$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ce44d4d-189a-3359-93fa-8cba7b4391b7.roa File: 5ce44d4d-189a-3359-93fa-8cba7b4391b7.roa (raw, json) Hash identifier: 6YjHHCWpXQC+uiWC9kwK3c/QgCOcFrl0Udt7JIxNpRk= Subject key identifier: B5:A1:2E:C3:99:70:AE:61:72:6E:CE:B9:C7:A8:9A:D2:A8:83:43:05 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B33F19F93BBA438FFBC041840 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ce44d4d-189a-3359-93fa-8cba7b4391b7.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 7029 IP address blocks: 173.187.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:9f:93:bb:a4:38:ff:bc:04:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=582c7a65-07eb-4413-9bc3-1393127e52ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:26:7a:7e:ad:2f:f0:6c:d5:70:f6:44:ae:77: 12:1b:f1:0c:5c:63:2f:be:17:83:80:b4:44:b7:dd: 36:41:6f:22:a8:ef:27:da:9e:95:ae:b4:6b:51:87: ef:ed:37:10:c0:04:44:cd:5c:81:9e:d7:30:d3:48: eb:60:ec:cc:d2:84:7e:09:65:25:cf:12:b9:40:f1: bc:15:e7:e2:38:f2:89:82:ec:44:10:de:84:07:e3: 51:e8:0e:e7:f6:81:a5:87:72:c0:98:dd:ac:f1:70: f3:0f:f7:96:46:8f:f8:2b:57:0e:46:88:3d:50:7a: f2:20:d5:ee:87:eb:1a:49:ac:66:18:ca:98:1e:ec: 0f:02:fe:c5:bf:d0:6d:83:cb:27:00:39:81:68:17: 55:9f:0c:e1:b6:c0:4b:02:4f:40:a5:d0:76:dc:d0: a5:7b:7e:26:96:bd:a7:8a:eb:e5:98:cf:31:5d:9a: d7:c0:69:ab:61:dc:6c:e2:0e:d5:45:69:38:77:7a: 92:12:7e:5c:e9:f5:49:94:06:2d:65:37:c2:bc:ad: 87:e9:c1:b3:10:c5:9b:67:4b:b4:b5:34:fd:c1:61: 44:e2:2a:a4:79:71:2b:c4:ec:d3:86:57:a3:3d:64: c9:69:3b:6a:25:06:eb:f5:10:da:95:f9:15:37:10: 27:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A1:2E:C3:99:70:AE:61:72:6E:CE:B9:C7:A8:9A:D2:A8:83:43:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ce44d4d-189a-3359-93fa-8cba7b4391b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:80:a0:60:19:d7:8a:97:85:66:87:b9:db:88:c4:d1:9a:e7: ef:0b:03:0f:b6:cf:4e:59:cc:85:bc:84:cd:85:a3:7b:cc:ce: 66:fb:f3:4c:3d:40:02:5e:20:4c:50:eb:ff:94:67:83:c9:d9: d0:5c:4c:03:8a:69:2c:ce:ab:44:f3:cf:b0:fe:91:ee:c2:c0: 52:a8:d0:30:cc:ab:df:a8:7f:64:39:f8:4c:b6:26:09:8c:dc: 14:92:08:37:f3:d6:47:df:e9:93:ce:b6:cd:95:c3:f4:b4:df: 09:90:9f:ec:1c:0e:9f:8c:1c:eb:8c:61:d6:ce:4a:8a:05:0a: e1:25:83:a7:b4:e8:ce:5e:4a:3b:cd:1b:8c:11:0a:4e:f7:61: b1:58:eb:cc:7d:8f:e1:19:f8:07:31:38:02:3f:76:1e:cb:bb: c2:7e:24:b2:8f:49:a2:2a:b2:1d:cf:25:47:ff:41:85:72:7e: 2e:06:47:d3:06:7f:87:5b:66:e2:a8:9d:92:40:71:1e:c9:4f: b5:93:34:22:3c:6a:5c:1c:67:94:e7:bb:a7:6a:1e:2f:18:7d: 51:8a:7c:f4:5d:b3:5f:92:3b:b1:85:b3:34:8a:03:7e:ca:05: 18:d5:3b:26:4b:92:af:d6:71:3a:3a:87:0e:4c:d3:96:2e:1b: 63:a2:2b:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8Z+Tu6Q4/7wEGEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk NTgyYzdhNjUtMDdlYi00NDEzLTliYzMtMTM5MzEyN2U1MmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCZ6fq0v8GzVcPZErncSG/EMXGMvvheDgLRE t902QW8iqO8n2p6VrrRrUYfv7TcQwAREzVyBntcw00jrYOzM0oR+CWUlzxK5QPG8 FefiOPKJguxEEN6EB+NR6A7n9oGlh3LAmN2s8XDzD/eWRo/4K1cORog9UHryINXu h+saSaxmGMqYHuwPAv7Fv9Btg8snADmBaBdVnwzhtsBLAk9ApdB23NCle34mlr2n iuvlmM8xXZrXwGmrYdxs4g7VRWk4d3qSEn5c6fVJlAYtZTfCvK2H6cGzEMWbZ0u0 tTT9wWFE4iqkeXErxOzThlejPWTJaTtqJQbr9RDalfkVNxAn+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWhLsOZcK5hcm7OuceomtKog0MFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWNlNDRkNGQtMTg5YS0z MzU5LTkzZmEtOGNiYTdiNDM5MWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbuqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaAoGAZ14qXhWaHuduIxNGa5+8LAw+2z05ZzIW8hM2Fo3vMzmb780w9 QAJeIExQ6/+UZ4PJ2dBcTAOKaSzOq0Tzz7D+ke7CwFKo0DDMq9+of2Q5+Ey2JgmM 3BSSCDfz1kff6ZPOts2Vw/S03wmQn+wcDp+MHOuMYdbOSooFCuElg6e06M5eSjvN G4wRCk73YbFY68x9j+EZ+AcxOAI/dh7Lu8J+JLKPSaIqsh3PJUf/QYVyfi4GR9MG f4dbZuKonZJAcR7JT7WTNCI8alwcZ5Tnu6dqHi8YfVGKfPRds1+SO7GFszSKA37K BRjVOyZLkq/WcTo6hw5M05YuG2OiK8g= -----END CERTIFICATE-----Generated at Fri Oct 10 20:08:50 2025 by rpki-client