$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bc1690c8-5a78-36be-ba30-b2b3574ae3c4.roa File: bc1690c8-5a78-36be-ba30-b2b3574ae3c4.roa (raw, json) Hash identifier: YTfeXVYqcFKe3syCi4BCCPMMDjz+Ti7V49IzpPoCY/I= Subject key identifier: D7:7A:44:7C:6A:33:4B:E8:C7:F5:A7:F7:34:1F:CA:AC:ED:EB:E6:53 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B8EACC0B21766541CCB75EE00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bc1690c8-5a78-36be-ba30-b2b3574ae3c4.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 7029 IP address blocks: 173.187.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:c0:b2:17:66:54:1c:cb:75:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=01380feb-f24f-4dc2-a941-4dad0d3f8b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a7:75:96:a3:4a:02:52:96:98:7d:b8:08:36: b3:e4:88:4a:32:54:da:83:ac:2a:e3:d2:5c:f5:c7: 49:6b:3a:02:7b:b9:33:03:97:02:a3:0c:a8:e4:54: ba:36:1a:c7:48:3d:44:0b:bd:71:f8:a3:49:ec:3e: 18:be:34:89:c0:f2:f0:8b:bd:a3:67:ce:dd:5e:9a: 0a:b9:bf:b3:02:82:78:10:00:75:9b:a1:69:13:d0: 0f:6e:3e:81:fb:aa:93:92:53:ab:f3:12:ac:5e:5e: ef:e6:c0:56:6c:5a:7f:18:93:7b:37:f2:e2:39:6d: 37:8d:1d:bc:19:1e:1b:c4:2f:7f:2e:ee:93:bc:29: 37:bd:a3:3a:8d:42:7a:be:ba:67:9c:3c:08:aa:e4: 94:19:ea:c3:30:71:0d:d3:cb:2f:7a:b0:5f:07:58: f1:c7:d7:33:16:db:42:8d:c0:60:f3:c0:df:ac:6d: 8a:25:e2:d2:22:f2:b0:89:df:da:1b:24:9b:79:21: 01:a7:15:c6:b9:8f:88:6e:70:5d:18:79:e8:64:a5: fd:29:ed:37:fa:e8:95:d8:a6:a7:07:04:39:d3:a7: 7e:92:ca:b1:51:f5:52:b6:1e:b5:37:41:9d:c4:b4: 04:b4:06:c6:db:e1:f0:db:75:8c:2c:67:24:d4:d5: 07:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7A:44:7C:6A:33:4B:E8:C7:F5:A7:F7:34:1F:CA:AC:ED:EB:E6:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bc1690c8-5a78-36be-ba30-b2b3574ae3c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:71:a6:bc:b7:36:12:1f:db:24:49:2f:e2:ee:96:b1:37:39: 1d:b8:5f:59:45:83:e4:02:bc:67:e1:c6:b8:63:58:68:32:0a: 1f:38:e5:b9:db:ce:45:c5:89:cf:f4:1d:60:a8:83:48:92:9d: d5:c1:3d:1a:4f:bd:e5:db:90:ba:4d:e7:b9:40:55:27:22:5a: 36:84:6f:f0:1b:e2:f7:4e:a4:c7:3f:5e:5e:10:4b:b6:44:c3: 99:33:87:2f:ba:ac:50:85:3a:0d:da:81:b7:0a:ff:55:3a:20: a0:90:c8:ba:f1:04:b5:6b:03:b0:55:d5:ac:be:ff:e4:3b:ba: 4c:b6:dd:f9:2a:e4:e6:54:17:34:96:5b:22:ee:55:b2:a9:4d: 05:57:9c:f4:ad:f3:98:b7:96:36:e5:23:6b:d5:77:45:4d:93: 42:df:32:bf:07:99:8e:84:75:c5:8a:22:c3:ee:16:64:b8:ec: 16:f1:46:06:54:19:c4:1f:9f:ed:9d:31:b2:b4:c2:1d:70:56: 49:bc:cd:5e:b8:6b:31:2e:29:99:8f:29:a5:bd:78:35:66:8d: 8b:b7:80:c7:b3:8c:59:83:1c:c5:00:d0:ec:3f:ac:a7:ce:4a: 8e:05:93:5a:87:a7:de:ca:aa:a7:fa:eb:a0:d4:89:38:3a:60: 51:0f:7b:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrMCyF2ZUHMt17gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MDEzODBmZWItZjI0Zi00ZGMyLWE5NDEtNGRhZDBkM2Y4YjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgad1lqNKAlKWmH24CDaz5IhKMlTag6wq49Jc 9cdJazoCe7kzA5cCowyo5FS6NhrHSD1EC71x+KNJ7D4YvjSJwPLwi72jZ87dXpoK ub+zAoJ4EAB1m6FpE9APbj6B+6qTklOr8xKsXl7v5sBWbFp/GJN7N/LiOW03jR28 GR4bxC9/Lu6TvCk3vaM6jUJ6vrpnnDwIquSUGerDMHEN08sverBfB1jxx9czFttC jcBg88DfrG2KJeLSIvKwid/aGySbeSEBpxXGuY+IbnBdGHnoZKX9Ke03+uiV2Kan BwQ506d+ksqxUfVSth61N0GdxLQEtAbG2+Hw23WMLGck1NUHZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNd6RHxqM0vox/Wn9zQfyqzt6+ZTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmMxNjkwYzgtNWE3OC0z NmJlLWJhMzAtYjJiMzU3NGFlM2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbt2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJxpry3NhIf2yRJL+LulrE3OR24X1lFg+QCvGfhxrhjWGgyCh845bnb zkXFic/0HWCog0iSndXBPRpPveXbkLpN57lAVSciWjaEb/Ab4vdOpMc/Xl4QS7ZE w5kzhy+6rFCFOg3agbcK/1U6IKCQyLrxBLVrA7BV1ay+/+Q7uky23fkq5OZUFzSW WyLuVbKpTQVXnPSt85i3ljblI2vVd0VNk0LfMr8HmY6EdcWKIsPuFmS47BbxRgZU GcQfn+2dMbK0wh1wVkm8zV64azEuKZmPKaW9eDVmjYu3gMezjFmDHMUA0Ow/rKfO So4Fk1qHp97Kqqf666DUiTg6YFEPe2o= -----END CERTIFICATE-----Generated at Mon Oct 20 10:02:59 2025 by rpki-client