$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c421723e-d17f-3372-b3af-869e79a27fb6.roa File: c421723e-d17f-3372-b3af-869e79a27fb6.roa (raw, json) Hash identifier: +13qbrnayQr14yT/TvwMwFnlFDHCCubaexfBJnYeHz4= Subject key identifier: 93:7A:8B:C2:B2:A6:8A:8A:6C:57:9C:7C:25:5A:55:F7:4E:3E:76:96 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A9E964750944A2107C9815D30 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c421723e-d17f-3372-b3af-869e79a27fb6.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 173.187.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:47:50:94:4a:21:07:c9:81:5d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=114b1ef1-1b06-4f15-ae80-108306b7df86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fb:0d:a8:dc:d7:c1:80:18:9b:54:89:92:3c: f5:bb:bb:5f:6d:39:b5:d6:39:90:bf:70:58:c9:de: b5:e3:57:bb:8f:64:31:d3:7e:f5:38:24:ee:c7:56: 60:58:2c:ff:c4:07:04:2d:7a:86:e6:4c:ce:3d:62: 26:4a:9a:11:fd:66:8e:d3:60:6d:5b:6f:0d:db:49: f3:bf:f1:81:57:b7:d3:c0:7f:96:f3:b3:c7:58:1b: c5:b2:ce:4c:50:1f:40:f6:80:b5:25:3d:62:74:ba: 2b:35:c1:f3:c6:75:eb:03:fc:ed:c4:c2:64:a4:bd: c5:cf:8c:2d:c8:27:8b:40:83:26:54:73:f2:1a:12: 78:ea:b6:bf:1f:3c:e2:f3:d9:7c:47:65:ca:c3:0f: 2b:a1:b6:c6:8d:95:4c:2e:22:43:d0:0b:6e:cc:f8: 0d:6d:98:5f:73:c9:b1:fa:2f:22:7e:a1:51:d8:1d: 8c:07:a8:d0:8f:5a:d8:9f:bf:d0:23:22:22:95:a7: 65:90:7e:ed:09:51:e7:74:2a:90:52:b0:2c:aa:2b: b2:51:ba:76:21:b4:6d:f6:6d:37:5b:df:a4:f5:a3: a3:f8:9e:a8:93:4c:d5:14:6e:db:09:1b:df:08:ba: 94:a2:16:65:a7:4e:d1:4b:aa:d1:b7:d2:d0:34:3b: 15:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7A:8B:C2:B2:A6:8A:8A:6C:57:9C:7C:25:5A:55:F7:4E:3E:76:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c421723e-d17f-3372-b3af-869e79a27fb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:c8:bf:b0:b1:f6:5b:e0:67:36:8c:75:10:3e:43:a8:89:07: 21:89:fa:15:37:82:da:63:ba:76:28:ac:0e:bf:3c:55:46:d7: c8:3c:53:6c:5d:8d:ca:ac:97:c9:b3:c5:b7:cd:f1:b4:cf:25: ca:1e:b8:d5:d8:31:70:67:17:9a:63:d5:13:47:63:b2:31:21: 92:56:86:94:57:bf:46:3a:e5:e0:5d:23:ee:b5:19:04:03:44: 5c:bd:16:21:d3:f9:62:84:fb:c3:08:bc:a4:9d:e3:a5:18:61: 6e:fd:40:47:68:36:13:0e:1d:b8:30:0c:98:cc:eb:b0:57:af: 2f:b3:9d:fe:68:7c:a9:4c:7a:ba:8a:ed:aa:45:9f:60:a3:6c: d9:66:93:a8:da:b9:7a:ed:83:70:5a:b0:ed:22:71:86:b6:71: 41:4c:db:ee:0e:05:82:7d:73:14:29:99:36:5c:fb:64:d2:e3: c4:6a:4e:13:ec:21:04:e9:89:1d:6b:d9:10:4c:f8:65:7d:01: 38:c9:af:a0:60:89:ba:81:7c:d8:c8:15:4f:0d:b4:5a:fe:8e: 1d:2b:f0:4a:c3:cc:b4:96:0e:b0:76:25:c1:40:89:6a:ae:3f: e8:13:c7:63:2c:92:79:1d:d7:a5:10:1a:0f:0b:1b:9b:25:ad: 5b:77:dd:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelkdQlEohB8mBXTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MTE0YjFlZjEtMWIwNi00ZjE1LWFlODAtMTA4MzA2YjdkZjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvsNqNzXwYAYm1SJkjz1u7tfbTm11jmQv3BY yd6141e7j2Qx0371OCTux1ZgWCz/xAcELXqG5kzOPWImSpoR/WaO02BtW28N20nz v/GBV7fTwH+W87PHWBvFss5MUB9A9oC1JT1idLorNcHzxnXrA/ztxMJkpL3Fz4wt yCeLQIMmVHPyGhJ46ra/Hzzi89l8R2XKww8robbGjZVMLiJD0AtuzPgNbZhfc8mx +i8ifqFR2B2MB6jQj1rYn7/QIyIiladlkH7tCVHndCqQUrAsqiuyUbp2IbRt9m03 W9+k9aOj+J6ok0zVFG7bCRvfCLqUohZlp07RS6rRt9LQNDsVZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJN6i8KypoqKbFecfCVaVfdOPnaWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzQyMTcyM2UtZDE3Zi0z MzcyLWIzYWYtODY5ZTc5YTI3ZmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbvFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDIv7Cx9lvgZzaMdRA+Q6iJByGJ+hU3gtpjunYorA6/PFVG18g8U2xd jcqsl8mzxbfN8bTPJcoeuNXYMXBnF5pj1RNHY7IxIZJWhpRXv0Y65eBdI+61GQQD RFy9FiHT+WKE+8MIvKSd46UYYW79QEdoNhMOHbgwDJjM67BXry+znf5ofKlMerqK 7apFn2CjbNlmk6jauXrtg3BasO0icYa2cUFM2+4OBYJ9cxQpmTZc+2TS48RqThPs IQTpiR1r2RBM+GV9ATjJr6BgibqBfNjIFU8NtFr+jh0r8ErDzLSWDrB2JcFAiWqu P+gTx2Msknkd16UQGg8LG5slrVt33ZM= -----END CERTIFICATE-----Generated at Sat Aug 23 13:19:52 2025 by rpki-client