$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0dbf425b-a9c5-3345-ac5e-feb991f74211.roa File: 0dbf425b-a9c5-3345-ac5e-feb991f74211.roa (raw, json) Hash identifier: YwrLVJS6rzfbZ9MYN+6L09bwc0LqrNQ9V7gdgM+nmGA= Subject key identifier: 96:B7:C3:C7:0F:D3:D6:07:5F:76:DA:15:11:D5:57:B9:AE:69:2C:23 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC70AD02C045A285D7380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0dbf425b-a9c5-3345-ac5e-feb991f74211.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 173.187.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c7:0a:d0:2c:04:5a:28:5d:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=1b7b392d-af9c-4347-8343-b81f87ff76a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:7e:7b:15:45:3c:2b:22:a5:ef:a1:7b:f3:d0: ba:69:81:20:03:1b:e4:8d:e0:dc:b5:a0:f3:90:91: b7:84:6b:ca:7c:57:c8:31:06:71:c5:af:af:e9:38: ba:12:9d:d2:e2:68:95:2d:c5:89:e6:05:4f:ef:11: 2e:29:6c:b1:ff:df:9f:ab:04:5b:9e:94:8f:b8:e8: 5d:e7:0d:bd:bd:32:94:86:c1:a9:63:9d:00:41:9f: 95:aa:44:e4:27:a7:9b:8a:83:7b:e5:db:9b:05:08: 9e:20:99:f6:ea:51:d1:25:11:ea:b2:cd:e5:15:0e: 31:8b:c6:ad:97:42:5f:c2:57:85:a9:ec:30:0e:c8: f8:87:97:74:3e:58:07:1c:68:be:cb:f2:3b:0d:6c: 98:29:43:77:bd:07:57:41:fd:f5:a4:f6:57:6d:8c: 31:6c:61:7b:07:98:59:cb:5d:99:15:54:45:8b:5a: 69:96:54:f7:3a:bb:f5:46:3e:ac:75:ad:8d:a2:30: af:80:87:53:0b:13:50:8f:16:5a:3f:c3:00:10:cc: 1e:4c:d3:14:29:d2:f5:4b:39:42:2f:da:27:f9:72: ee:d3:1e:2c:78:68:73:a8:9d:20:f8:55:27:1c:f3: 17:01:1c:b4:6a:c7:28:42:6f:25:5f:c9:2c:1b:28: 90:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B7:C3:C7:0F:D3:D6:07:5F:76:DA:15:11:D5:57:B9:AE:69:2C:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0dbf425b-a9c5-3345-ac5e-feb991f74211.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:f4:69:4f:c3:86:b8:97:a7:03:b9:41:83:a3:30:73:4f:22: d9:50:01:fb:86:56:75:7a:1b:f0:d9:e6:65:f6:2d:c6:a7:d1: 6d:1e:8e:bf:47:5b:0e:95:08:3b:30:98:fe:1b:10:a1:2b:62: 13:b9:b4:7b:ed:91:6d:2c:e5:1d:3f:07:a3:6f:4a:54:d7:54: d3:06:a6:d7:f3:93:3e:21:66:66:86:83:4b:33:3c:77:30:61: 3d:d9:70:47:22:b3:ce:97:68:9f:93:ac:48:1f:a3:07:8f:8d: 7c:7a:88:67:c2:a4:d5:a8:ec:92:34:8c:e9:80:42:db:9d:0e: 66:c1:e0:15:f2:e7:e3:8c:a1:34:55:ab:41:a7:0a:11:55:57: f8:27:6e:42:49:44:17:a5:54:77:54:b4:dc:cf:a9:e3:04:81: 6b:bc:84:c5:7c:4b:b7:3d:30:dd:c2:7c:1f:98:9a:43:c1:70: 1d:f1:f5:14:a3:f2:43:be:f6:ed:6f:8b:b9:9e:ea:15:12:bc: 59:d0:5c:6d:cb:c4:07:aa:53:ec:f2:92:6b:6e:74:d7:f7:11: 43:b9:b0:b9:9c:bc:f9:a6:cb:b0:ea:de:df:68:13:6a:68:93: 29:78:16:50:64:f8:26:cc:3f:b4:e4:90:8d:e2:72:75:57:68: a6:f9:13:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMcK0CwEWihdc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MWI3YjM5MmQtYWY5Yy00MzQ3LTgzNDMtYjgxZjg3ZmY3NmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8n57FUU8KyKl76F789C6aYEgAxvkjeDctaDz kJG3hGvKfFfIMQZxxa+v6Ti6Ep3S4miVLcWJ5gVP7xEuKWyx/9+fqwRbnpSPuOhd 5w29vTKUhsGpY50AQZ+VqkTkJ6ebioN75dubBQieIJn26lHRJRHqss3lFQ4xi8at l0JfwleFqewwDsj4h5d0PlgHHGi+y/I7DWyYKUN3vQdXQf31pPZXbYwxbGF7B5hZ y12ZFVRFi1ppllT3Orv1Rj6sda2NojCvgIdTCxNQjxZaP8MAEMweTNMUKdL1SzlC L9on+XLu0x4seGhzqJ0g+FUnHPMXARy0ascoQm8lX8ksGyiQ4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJa3w8cP09YHX3baFRHVV7muaSwjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGRiZjQyNWItYTljNS0z MzQ1LWFjNWUtZmViOTkxZjc0MjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbs/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA30aU/DhriXpwO5QYOjMHNPItlQAfuGVnV6G/DZ5mX2Lcan0W0ejr9H Ww6VCDswmP4bEKErYhO5tHvtkW0s5R0/B6NvSlTXVNMGptfzkz4hZmaGg0szPHcw YT3ZcEcis86XaJ+TrEgfowePjXx6iGfCpNWo7JI0jOmAQtudDmbB4BXy5+OMoTRV q0GnChFVV/gnbkJJRBelVHdUtNzPqeMEgWu8hMV8S7c9MN3CfB+YmkPBcB3x9RSj 8kO+9u1vi7me6hUSvFnQXG3LxAeqU+zykmtudNf3EUO5sLmcvPmmy7Dq3t9oE2po kyl4FlBk+CbMP7TkkI3icnVXaKb5E90= -----END CERTIFICATE-----Generated at Fri Oct 10 22:03:26 2025 by rpki-client