111-c183d6fd4bb0.roa (raw, json) Hash identifier: HdC6Yy5AgIf24q0OewJH6l6XW0/H+h3pLySPZYILyMw= Subject key identifier: EC:FE:A9:1F:B7:08:C4:D0:00:79:5C:FA:61:14:AC:A8:C2:C6:4C:B8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8C70D306B40D6267CEDCA500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4141b05-3c99-3589-8111-c183d6fd4bb0.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 173.190.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:d3:06:b4:0d:62:67:ce:dc:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=4c7a502e-dd24-4f17-8e4c-323db5379b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:81:37:81:f6:55:6c:28:21:ee:9b:69:38:67: 4f:c8:c0:71:12:33:0a:11:8d:7d:fa:e4:67:29:f9: 21:03:9e:5a:6e:f8:13:9f:9f:79:1c:a8:cb:6a:20: 67:9e:fb:06:2e:49:0e:9e:d9:58:57:78:2a:b5:e0: e6:80:d9:74:3b:c4:b9:92:6d:c7:3f:d3:fa:da:8b: 46:8f:4b:13:10:44:25:ec:b9:3b:94:81:c9:4c:08: 31:57:3f:34:26:69:62:e0:63:3a:6b:e3:14:36:ba: 29:67:cc:f0:a1:42:75:48:c0:fd:93:dd:0d:8d:5c: 64:a1:9c:05:00:30:c7:2f:28:e7:b1:5b:98:be:5a: 39:31:58:cc:21:64:aa:51:bc:4e:78:cb:91:46:82: 09:5a:aa:7d:e8:57:0d:3c:df:85:a1:12:8b:9c:98: 8a:57:ae:ff:aa:2d:83:dd:b9:04:8b:38:36:d5:49: 0a:04:d0:1d:1c:7d:36:9d:25:47:1f:69:df:85:9e: c9:c6:9e:84:28:a2:17:8e:69:12:2f:73:3d:1d:ce: 74:5d:10:53:7e:7d:8d:77:b9:88:52:fa:0a:1e:b0: e8:9a:f0:a5:bd:e4:bf:39:c1:ad:a7:96:62:81:f7: df:6e:30:da:dd:f5:e5:d3:c5:2c:21:a5:9e:4a:59: ce:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FE:A9:1F:B7:08:C4:D0:00:79:5C:FA:61:14:AC:A8:C2:C6:4C:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4141b05-3c99-3589-8111-c183d6fd4bb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ca:ba:a0:b5:81:99:b7:70:c5:8e:fa:50:fe:85:b7:cd:72: 3f:84:9c:f7:09:18:6d:41:59:2a:5c:53:1e:73:01:e0:91:3c: b5:ef:56:75:ce:c4:e6:79:4a:c4:50:3c:70:e5:42:a6:e1:0f: 95:8e:47:a6:1a:c2:53:64:0e:82:f6:d8:10:4d:cd:5e:78:9b: 14:44:53:cf:e9:f5:c1:3e:81:1b:5f:1a:ed:23:7b:8e:d5:11: e8:99:ee:72:07:4d:18:38:9b:15:07:8e:a6:4f:64:79:61:68: 8d:39:2a:7b:24:18:f3:df:ca:11:02:22:c6:de:2b:d4:40:6e: 08:72:88:86:55:51:05:ed:26:bc:65:f7:3e:b6:36:b5:54:37: 74:4e:2c:45:b3:6a:0c:63:14:6b:77:2d:39:33:79:49:31:85: 9a:7e:1d:20:df:a4:d2:e0:48:36:af:42:2b:06:3d:0b:d2:81: 7f:28:5c:d6:01:12:73:a5:c7:b2:b9:30:30:ca:62:4e:be:9e: fd:84:6b:d9:81:a0:3e:37:63:6f:28:93:b2:51:84:a9:30:1d: 05:cd:e2:f1:0e:90:b3:83:b3:26:f9:9c:19:85:a6:b4:1a:a4: 09:f1:c0:83:1c:0c:f0:98:e1:b5:54:eb:9c:72:db:8e:6b:0c: 0d:b7:88:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcNMGtA1iZ87cpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk NGM3YTUwMmUtZGQyNC00ZjE3LThlNGMtMzIzZGI1Mzc5YjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4E3gfZVbCgh7ptpOGdPyMBxEjMKEY19+uRn KfkhA55abvgTn595HKjLaiBnnvsGLkkOntlYV3gqteDmgNl0O8S5km3HP9P62otG j0sTEEQl7Lk7lIHJTAgxVz80Jmli4GM6a+MUNropZ8zwoUJ1SMD9k90NjVxkoZwF ADDHLyjnsVuYvlo5MVjMIWSqUbxOeMuRRoIJWqp96FcNPN+FoRKLnJiKV67/qi2D 3bkEizg21UkKBNAdHH02nSVHH2nfhZ7Jxp6EKKIXjmkSL3M9Hc50XRBTfn2Nd7mI UvoKHrDomvClveS/OcGtp5ZigfffbjDa3fXl08UsIaWeSlnO6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOz+qR+3CMTQAHlc+mEUrKjCxky4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTQxNDFiMDUtM2M5OS0z NTg5LTgxMTEtYzE4M2Q2ZmQ0YmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErb4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7KuqC1gZm3cMWO+lD+hbfNcj+EnPcJGG1BWSpcUx5zAeCRPLXvVnXO xOZ5SsRQPHDlQqbhD5WOR6YawlNkDoL22BBNzV54mxREU8/p9cE+gRtfGu0je47V EeiZ7nIHTRg4mxUHjqZPZHlhaI05KnskGPPfyhECIsbeK9RAbghyiIZVUQXtJrxl 9z62NrVUN3ROLEWzagxjFGt3LTkzeUkxhZp+HSDfpNLgSDavQisGPQvSgX8oXNYB EnOlx7K5MDDKYk6+nv2Ea9mBoD43Y28ok7JRhKkwHQXN4vEOkLODsyb5nBmFprQa pAnxwIMcDPCY4bVU65xy245rDA23iJQ= -----END CERTIFICATE-----Generated at Wed Aug 6 09:31:37 2025 by rpki-client