$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a5e724c-cda9-381f-a608-217725a36708.roa File: 3a5e724c-cda9-381f-a608-217725a36708.roa (raw, json) Hash identifier: ck+Pnk9CX3iKttkFTmQXs4RrXpTnTJ48qkxtdwt6LSM= Subject key identifier: F7:97:F2:57:A6:72:65:5D:38:BE:76:2F:C4:46:BA:6A:60:EC:7A:93 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AE9F67E504D676E3E8E3EF340 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a5e724c-cda9-381f-a608-217725a36708.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 7029 IP address blocks: 173.185.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:7e:50:4d:67:6e:3e:8e:3e:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=8b207968-2750-450e-8027-43200a29a656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a4:c1:62:aa:36:d4:e4:10:68:28:95:4d:d3: 79:a0:e6:f9:b9:0f:86:fc:4d:97:2b:b1:88:08:3b: e3:b1:1a:9b:c8:06:6d:10:2f:7c:5d:ea:9a:31:0f: a4:ac:bf:4b:11:78:a0:e1:5a:29:f0:4a:d8:93:d3: 6d:26:d2:88:81:a5:8e:a3:da:6b:d0:c9:2b:0b:38: 2f:b1:ad:13:1c:2a:fb:a8:10:85:e6:c2:84:9f:61: 90:b4:95:a6:c2:b6:ac:25:59:53:6d:88:bf:75:5d: 84:70:73:1c:39:03:8f:df:97:4f:be:f8:ac:0e:4e: f9:8f:a8:ce:65:3f:8a:57:1f:43:51:90:15:af:56: 71:02:8f:19:3a:4d:69:2e:04:1a:08:81:1a:57:60: 34:3a:98:ab:d5:61:88:1b:08:a2:1e:44:c9:8a:fe: 35:5d:a3:a3:a6:de:77:2b:46:31:fb:83:99:17:e0: dd:86:36:49:79:f2:cc:f8:5e:9e:d8:aa:76:c3:bc: 91:5a:a9:b6:81:c0:f4:cf:e4:66:52:bb:ab:83:1c: ae:1e:39:80:b3:93:1c:3c:a7:82:19:1e:c8:a3:c2: 16:a4:41:20:ad:4f:ea:5b:67:15:33:b8:c9:26:fc: 57:17:23:ef:32:ac:80:ec:91:27:7e:1c:2e:9d:e4: e5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:97:F2:57:A6:72:65:5D:38:BE:76:2F:C4:46:BA:6A:60:EC:7A:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a5e724c-cda9-381f-a608-217725a36708.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:16:e5:86:93:ec:3e:60:41:07:e9:f1:50:3d:a4:4d:97:d3: bd:4e:ef:60:09:5d:9a:3d:16:38:63:81:d4:ad:e0:e8:1c:4e: 4a:6b:57:b1:32:11:62:94:31:92:a0:c5:86:f7:e5:df:03:e0: 40:0c:7a:b9:97:20:16:f6:92:0e:cc:b5:07:ea:55:31:10:4b: 13:07:d3:31:a2:24:76:c3:e0:34:d0:d5:e0:d4:b2:f9:f0:19: 5b:c2:df:de:ef:ae:ba:c8:e5:53:06:c2:19:c0:6e:cb:dd:b9: d6:4d:54:ad:bc:49:0a:34:6d:1c:71:80:0c:ee:8d:f3:83:b4: f4:11:90:3a:f2:96:f8:b9:41:a1:97:83:3f:ff:6a:58:ff:9e: 96:96:3f:29:aa:19:8d:6a:84:25:03:3d:0e:2d:9e:ed:7c:df: 9a:c3:44:d8:36:fe:1c:c2:96:ec:dd:eb:99:2c:42:c4:93:32: 0a:0d:f3:50:77:8b:1d:82:1a:88:fe:4f:21:e8:ca:27:5f:8e: 71:13:bc:c2:77:4a:f6:66:e3:aa:e5:cd:af:40:a0:a4:0b:b7: 8f:d8:30:7b:38:73:e2:38:11:fe:54:44:5d:65:99:bb:56:38: fe:18:6f:39:95:37:cf:93:d6:07:8f:0c:42:0a:f1:26:58:7d: 98:e8:8c:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9n5QTWduPo4+80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk OGIyMDc5NjgtMjc1MC00NTBlLTgwMjctNDMyMDBhMjlhNjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqTBYqo21OQQaCiVTdN5oOb5uQ+G/E2XK7GI CDvjsRqbyAZtEC98XeqaMQ+krL9LEXig4Vop8ErYk9NtJtKIgaWOo9pr0MkrCzgv sa0THCr7qBCF5sKEn2GQtJWmwrasJVlTbYi/dV2EcHMcOQOP35dPvvisDk75j6jO ZT+KVx9DUZAVr1ZxAo8ZOk1pLgQaCIEaV2A0Opir1WGIGwiiHkTJiv41XaOjpt53 K0Yx+4OZF+DdhjZJefLM+F6e2Kp2w7yRWqm2gcD0z+RmUrurgxyuHjmAs5McPKeC GR7Io8IWpEEgrU/qW2cVM7jJJvxXFyPvMqyA7JEnfhwuneTltwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeX8lemcmVdOL52L8RGumpg7HqTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2E1ZTcyNGMtY2RhOS0z ODFmLWE2MDgtMjE3NzI1YTM2NzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbmRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUW5YaT7D5gQQfp8VA9pE2X071O72AJXZo9FjhjgdSt4OgcTkprV7Ey EWKUMZKgxYb35d8D4EAMermXIBb2kg7MtQfqVTEQSxMH0zGiJHbD4DTQ1eDUsvnw GVvC397vrrrI5VMGwhnAbsvdudZNVK28SQo0bRxxgAzujfODtPQRkDrylvi5QaGX gz//alj/npaWPymqGY1qhCUDPQ4tnu1835rDRNg2/hzCluzd65ksQsSTMgoN81B3 ix2CGoj+TyHoyidfjnETvMJ3SvZm46rlza9AoKQLt4/YMHs4c+I4Ef5URF1lmbtW OP4YbzmVN8+T1gePDEIK8SZYfZjojNA= -----END CERTIFICATE-----Generated at Sat Aug 23 19:46:10 2025 by rpki-client