$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa9d0677-2bb9-33c3-91fa-f121516798b7.roa File: fa9d0677-2bb9-33c3-91fa-f121516798b7.roa (raw, json) Hash identifier: iSd+G/WC47m1ObsMYFekFdP/AIBa0OSDNbhKWYSfKrA= Subject key identifier: B3:08:53:31:9A:36:CA:F2:B7:52:19:4D:86:8F:0B:89:47:DB:BF:E2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB38622E78E8804460E67AF00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa9d0677-2bb9-33c3-91fa-f121516798b7.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 7029 IP address blocks: 173.184.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:22:e7:8e:88:04:46:0e:67:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=9ea3d2fa-0184-4664-9c95-cc4f9648c7fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:86:2d:10:8e:39:50:a4:9f:4d:12:ad:d0:48: 0c:a6:83:ac:31:61:7e:09:07:38:c5:da:71:12:d1: 6e:c8:11:f0:63:10:a8:e7:de:64:d5:ff:e3:8e:36: bd:08:e1:50:77:ed:56:b2:e3:4e:ca:70:de:8d:05: 16:ef:10:2a:2b:ee:e8:9b:f5:9c:1a:64:fa:7c:f6: 81:d4:dd:40:b1:dc:ba:2f:f1:b8:05:94:38:60:ff: 40:fd:8a:66:a2:cc:36:60:95:83:ae:1c:00:5e:8a: 75:a5:04:5c:ee:ea:3e:c9:d2:3b:f4:47:7b:d8:4e: a7:91:2c:9f:5b:c1:2a:4d:27:0a:c3:44:01:f1:7b: 30:c3:15:17:1d:ee:eb:2e:28:92:92:3f:78:17:08: bb:87:c7:d2:c1:03:2a:e6:18:fb:d3:de:60:f3:e6: cb:62:83:9e:f7:44:7d:30:9c:34:81:ac:1f:34:67: 4d:15:85:49:4a:08:a9:60:30:0b:7f:18:f5:09:f7: f3:6e:e0:44:1b:bf:e0:cc:e6:aa:de:74:0e:16:c9: 01:9f:86:be:85:35:9a:e2:09:6e:67:e1:d4:32:28: 3c:48:10:7a:6d:20:d9:5e:30:d1:39:48:73:e5:87: 2c:4f:d3:ef:1e:1d:19:ed:cc:3c:7b:52:a0:03:f5: ce:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:08:53:31:9A:36:CA:F2:B7:52:19:4D:86:8F:0B:89:47:DB:BF:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa9d0677-2bb9-33c3-91fa-f121516798b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.184.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:ed:7c:17:3c:56:ea:75:ac:15:bc:ab:67:35:61:e2:8f:04: ac:11:c0:56:63:af:b1:ed:b7:9c:c2:88:5a:03:97:07:0f:28: cf:77:be:f7:60:e5:1b:97:bb:f0:26:da:ae:28:fa:70:ff:d1: dd:b6:04:b6:48:fd:c7:cc:b3:e2:5c:5e:a4:c7:cd:79:7b:2b: 13:4d:46:e7:85:22:20:8f:2e:4c:cd:58:2c:25:a7:0c:21:ce: 5b:26:7d:93:cf:01:4e:82:5f:ab:6b:cc:65:70:39:22:30:e6: 39:c1:a3:2e:99:0d:7c:c5:53:3b:bd:34:30:05:fb:6d:4f:52: d9:bc:6e:17:80:1f:8c:bc:56:7e:29:5e:83:93:14:96:42:36: 49:66:da:ed:7b:c0:7f:92:08:05:95:68:94:e3:98:5d:37:49: 1c:cf:42:fd:09:cd:17:7c:16:a6:01:1c:75:e1:c2:07:38:ee: db:15:da:35:79:a0:48:c7:23:e4:20:b6:a5:5d:e3:5a:11:12: 14:aa:94:e3:ea:2c:b4:76:ce:7a:ff:35:23:ac:d2:3e:5d:e6: b2:24:70:8f:c3:ec:3a:7a:53:f6:a2:fc:6d:a9:b0:d2:97:21: f7:49:8e:3d:f8:53:c0:28:3c:a0:6b:a4:74:08:85:31:f5:31: 2d:17:4e:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhiLnjogERg5nrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk OWVhM2QyZmEtMDE4NC00NjY0LTljOTUtY2M0Zjk2NDhjN2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIYtEI45UKSfTRKt0EgMpoOsMWF+CQc4xdpx EtFuyBHwYxCo595k1f/jjja9COFQd+1WsuNOynDejQUW7xAqK+7om/WcGmT6fPaB 1N1Asdy6L/G4BZQ4YP9A/Ypmosw2YJWDrhwAXop1pQRc7uo+ydI79Ed72E6nkSyf W8EqTScKw0QB8XswwxUXHe7rLiiSkj94Fwi7h8fSwQMq5hj7095g8+bLYoOe90R9 MJw0gawfNGdNFYVJSgipYDALfxj1CffzbuBEG7/gzOaq3nQOFskBn4a+hTWa4glu Z+HUMig8SBB6bSDZXjDROUhz5YcsT9PvHh0Z7cw8e1KgA/XObQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMIUzGaNsryt1IZTYaPC4lH27/iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmE5ZDA2NzctMmJiOS0z M2MzLTkxZmEtZjEyMTUxNjc5OGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXtfBc8Vup1rBW8q2c1YeKPBKwRwFZjr7Htt5zCiFoDlwcPKM93vvdg 5RuXu/Am2q4o+nD/0d22BLZI/cfMs+JcXqTHzXl7KxNNRueFIiCPLkzNWCwlpwwh zlsmfZPPAU6CX6trzGVwOSIw5jnBoy6ZDXzFUzu9NDAF+21PUtm8bheAH4y8Vn4p XoOTFJZCNklm2u17wH+SCAWVaJTjmF03SRzPQv0JzRd8FqYBHHXhwgc47tsV2jV5 oEjHI+QgtqVd41oREhSqlOPqLLR2znr/NSOs0j5d5rIkcI/D7Dp6U/ai/G2psNKX IfdJjj34U8AoPKBrpHQIhTH1MS0XTtM= -----END CERTIFICATE-----Generated at Wed Aug 6 05:52:46 2025 by rpki-client