$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/606c2da4-7307-302e-a94b-c434c4d0bc12.roa File: 606c2da4-7307-302e-a94b-c434c4d0bc12.roa (raw, json) Hash identifier: vAFS/b/uX4Fr8bUuZXNGzD1aBbJflR1mBbKrh0Nxw78= Subject key identifier: B8:99:6B:04:48:3F:A4:92:E9:15:81:B6:27:79:89:EE:23:83:E4:FE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3821AA8B60279EAF539D3D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/606c2da4-7307-302e-a94b-c434c4d0bc12.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 173.187.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:aa:8b:60:27:9e:af:53:9d:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=631301a7-a7bc-4011-b226-d367d19d1edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:09:28:9f:26:97:76:82:ad:b3:98:ea:b2:97: 5a:ae:66:53:f2:f7:42:bd:7e:a1:c8:52:4b:a9:15: 1e:e8:81:81:b5:c2:77:3a:16:a4:df:70:b9:f5:0c: ca:99:ee:03:79:fe:01:4e:8e:26:e9:3c:30:b5:82: 7c:81:11:14:6c:9c:80:c7:bf:82:37:aa:89:52:2c: e4:4f:3a:c0:14:f3:a4:b7:8e:c6:0b:e0:cf:91:9a: 69:97:61:d1:54:b0:1b:fe:07:4d:06:25:34:d1:20: 8d:1e:ac:1b:1c:fb:2a:0c:1a:ba:6e:bf:b7:73:8d: 8b:d4:65:56:f0:2f:3a:09:ff:ad:fb:e9:64:bf:b2: 2e:66:94:6e:9f:dc:fe:29:0b:bb:06:a2:7a:96:19: 25:d2:b7:e4:17:dd:b6:38:1c:a3:6c:98:8f:8a:8f: 06:3b:82:c7:27:b1:bb:62:fc:78:1b:32:79:57:93: 83:3b:2f:fd:cb:e0:b7:0b:ad:51:5e:36:bb:8f:90: 2b:90:83:ef:47:49:a6:c8:64:a0:4f:d3:f5:17:fb: 91:c5:54:05:f3:2c:3e:4a:a2:89:98:ec:e2:ff:fa: 2d:88:a2:37:b9:6b:ed:21:5b:82:8b:56:34:71:5f: 16:6f:6b:a4:a8:b2:c3:99:70:af:c3:b5:5b:14:19: 59:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:99:6B:04:48:3F:A4:92:E9:15:81:B6:27:79:89:EE:23:83:E4:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/606c2da4-7307-302e-a94b-c434c4d0bc12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:15:7b:f4:bf:ab:18:25:fb:90:fb:27:49:67:02:5d:e1:50: bf:c9:9a:66:af:67:e6:c9:dd:37:df:ed:87:71:4c:f5:0c:2c: dd:18:7f:77:3f:a3:05:8e:c8:0e:6e:0b:c3:38:a1:52:15:d0: c5:6c:3e:71:72:cd:1d:14:e1:f2:71:30:5c:72:2a:cb:bc:6f: ab:91:65:e0:0a:82:f4:8e:32:22:b4:52:22:c2:71:0b:23:7a: 7b:90:f5:d1:3e:bf:61:f0:85:71:6e:cc:61:f0:4a:60:80:20: 99:11:21:51:c9:6c:b4:2c:bf:6b:27:2c:bc:32:57:77:ee:f9: c5:39:f3:5e:41:1f:3b:7a:23:58:ab:11:d6:68:a9:3d:7a:ce: b2:97:41:3f:4e:a6:c7:ff:64:21:93:2c:21:da:6c:16:6e:98: 6b:ca:06:c9:25:c4:2d:b2:ba:0e:fd:63:3f:2f:47:4e:96:d4: 8e:91:f6:6c:eb:dc:22:8a:fb:15:ba:53:b8:8b:ac:d6:46:b7: 43:d0:c6:fb:07:e2:58:9b:9c:27:b0:fd:f3:87:07:b1:d5:5b: 67:a4:73:bb:6e:45:89:2c:af:b6:90:6b:03:e6:ba:2e:b6:c0: 57:dd:35:ea:3d:0c:33:9f:44:3d:46:fe:8d:b4:30:59:14:10: e4:c4:27:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IaqLYCeer1OdPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk NjMxMzAxYTctYTdiYy00MDExLWIyMjYtZDM2N2QxOWQxZWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQkonyaXdoKts5jqspdarmZT8vdCvX6hyFJL qRUe6IGBtcJ3Ohak33C59QzKme4Def4BTo4m6TwwtYJ8gREUbJyAx7+CN6qJUizk TzrAFPOkt47GC+DPkZppl2HRVLAb/gdNBiU00SCNHqwbHPsqDBq6br+3c42L1GVW 8C86Cf+t++lkv7IuZpRun9z+KQu7BqJ6lhkl0rfkF922OByjbJiPio8GO4LHJ7G7 Yvx4GzJ5V5ODOy/9y+C3C61RXja7j5ArkIPvR0mmyGSgT9P1F/uRxVQF8yw+SqKJ mOzi//otiKI3uWvtIVuCi1Y0cV8Wb2ukqLLDmXCvw7VbFBlZAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiZawRIP6SS6RWBtid5ie4jg+T+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjA2YzJkYTQtNzMwNy0z MDJlLWE5NGItYzQzNGM0ZDBiYzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbuEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUVe/S/qxgl+5D7J0lnAl3hUL/JmmavZ+bJ3Tff7YdxTPUMLN0Yf3c/ owWOyA5uC8M4oVIV0MVsPnFyzR0U4fJxMFxyKsu8b6uRZeAKgvSOMiK0UiLCcQsj enuQ9dE+v2HwhXFuzGHwSmCAIJkRIVHJbLQsv2snLLwyV3fu+cU5815BHzt6I1ir EdZoqT16zrKXQT9Opsf/ZCGTLCHabBZumGvKBsklxC2yug79Yz8vR06W1I6R9mzr 3CKK+xW6U7iLrNZGt0PQxvsH4libnCew/fOHB7HVW2ekc7tuRYksr7aQawPmui62 wFfdNeo9DDOfRD1G/o20MFkUEOTEJz0= -----END CERTIFICATE-----Generated at Mon Oct 20 06:45:07 2025 by rpki-client