$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/374a3ebf-2b4e-3e32-81d7-17250d12ee58.roa File: 374a3ebf-2b4e-3e32-81d7-17250d12ee58.roa (raw, json) Hash identifier: ebxEcrGnkdt0uRm4DUV3YSEQBfYccZUFRaMK5bn2qLc= Subject key identifier: D6:08:86:A8:45:BF:E3:5D:4D:85:5D:DA:7D:DD:F1:05:CB:60:BA:CC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3F1C6668BA3D428AD6FE0F20 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/374a3ebf-2b4e-3e32-81d7-17250d12ee58.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 173.186.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:66:68:ba:3d:42:8a:d6:fe:0f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=8ff78f94-bc36-414b-b382-371b661a448d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a6:70:bf:78:a3:2f:84:84:0c:31:b7:80:39: 0f:60:37:01:86:21:69:3f:4f:18:d9:68:c6:ac:5d: 74:64:af:46:3c:c8:13:cc:b7:c5:9e:4d:fe:4d:c8: 89:da:0c:a6:93:8f:e6:50:07:ea:35:b7:9c:44:4a: 6b:20:dc:b2:6a:84:3b:90:03:66:38:00:91:a9:1b: df:1b:70:e1:ef:56:b7:34:af:f1:ea:e5:41:27:f7: 5e:2e:51:0e:7f:32:c5:23:db:12:9f:eb:c5:64:9e: b4:1c:a6:91:e6:ae:8b:25:06:35:d8:0c:bf:93:ca: a1:5d:84:b9:e4:fc:b2:1a:00:59:f1:7c:60:eb:14: ad:e6:6f:aa:0d:00:76:b0:2e:db:a7:49:f7:a4:35: 64:88:19:1e:b6:fb:8e:f2:35:e5:f0:58:b9:c8:6b: 9a:8c:8c:88:46:1a:54:95:b7:63:e9:13:a3:bc:d2: d5:20:a5:af:45:b4:c4:8e:fc:1f:fb:5d:18:12:ed: 8d:8c:07:55:0a:a5:44:e2:4e:c1:ab:68:b7:af:e4: 6d:bc:ba:6a:99:b2:aa:f5:c6:4e:aa:0e:a2:38:a7: bb:d4:c0:d7:1d:9c:64:bf:75:2a:28:f4:df:4d:01: 3d:77:1d:5b:f8:db:b2:9d:35:3e:a9:1a:d3:87:1f: fd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:08:86:A8:45:BF:E3:5D:4D:85:5D:DA:7D:DD:F1:05:CB:60:BA:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/374a3ebf-2b4e-3e32-81d7-17250d12ee58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:18:b5:3c:f1:2d:16:df:54:2d:35:61:8a:5f:ab:ac:3a:83: 65:c2:df:c8:74:21:eb:dc:7f:4a:6a:92:70:ee:b6:39:22:a5: 69:b3:d8:5e:47:38:2f:29:8e:e3:9e:86:46:5e:9e:e0:4e:50: 92:e4:d4:52:f3:f5:ba:08:04:bb:5e:2d:86:a2:53:28:a2:21: 71:68:f5:db:cb:57:d5:a1:cb:5f:9c:57:c2:14:4a:52:e5:eb: b0:d2:57:97:44:94:f8:cd:09:b4:e8:ee:2e:52:bc:d6:c4:11: 85:51:ce:c8:2a:d2:c1:a5:85:b6:ef:30:f1:4d:17:4e:30:bc: 26:15:57:04:0f:12:21:84:2a:ba:a8:d8:31:03:32:59:b8:e9: 92:6c:ad:1b:be:54:e6:d1:2c:35:94:c4:2e:9c:85:b9:e2:8a: f0:41:c7:50:e9:30:5e:2c:07:c2:b8:7f:cc:99:85:42:cb:66: 50:04:aa:d2:c8:8d:af:e4:92:43:04:05:e5:8d:2c:3c:1e:72: 35:a2:cd:d9:6a:85:73:a0:d8:b0:4a:93:08:35:7b:fc:ff:e4: 01:d8:3d:83:c1:3e:2c:73:ca:8c:8d:50:74:0b:fc:16:16:3c: f1:52:85:02:ab:1d:f1:3b:93:12:76:ee:17:72:ca:26:2d:c7: b5:aa:42:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HGZouj1Citb+DyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk OGZmNzhmOTQtYmMzNi00MTRiLWIzODItMzcxYjY2MWE0NDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKZwv3ijL4SEDDG3gDkPYDcBhiFpP08Y2WjG rF10ZK9GPMgTzLfFnk3+TciJ2gymk4/mUAfqNbecREprINyyaoQ7kANmOACRqRvf G3Dh71a3NK/x6uVBJ/deLlEOfzLFI9sSn+vFZJ60HKaR5q6LJQY12Ay/k8qhXYS5 5PyyGgBZ8Xxg6xSt5m+qDQB2sC7bp0n3pDVkiBketvuO8jXl8Fi5yGuajIyIRhpU lbdj6ROjvNLVIKWvRbTEjvwf+10YEu2NjAdVCqVE4k7Bq2i3r+RtvLpqmbKq9cZO qg6iOKe71MDXHZxkv3UqKPTfTQE9dx1b+NuynTU+qRrThx/9zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYIhqhFv+NdTYVd2n3d8QXLYLrMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzc0YTNlYmYtMmI0ZS0z ZTMyLTgxZDctMTcyNTBkMTJlZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsYtTzxLRbfVC01YYpfq6w6g2XC38h0Ievcf0pqknDutjkipWmz2F5H OC8pjuOehkZenuBOUJLk1FLz9boIBLteLYaiUyiiIXFo9dvLV9Why1+cV8IUSlLl 67DSV5dElPjNCbTo7i5SvNbEEYVRzsgq0sGlhbbvMPFNF04wvCYVVwQPEiGEKrqo 2DEDMlm46ZJsrRu+VObRLDWUxC6chbniivBBx1DpMF4sB8K4f8yZhULLZlAEqtLI ja/kkkMEBeWNLDwecjWizdlqhXOg2LBKkwg1e/z/5AHYPYPBPixzyoyNUHQL/BYW PPFShQKrHfE7kxJ27hdyyiYtx7WqQiA= -----END CERTIFICATE-----Generated at Fri Oct 10 22:04:30 2025 by rpki-client