$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba0b83b7-fbfc-3aa4-9cee-fbab90635aae.roa File: ba0b83b7-fbfc-3aa4-9cee-fbab90635aae.roa (raw, json) Hash identifier: 2UFHrsTw6PkXoBRrX82avF2CPY4IIg20mdGElJRWt4Y= Subject key identifier: 43:76:ED:56:D3:4B:48:6F:44:4D:C1:2B:17:DF:97:34:C8:72:35:C5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2CA7EB7363094433F14E40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba0b83b7-fbfc-3aa4-9cee-fbab90635aae.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 173.190.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:a7:eb:73:63:09:44:33:f1:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=94d2280c-6387-4321-8935-709ef8cc26c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b6:19:77:5e:15:d2:a8:cd:ff:fc:e3:0b:82: e3:ec:85:1a:6f:6a:5c:32:b9:27:5a:d1:1b:ba:5f: 32:ef:ec:f6:fd:84:6d:6a:99:73:2e:b2:52:89:b7: c0:b0:18:f0:91:88:fa:74:25:80:80:aa:f8:d6:41: b1:58:0b:ff:d9:51:0b:43:fa:3d:a9:12:7b:bd:57: f4:3c:a9:d7:5a:44:56:5a:e5:7d:01:bf:c7:4a:5c: 80:e0:12:9d:bf:56:ea:57:25:88:58:48:ea:12:e5: 63:68:a7:fd:23:48:36:a7:a0:77:ba:11:21:3b:85: 6a:18:e2:7a:6b:22:65:e4:f4:de:04:0a:c6:99:90: a7:2d:63:22:d4:69:a4:f9:29:ea:5e:02:3a:8e:8e: e3:d9:87:ee:7c:91:b8:8b:60:81:10:ce:fb:6d:18: eb:a4:ae:c7:52:2a:12:ea:3f:65:c4:ef:e4:97:78: ed:c0:3a:72:ae:5f:0a:51:f9:4c:9a:5b:53:74:27: 7b:c0:74:63:f1:61:28:e1:3f:0c:23:7d:aa:37:a3: 3a:3a:49:33:e8:a7:07:22:dd:22:b0:f3:11:28:63: 1b:b4:d3:0d:32:c0:a6:71:f8:ba:fc:26:87:c6:73: 1b:b4:33:e1:dd:6c:31:3d:c7:2e:30:3f:19:68:0a: 18:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:76:ED:56:D3:4B:48:6F:44:4D:C1:2B:17:DF:97:34:C8:72:35:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba0b83b7-fbfc-3aa4-9cee-fbab90635aae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:00:5c:4b:f3:50:f6:1c:69:c7:0f:68:d6:a8:42:5c:cc:da: 21:30:f1:63:ed:a9:15:c5:91:e7:c3:d7:28:63:77:09:3f:da: f6:88:00:a2:48:a4:04:1c:1a:fb:7c:1c:d6:28:00:8d:78:60: ac:d1:78:4d:6a:fa:19:de:7b:9f:3c:16:61:03:04:92:60:b9: f1:3b:77:da:a0:68:b2:0b:14:41:29:1f:47:cd:4e:2b:5a:56: 1c:07:48:69:3d:23:80:0f:d3:2b:49:b9:72:ee:67:42:9a:0f: b6:3f:ce:78:65:42:a5:0c:ce:b7:9f:9f:ef:d0:dc:85:f5:e7: 4a:11:a4:b2:3e:dd:5d:a0:ed:73:9b:ce:20:f0:5a:a1:28:1f: 1b:9c:9a:9b:46:28:95:a6:fc:e5:4b:ca:18:af:e1:92:90:24: e9:88:c0:52:ed:5d:52:f4:2e:53:23:ea:7b:72:b8:f8:52:50: 20:a0:96:90:db:c3:f1:e7:56:31:17:74:3e:00:ae:a4:45:d3: 3a:27:4f:08:91:de:c5:71:f4:8c:b1:21:47:ef:cf:5d:6e:28: e6:39:70:05:46:e1:dd:c4:76:43:a0:b3:1a:76:1a:b5:f3:55: 6c:44:09:2a:5e:cd:b0:72:75:d2:d0:26:c8:08:1a:40:a5:3f: ff:15:a9:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLKfrc2MJRDPxTkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk OTRkMjI4MGMtNjM4Ny00MzIxLTg5MzUtNzA5ZWY4Y2MyNmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirYZd14V0qjN//zjC4Lj7IUab2pcMrknWtEb ul8y7+z2/YRtaplzLrJSibfAsBjwkYj6dCWAgKr41kGxWAv/2VELQ/o9qRJ7vVf0 PKnXWkRWWuV9Ab/HSlyA4BKdv1bqVyWIWEjqEuVjaKf9I0g2p6B3uhEhO4VqGOJ6 ayJl5PTeBArGmZCnLWMi1Gmk+SnqXgI6jo7j2YfufJG4i2CBEM77bRjrpK7HUioS 6j9lxO/kl3jtwDpyrl8KUflMmltTdCd7wHRj8WEo4T8MI32qN6M6Okkz6KcHIt0i sPMRKGMbtNMNMsCmcfi6/CaHxnMbtDPh3WwxPccuMD8ZaAoYfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEN27VbTS0hvRE3BKxfflzTIcjXFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmEwYjgzYjctZmJmYy0z YWE0LTljZWUtZmJhYjkwNjM1YWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb4YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAAXEvzUPYcaccPaNaoQlzM2iEw8WPtqRXFkefD1yhjdwk/2vaIAKJI pAQcGvt8HNYoAI14YKzReE1q+hnee588FmEDBJJgufE7d9qgaLILFEEpH0fNTita VhwHSGk9I4AP0ytJuXLuZ0KaD7Y/znhlQqUMzrefn+/Q3IX150oRpLI+3V2g7XOb ziDwWqEoHxucmptGKJWm/OVLyhiv4ZKQJOmIwFLtXVL0LlMj6ntyuPhSUCCglpDb w/HnVjEXdD4ArqRF0zonTwiR3sVx9IyxIUfvz11uKOY5cAVG4d3EdkOgsxp2GrXz VWxECSpezbByddLQJsgIGkClP/8VqT4= -----END CERTIFICATE-----Generated at Fri Oct 10 17:57:17 2025 by rpki-client