$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8398280-5017-3fd7-aa3c-e2b9f27f35e4.roa File: e8398280-5017-3fd7-aa3c-e2b9f27f35e4.roa (raw, json) Hash identifier: pOZGCJ9OF6hH1+pKCJaPuJZXLAEqrDCKyAOr7aKuYu0= Subject key identifier: 6D:D9:08:D3:D2:CC:8A:57:BC:E4:DE:77:3B:BF:B8:6B:B3:96:14:6E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0F49D95F181835E8D4800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8398280-5017-3fd7-aa3c-e2b9f27f35e4.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7018 IP address blocks: 173.186.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:f4:9d:95:f1:81:83:5e:8d:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=8d2a52b0-bec1-4f01-acdb-a3d24d0dbacd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:26:48:8b:b6:31:69:19:90:a4:25:fb:02:4d: 7b:23:f6:8c:8e:1c:16:87:a9:14:16:f5:24:a0:e9: e8:30:f0:5b:92:f6:b7:5a:69:a9:7a:e6:0a:4d:27: 0a:d0:f8:39:e8:20:99:32:df:09:a7:c4:91:08:bc: c2:7d:bb:b7:fc:e2:e3:c9:9a:9d:95:17:9e:78:93: 9f:c3:73:f0:e0:d2:d5:8f:37:da:69:5b:8c:bd:fc: 28:e9:23:21:27:17:17:de:5c:3a:5c:1f:04:b0:f0: 29:ef:e8:e3:dd:8c:15:22:5c:b0:e8:e6:a8:8d:79: 87:d2:9c:a3:9c:b1:64:ef:8d:5c:48:a5:8d:bf:bd: 41:41:03:a7:ba:ea:82:2d:aa:06:0b:56:32:c8:b1: 14:1d:cb:76:7b:56:4b:c7:69:a7:48:ed:b0:e2:e6: 52:b4:1b:1e:9c:e2:9c:9c:e0:3f:4a:55:75:88:54: b9:a9:d8:43:d4:db:2f:a5:fc:c1:e4:af:40:3d:71: 11:81:23:ac:16:9a:8f:67:a7:3c:e8:f5:fa:74:7b: 49:9c:6a:32:24:71:0e:8c:c0:cc:03:f9:6e:bf:f3: b5:ff:28:bd:a2:d8:c4:1f:5b:56:26:82:26:ec:c6: 60:fa:5e:d9:87:4a:be:ae:e9:41:bc:3f:15:db:44: 42:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D9:08:D3:D2:CC:8A:57:BC:E4:DE:77:3B:BF:B8:6B:B3:96:14:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8398280-5017-3fd7-aa3c-e2b9f27f35e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:d6:be:5a:f9:42:50:74:d7:cb:d0:a2:c9:e7:b3:d2:83:ac: 92:96:23:31:0e:e9:b5:17:2b:ce:35:af:2c:f0:ea:73:e1:6c: c4:86:1f:d4:af:09:67:74:42:b0:81:f3:9b:4c:06:08:54:04: 42:14:e8:54:bf:38:67:0e:11:d4:23:54:e3:74:43:c8:3b:f4: 85:1f:2d:66:d6:f1:7d:c7:28:df:6f:ac:8d:55:97:4f:89:1f: 20:06:fe:51:d1:09:b1:7d:33:83:41:71:b8:8c:f1:19:8f:f1: ce:a6:42:6a:a3:ff:e2:43:8a:fa:a5:a7:b1:6b:70:22:a6:40: 83:28:3c:99:23:b7:a5:79:e6:21:d5:ed:2d:4b:9e:0e:c5:6f: df:e5:75:49:37:fc:70:fd:a7:80:37:27:4d:5f:f9:92:90:29: 2b:d0:7e:04:e2:06:0d:ec:e6:71:22:c1:15:21:76:3b:05:b0: f3:b9:ec:ff:b1:b3:36:23:cb:ac:54:cf:cf:0f:ca:6c:9f:c4: 0a:1e:79:fa:3f:05:6f:f9:83:32:4e:76:9d:37:66:34:1e:81: dc:7b:1b:84:76:5e:bc:a8:73:1f:6c:ba:79:06:c9:54:b4:48: 3f:17:80:d1:9d:e3:4f:b9:2e:1c:a5:d6:a9:4f:c4:90:1c:c9: 19:d8:48:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoPSdlfGBg16NSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk OGQyYTUyYjAtYmVjMS00ZjAxLWFjZGItYTNkMjRkMGRiYWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iZIi7YxaRmQpCX7Ak17I/aMjhwWh6kUFvUk oOnoMPBbkva3WmmpeuYKTScK0Pg56CCZMt8Jp8SRCLzCfbu3/OLjyZqdlReeeJOf w3Pw4NLVjzfaaVuMvfwo6SMhJxcX3lw6XB8EsPAp7+jj3YwVIlyw6OaojXmH0pyj nLFk741cSKWNv71BQQOnuuqCLaoGC1YyyLEUHct2e1ZLx2mnSO2w4uZStBsenOKc nOA/SlV1iFS5qdhD1NsvpfzB5K9APXERgSOsFpqPZ6c86PX6dHtJnGoyJHEOjMDM A/luv/O1/yi9otjEH1tWJoIm7MZg+l7Zh0q+rulBvD8V20RCeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3ZCNPSzIpXvOTedzu/uGuzlhRuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTgzOTgyODAtNTAxNy0z ZmQ3LWFhM2MtZTJiOWYyN2YzNWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbryMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvWvlr5QlB018vQosnns9KDrJKWIzEO6bUXK841ryzw6nPhbMSGH9Sv CWd0QrCB85tMBghUBEIU6FS/OGcOEdQjVON0Q8g79IUfLWbW8X3HKN9vrI1Vl0+J HyAG/lHRCbF9M4NBcbiM8RmP8c6mQmqj/+JDivqlp7FrcCKmQIMoPJkjt6V55iHV 7S1Lng7Fb9/ldUk3/HD9p4A3J01f+ZKQKSvQfgTiBg3s5nEiwRUhdjsFsPO57P+x szYjy6xUz88PymyfxAoeefo/BW/5gzJOdp03ZjQegdx7G4R2Xryocx9sunkGyVS0 SD8XgNGd40+5Lhyl1qlPxJAcyRnYSFA= -----END CERTIFICATE-----Generated at Mon Aug 4 19:07:28 2025 by rpki-client