$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/207c7919-0890-33d1-8bed-b4b3f71de305.roa File: 207c7919-0890-33d1-8bed-b4b3f71de305.roa (raw, json) Hash identifier: wSZhP5kqWsE+22f51tvxoOWrr+Y3TgCGbIk5B8DFyM4= Subject key identifier: C5:8D:CD:28:98:2C:D1:67:B4:38:D4:EA:A0:52:22:DF:A0:67:03:B5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B16A15D328EB2D6424B99B180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/207c7919-0890-33d1-8bed-b4b3f71de305.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 173.185.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:5d:32:8e:b2:d6:42:4b:99:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=989a8068-fa95-4a6f-981b-aa879e1293ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:69:23:12:1e:5d:c5:9a:24:9b:b3:c3:0d:8a: 3a:9b:8e:95:7a:41:a5:e3:0c:ce:75:45:1e:46:7d: 12:68:0d:bf:fc:81:96:ce:68:55:81:bd:37:ab:27: 3c:11:4a:75:e5:5d:52:f6:05:01:89:50:36:4d:13: 0f:8a:1e:66:cd:16:ed:bb:a3:a4:6b:09:38:56:e5: c7:17:f1:2c:17:00:bc:07:f2:92:c4:b1:b3:19:58: f4:82:27:de:22:73:b0:84:2c:39:bd:47:5f:15:22: 64:5d:1e:66:ef:7b:3d:d2:11:27:81:e3:19:2e:48: eb:7a:c1:a2:b3:e8:64:0d:8e:e5:84:4a:e1:76:10: 8e:45:95:34:7c:14:6e:80:42:ff:87:93:7d:98:fa: 4a:39:cd:7b:1e:6e:b4:26:d0:34:0e:29:f2:c7:db: 4a:01:a5:f9:59:fe:00:d8:4b:ea:77:f5:5f:62:6c: f3:48:ff:a5:60:aa:48:a3:0c:41:17:4b:a6:7f:5d: 18:f0:2d:44:52:a0:10:0f:cf:87:fe:28:d2:6a:7c: fd:2d:2d:df:2c:1a:4b:da:2f:e9:af:9e:53:c0:69: 09:84:6c:fb:36:89:d8:d5:d8:f3:c2:e9:f2:e3:2c: cc:83:cf:72:99:07:a5:35:8b:a6:0d:5e:70:81:d3: 29:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8D:CD:28:98:2C:D1:67:B4:38:D4:EA:A0:52:22:DF:A0:67:03:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/207c7919-0890-33d1-8bed-b4b3f71de305.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:84:90:27:39:dd:ca:14:89:0b:55:45:2a:33:e3:da:50:46: 0e:48:ee:f1:57:9c:e6:e4:96:88:f1:ac:25:43:f9:e3:32:f5: 26:9d:11:ce:61:9a:1a:9e:17:8c:aa:b5:4c:50:83:13:b1:fd: 15:fd:37:26:39:d0:d4:5d:20:e9:4a:41:f8:94:69:f6:e8:96: 03:e7:fa:4d:33:21:e8:b8:4a:67:0d:80:48:54:83:5c:1e:82: 1d:c6:de:a9:7b:ce:31:6f:57:99:a9:7e:25:f7:31:52:df:03: 31:3b:5a:b9:c2:4e:78:f9:22:e2:91:d0:fb:b9:76:d4:45:20: 92:eb:65:43:27:66:ef:a8:f3:2d:af:91:2a:d8:2e:b7:d2:49: 43:a7:68:9a:25:3f:51:da:4c:56:60:a2:77:98:01:0f:a0:ff: 48:8d:5e:0d:e1:99:5e:c7:a8:00:7b:b3:7f:b8:0b:84:bf:23: 3e:dd:cd:6f:e3:4e:14:bb:1b:17:49:5a:8c:c7:05:49:20:43: db:c3:5d:3b:23:d8:84:08:c6:60:52:dd:3a:c2:ae:e0:bb:c3: 4e:91:91:a2:13:48:ee:c6:a8:72:b6:84:ee:50:c3:e5:84:3f: b5:ee:21:7a:7e:ae:7a:7a:db:cb:b1:07:5d:46:3f:b3:65:7c: 00:da:08:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoV0yjrLWQkuZsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk OTg5YTgwNjgtZmE5NS00YTZmLTk4MWItYWE4NzllMTI5M2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9GkjEh5dxZokm7PDDYo6m46VekGl4wzOdUUe Rn0SaA2//IGWzmhVgb03qyc8EUp15V1S9gUBiVA2TRMPih5mzRbtu6Okawk4VuXH F/EsFwC8B/KSxLGzGVj0gifeInOwhCw5vUdfFSJkXR5m73s90hEngeMZLkjresGi s+hkDY7lhErhdhCORZU0fBRugEL/h5N9mPpKOc17Hm60JtA0Dinyx9tKAaX5Wf4A 2Evqd/VfYmzzSP+lYKpIowxBF0umf10Y8C1EUqAQD8+H/ijSanz9LS3fLBpL2i/p r55TwGkJhGz7NonY1djzwuny4yzMg89ymQelNYumDV5wgdMpWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWNzSiYLNFntDjU6qBSIt+gZwO1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjA3Yzc5MTktMDg5MC0z M2QxLThiZWQtYjRiM2Y3MWRlMzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErblQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECEkCc53coUiQtVRSoz49pQRg5I7vFXnObklojxrCVD+eMy9SadEc5h mhqeF4yqtUxQgxOx/RX9NyY50NRdIOlKQfiUafbolgPn+k0zIei4SmcNgEhUg1we gh3G3ql7zjFvV5mpfiX3MVLfAzE7WrnCTnj5IuKR0Pu5dtRFIJLrZUMnZu+o8y2v kSrYLrfSSUOnaJolP1HaTFZgoneYAQ+g/0iNXg3hmV7HqAB7s3+4C4S/Iz7dzW/j ThS7GxdJWozHBUkgQ9vDXTsj2IQIxmBS3TrCruC7w06RkaITSO7GqHK2hO5Qw+WE P7XuIXp+rnp628uxB11GP7NlfADaCHI= -----END CERTIFICATE-----Generated at Fri Oct 10 17:54:39 2025 by rpki-client