$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95c7afd7-ac0c-3c4a-b347-7b43c8a8db5f.roa File: 95c7afd7-ac0c-3c4a-b347-7b43c8a8db5f.roa (raw, json) Hash identifier: HKFnpsQhI3bvVd5Mikxt1GZAMeX6S32lCfJIqbNWVl8= Subject key identifier: EE:95:E5:48:19:E8:D7:F7:19:04:05:16:E2:36:66:A8:06:8A:5B:54 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD668D6576BF132FEDDF1000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95c7afd7-ac0c-3c4a-b347-7b43c8a8db5f.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 173.189.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:8d:65:76:bf:13:2f:ed:df:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=3a9f9c50-dd03-41d5-9825-19f6766c9921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6d:b8:0f:c0:49:e2:17:ed:b8:f0:e8:1d:12: 71:86:4e:3c:63:9c:97:04:9f:d9:61:49:bd:5b:4f: c8:97:08:f7:3e:26:21:16:0e:7d:e5:ed:9a:47:fb: 9f:49:8d:91:3b:6e:06:6d:8d:96:ca:0f:5f:7f:76: fa:3e:0d:2b:9c:a4:5d:7f:b1:d5:73:45:43:69:e3: f6:b5:7a:a0:b8:21:92:9d:b1:38:7f:d8:54:47:d0: 93:69:cb:39:97:8f:64:5b:a7:22:ad:22:f5:d1:16: b6:9f:ce:fc:25:c4:5f:d6:e9:52:f4:65:97:dc:26: 62:81:37:f9:99:62:28:6c:43:62:87:7b:68:f0:fe: b5:ec:22:5a:08:ad:b8:18:ab:86:eb:87:1d:43:49: 2f:6c:b4:43:db:a1:c3:ca:bf:6e:ab:31:ea:7c:b4: 79:79:3c:ec:88:80:2d:28:5b:02:ad:7a:07:f2:34: 12:a1:70:9c:a4:7d:f1:80:5c:4b:c2:22:98:b3:07: a3:7c:9c:5b:85:40:54:3b:e5:c4:7a:82:00:80:36: 6d:d9:bf:4c:81:52:78:f5:85:ab:28:8b:75:6b:ac: 6a:bd:d5:3d:bd:33:06:2a:09:94:17:6f:4e:35:ba: 7b:fa:e1:b0:21:c1:41:d9:ae:b6:66:68:0d:36:2a: 7b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:95:E5:48:19:E8:D7:F7:19:04:05:16:E2:36:66:A8:06:8A:5B:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95c7afd7-ac0c-3c4a-b347-7b43c8a8db5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:ee:53:3e:62:14:2b:6b:a5:b1:22:3b:4d:09:92:c2:c1:4f: 93:2f:ef:f5:d5:56:20:a9:99:2e:0e:16:c1:6e:8f:49:38:d8: 0b:df:2d:83:bd:6b:ff:9b:00:c2:a4:61:d5:cb:af:95:e5:84: 39:81:1a:57:e8:7a:55:d4:15:32:43:78:1f:b4:e9:ac:e2:15: f9:23:1b:ae:c6:f9:6e:d6:fc:34:e5:5e:40:53:58:ea:a2:ae: fe:ef:eb:e9:94:5c:95:e0:75:bc:1d:bf:20:3e:57:3f:9d:2a: ba:d9:05:cf:d0:82:0f:01:4f:ee:8f:96:e1:28:e5:07:ab:52: 30:84:cc:9e:e9:9e:de:32:5a:39:ab:27:81:3b:44:ff:03:3f: e8:9d:3d:2f:a9:49:e5:a2:84:29:cc:14:ff:5a:61:ff:e6:cb: 8d:77:c8:70:8a:43:de:8b:c6:8c:db:0e:cc:13:59:0d:79:d9: 85:00:28:fa:d6:ef:69:0a:01:7e:9b:d2:88:b3:30:c7:bb:96: 8c:9d:e9:51:3d:61:d0:85:84:8a:18:08:0d:4e:52:f6:0f:45: 96:59:90:d7:3b:b8:da:33:8e:e0:b7:9c:54:b7:58:a5:be:03: 95:3a:c2:44:cb:35:9a:2b:1c:4e:1a:e2:96:68:42:1e:8f:1b: 47:51:de:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZo1ldr8TL+3fEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk M2E5ZjljNTAtZGQwMy00MWQ1LTk4MjUtMTlmNjc2NmM5OTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW24D8BJ4hftuPDoHRJxhk48Y5yXBJ/ZYUm9 W0/Ilwj3PiYhFg595e2aR/ufSY2RO24GbY2Wyg9ff3b6Pg0rnKRdf7HVc0VDaeP2 tXqguCGSnbE4f9hUR9CTacs5l49kW6cirSL10Ra2n878JcRf1ulS9GWX3CZigTf5 mWIobENih3to8P617CJaCK24GKuG64cdQ0kvbLRD26HDyr9uqzHqfLR5eTzsiIAt KFsCrXoH8jQSoXCcpH3xgFxLwiKYswejfJxbhUBUO+XEeoIAgDZt2b9MgVJ49YWr KIt1a6xqvdU9vTMGKgmUF29ONbp7+uGwIcFB2a62ZmgNNip7jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6V5UgZ6Nf3GQQFFuI2ZqgGiltUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTVjN2FmZDctYWMwYy0z YzRhLWIzNDctN2I0M2M4YThkYjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb1IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLuUz5iFCtrpbEiO00JksLBT5Mv7/XVViCpmS4OFsFuj0k42AvfLYO9 a/+bAMKkYdXLr5XlhDmBGlfoelXUFTJDeB+06aziFfkjG67G+W7W/DTlXkBTWOqi rv7v6+mUXJXgdbwdvyA+Vz+dKrrZBc/Qgg8BT+6PluEo5QerUjCEzJ7pnt4yWjmr J4E7RP8DP+idPS+pSeWihCnMFP9aYf/my413yHCKQ96LxozbDswTWQ152YUAKPrW 72kKAX6b0oizMMe7loyd6VE9YdCFhIoYCA1OUvYPRZZZkNc7uNozjuC3nFS3WKW+ A5U6wkTLNZorHE4a4pZoQh6PG0dR3lg= -----END CERTIFICATE-----Generated at Sat Aug 23 15:45:04 2025 by rpki-client