$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fd06b437-700f-3b72-a4ee-8555c8263896.roa File: fd06b437-700f-3b72-a4ee-8555c8263896.roa (raw, json) Hash identifier: ac+OCALtpff77plyblCH/wY6goT+VLQGpbMTMGKj9bw= Subject key identifier: 46:A3:02:2B:48:5D:88:69:7C:9E:B7:AD:06:DD:26:56:D6:D2:56:3C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB38629EFD99B75D91158D2A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fd06b437-700f-3b72-a4ee-8555c8263896.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 7029 IP address blocks: 173.184.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:29:ef:d9:9b:75:d9:11:58:d2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=2854dffc-ceea-4605-8a4f-dd6ae5c2ea72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0a:87:df:90:29:33:45:ab:4d:71:df:6f:ba: cd:13:11:7e:57:45:f5:2a:b2:48:9f:7f:37:be:0d: 18:e6:10:78:9b:5d:62:24:64:ef:dc:a3:5e:a6:c6: 90:d1:03:6e:80:93:ca:04:5f:88:b2:27:d3:85:d9: 48:75:d6:89:42:51:01:7e:94:4f:09:aa:9b:7d:37: 9c:9e:f8:49:f5:c7:6a:47:03:04:6c:a2:a4:e5:12: 3a:0a:72:0b:84:62:cb:9f:7d:f8:c7:50:35:89:6f: 4a:60:22:73:72:f9:15:ed:4d:ed:83:bb:e6:05:7a: b1:7f:59:8b:c7:2f:8a:96:08:71:27:47:1b:ed:d7: 06:72:79:da:39:03:91:ae:ff:58:f6:ba:c0:df:93: 35:99:d6:3f:2e:99:8f:57:c4:9a:53:79:1f:c2:fd: 77:63:96:d5:67:e1:20:e0:20:56:5a:1e:be:cd:19: 9b:4a:97:db:7e:23:e6:56:ab:53:f6:6a:aa:2b:7f: 25:6b:56:35:4c:f7:bc:9a:89:09:5b:9c:38:93:c1: 68:21:96:53:ae:b2:1f:bc:3c:77:da:03:d5:cd:92: 19:97:3b:a5:04:27:e5:59:e6:02:60:0e:5f:48:c6: 95:d2:23:5c:dd:e6:d1:ea:e5:4a:0b:4b:57:ee:1c: f8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A3:02:2B:48:5D:88:69:7C:9E:B7:AD:06:DD:26:56:D6:D2:56:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fd06b437-700f-3b72-a4ee-8555c8263896.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.184.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:0e:46:f2:a6:60:c8:9f:98:f5:91:26:dd:cc:85:49:bf:0e: 43:0b:9a:8e:8f:da:e9:4d:f1:59:35:a4:ea:ae:6c:ef:6a:1e: c5:a6:a7:1d:2f:3f:ed:8f:5c:36:64:44:9b:8b:af:cd:83:88: 8a:66:f3:55:29:05:b3:c5:96:a6:37:b8:95:7b:ee:bb:4f:c9: 02:32:9d:52:25:3b:35:cf:a8:c4:e7:94:0b:31:31:35:7b:db: c3:0d:fa:ad:80:3a:67:2a:47:9a:e5:20:e6:42:10:b2:69:be: 94:f1:46:47:94:98:da:29:c8:78:09:85:ca:83:86:32:bb:c2: 82:73:bc:3e:f4:3d:dc:6f:e8:5f:59:42:67:63:70:2e:21:85: 67:e3:f6:79:1b:df:d5:34:97:0e:50:b7:fb:0a:51:72:17:ea: 8c:15:b1:91:10:9c:71:c6:02:1f:b3:d1:fb:8f:3f:ca:68:b4: b8:09:d6:0b:9f:6e:8e:44:99:f2:37:78:1b:83:48:57:75:77: e6:95:bf:cc:6a:3f:c0:08:2b:fa:81:9f:b6:58:df:9d:5b:42: 5d:88:62:49:22:4c:2b:eb:77:08:f7:e0:61:db:62:d2:9a:de: 29:c3:1a:4b:ff:c2:de:7b:9e:1e:26:a5:3a:88:71:70:51:49: 6e:1f:c5:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhinv2Zt12RFY0qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk Mjg1NGRmZmMtY2VlYS00NjA1LThhNGYtZGQ2YWU1YzJlYTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwqH35ApM0WrTXHfb7rNExF+V0X1KrJIn383 vg0Y5hB4m11iJGTv3KNepsaQ0QNugJPKBF+IsifThdlIddaJQlEBfpRPCaqbfTec nvhJ9cdqRwMEbKKk5RI6CnILhGLLn334x1A1iW9KYCJzcvkV7U3tg7vmBXqxf1mL xy+KlghxJ0cb7dcGcnnaOQORrv9Y9rrA35M1mdY/LpmPV8SaU3kfwv13Y5bVZ+Eg 4CBWWh6+zRmbSpfbfiPmVqtT9mqqK38la1Y1TPe8mokJW5w4k8FoIZZTrrIfvDx3 2gPVzZIZlzulBCflWeYCYA5fSMaV0iNc3ebR6uVKC0tX7hz4WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEajAitIXYhpfJ63rQbdJlbW0lY8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmQwNmI0MzctNzAwZi0z YjcyLWE0ZWUtODU1NWM4MjYzODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUORvKmYMifmPWRJt3MhUm/DkMLmo6P2ulN8Vk1pOqubO9qHsWmpx0v P+2PXDZkRJuLr82DiIpm81UpBbPFlqY3uJV77rtPyQIynVIlOzXPqMTnlAsxMTV7 28MN+q2AOmcqR5rlIOZCELJpvpTxRkeUmNopyHgJhcqDhjK7woJzvD70Pdxv6F9Z QmdjcC4hhWfj9nkb39U0lw5Qt/sKUXIX6owVsZEQnHHGAh+z0fuPP8potLgJ1guf bo5EmfI3eBuDSFd1d+aVv8xqP8AIK/qBn7ZY351bQl2IYkkiTCvrdwj34GHbYtKa 3inDGkv/wt57nh4mpTqIcXBRSW4fxUk= -----END CERTIFICATE-----Generated at Wed Aug 6 04:01:57 2025 by rpki-client