$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f37991dd-d45f-30d0-8142-f4fb7e379ddb.roa File: f37991dd-d45f-30d0-8142-f4fb7e379ddb.roa (raw, json) Hash identifier: 4FTut77FBJMak/Jf5XBQnqtEO1g4lOS4yu0qxdAk6X4= Subject key identifier: 08:2A:98:E0:67:FB:71:2A:C8:20:B2:DB:D3:29:08:95:1C:A8:2F:E2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADA9BB3D0593026798463A480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f37991dd-d45f-30d0-8142-f4fb7e379ddb.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 173.187.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:b3:d0:59:30:26:79:84:63:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=980b44b5-80cc-4bad-ac16-1ae9d4a0607f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6e:11:4e:37:7d:8f:63:9c:c9:1e:8f:24:bd: d7:8d:d7:73:d8:e6:16:08:07:f1:d7:dd:90:ed:e8: bb:89:11:34:5d:e4:00:c7:49:b9:0b:88:51:14:fd: f8:8b:e2:63:83:e6:8d:da:56:de:9a:c3:a9:d1:33: 69:6d:e9:9f:64:57:e2:e3:22:0b:5e:3a:12:36:69: 10:4d:ce:97:52:8a:0a:c5:70:6f:26:a2:a7:f9:53: 3f:97:fb:cb:da:39:c3:00:40:b6:79:db:7c:bf:61: f7:e5:00:94:31:fa:6e:77:ea:26:10:0a:e4:e6:87: 8a:70:0e:d1:1f:c0:78:da:13:ab:61:de:d7:c3:c0: 2a:7b:16:11:76:b1:aa:27:2f:c7:68:24:48:70:20: 76:fb:32:03:4e:19:8c:ff:75:cf:af:40:1d:aa:9c: 9e:16:17:c2:bc:99:87:b9:53:d6:2d:37:18:b1:f2: 7b:3a:fd:65:0e:00:77:37:89:e2:d7:92:43:f4:ac: 2e:6e:3e:e8:48:ef:4a:af:08:1a:de:c4:5a:bc:84: e6:48:69:f8:64:98:0b:6b:bd:7a:ce:56:36:fe:85: a8:33:f6:89:5e:fd:66:b9:51:6e:9b:69:5c:2d:d4: b7:0c:48:56:03:65:a6:e5:cf:ff:03:6e:95:dd:c8: ff:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:2A:98:E0:67:FB:71:2A:C8:20:B2:DB:D3:29:08:95:1C:A8:2F:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f37991dd-d45f-30d0-8142-f4fb7e379ddb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:cc:17:1a:e4:f7:03:a5:67:30:22:58:17:24:fd:d1:f0:93: ac:78:a8:a0:89:84:19:b1:ea:7f:95:17:c8:84:70:db:52:b0: b9:cd:c3:41:3b:ed:40:ca:0a:42:1e:b7:bf:5a:74:e0:c0:cd: 80:12:ab:73:b6:83:e0:7d:15:0c:26:ee:c9:0c:16:2c:fb:7a: d5:75:0e:be:e1:43:f4:a3:77:32:44:6d:00:20:68:f5:0c:9d: 76:cb:12:5a:73:0a:1c:b2:37:d2:17:3b:68:ce:51:15:b4:32: 1c:21:0e:06:39:e0:60:fb:53:83:c4:43:55:6a:59:65:7c:43: 9a:b9:98:c6:d7:44:fb:de:02:f5:9d:7b:bc:a4:81:fc:30:05: b0:65:33:e1:8c:0d:bf:15:10:1e:55:88:20:f0:34:47:51:8a: 77:76:b6:8d:5c:2b:1b:64:59:5b:1a:4a:8a:82:49:5f:40:ae: ec:56:61:fe:1f:93:58:eb:b4:fd:e0:eb:15:0c:e3:fd:77:c9: 60:24:f1:33:6e:c9:0d:24:de:33:67:ed:0f:61:75:f6:0b:d9: 13:2f:17:9a:50:95:de:e1:11:f0:a1:67:78:7f:b8:95:18:65: 86:b4:7b:60:ae:c9:34:f7:10:83:19:31:2f:8e:cf:80:5c:58: ac:6e:ab:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram7PQWTAmeYRjpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk OTgwYjQ0YjUtODBjYy00YmFkLWFjMTYtMWFlOWQ0YTA2MDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgm4RTjd9j2OcyR6PJL3Xjddz2OYWCAfx192Q 7ei7iRE0XeQAx0m5C4hRFP34i+Jjg+aN2lbemsOp0TNpbemfZFfi4yILXjoSNmkQ Tc6XUooKxXBvJqKn+VM/l/vL2jnDAEC2edt8v2H35QCUMfpud+omEArk5oeKcA7R H8B42hOrYd7Xw8AqexYRdrGqJy/HaCRIcCB2+zIDThmM/3XPr0AdqpyeFhfCvJmH uVPWLTcYsfJ7Ov1lDgB3N4ni15JD9Kwubj7oSO9Krwga3sRavITmSGn4ZJgLa716 zlY2/oWoM/aJXv1muVFum2lcLdS3DEhWA2Wm5c//A26V3cj/cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgqmOBn+3EqyCCy29MpCJUcqC/iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjM3OTkxZGQtZDQ1Zi0z MGQwLTgxNDItZjRmYjdlMzc5ZGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbt3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnMFxrk9wOlZzAiWBck/dHwk6x4qKCJhBmx6n+VF8iEcNtSsLnNw0E7 7UDKCkIet79adODAzYASq3O2g+B9FQwm7skMFiz7etV1Dr7hQ/SjdzJEbQAgaPUM nXbLElpzChyyN9IXO2jOURW0MhwhDgY54GD7U4PEQ1VqWWV8Q5q5mMbXRPveAvWd e7ykgfwwBbBlM+GMDb8VEB5ViCDwNEdRind2to1cKxtkWVsaSoqCSV9AruxWYf4f k1jrtP3g6xUM4/13yWAk8TNuyQ0k3jNn7Q9hdfYL2RMvF5pQld7hEfChZ3h/uJUY ZYa0e2CuyTT3EIMZMS+Oz4BcWKxuqxo= -----END CERTIFICATE-----Generated at Sat Aug 23 13:23:34 2025 by rpki-client