$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2e69a4e-a91b-3d73-bea6-467992e1639a.roa File: c2e69a4e-a91b-3d73-bea6-467992e1639a.roa (raw, json) Hash identifier: ogViIpkGvqpzHPtkJ8+PIflwRMlACRgvxg6BDxuogjs= Subject key identifier: A8:E2:BA:EC:53:99:A3:02:BB:15:48:18:95:EC:BA:09:37:D7:07:A1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2A2C4A0C8AFF9CC580F2AE40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2e69a4e-a91b-3d73-bea6-467992e1639a.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 173.186.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:4a:0c:8a:ff:9c:c5:80:f2:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=b9c3cdbe-cff9-4cda-a0e7-c9b736c8fcf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b2:ac:d6:4d:4a:a5:4d:7b:c3:77:55:06:bd: bd:79:37:b2:43:ee:4d:83:51:8a:ce:36:93:b5:e4: a7:db:a5:7d:70:7f:4e:0a:49:b3:2b:e5:fe:4f:bb: 52:b1:2b:fd:a5:b5:17:e7:30:36:75:86:68:f2:33: 40:31:0b:aa:9a:a9:ce:0f:ce:a1:5c:eb:57:ec:73: 99:5f:d6:a0:61:ef:7a:06:3b:99:e9:fb:cb:89:00: 8d:cf:0f:12:fc:51:4b:a8:c3:da:34:28:97:3a:68: 1a:b0:7c:b5:4c:c2:6b:3a:59:23:bf:40:e7:97:72: 77:db:e5:b3:e2:8f:d2:07:28:9e:55:cf:4c:61:7d: a7:64:95:0a:2a:d3:28:5a:be:04:8b:88:f4:7d:68: fa:be:6a:21:7a:23:4b:4b:f6:7d:48:4c:1c:db:7f: b7:0f:ef:f6:62:50:80:81:fb:71:35:d5:0f:9b:51: 6c:c2:f0:99:8e:6b:a9:cb:c0:28:ab:de:6c:f2:5d: ae:c0:cd:46:d2:20:1b:43:fe:83:48:4f:38:10:73: 4b:59:06:c7:5f:cc:71:e2:f9:2c:76:95:07:c5:d3: 94:93:d2:35:90:aa:87:4d:a6:49:d3:db:91:d6:e1: 68:06:2c:62:7e:16:8f:fe:72:2b:31:11:18:e5:f7: 27:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E2:BA:EC:53:99:A3:02:BB:15:48:18:95:EC:BA:09:37:D7:07:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2e69a4e-a91b-3d73-bea6-467992e1639a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:44:7a:00:23:dc:da:92:99:af:94:c2:ef:fa:97:16:d1:9c: 6e:f5:c8:74:b9:ae:91:bc:32:34:a7:40:cf:84:73:38:74:9d: 8b:ed:b3:6c:17:82:da:9f:5a:6a:ae:91:87:bd:55:d1:96:1e: 55:28:4c:d7:8c:b6:ec:2b:cb:24:ad:c5:1c:71:ae:67:06:a3: 90:b5:43:a4:34:14:05:5a:ef:b9:32:0d:ab:54:dd:48:24:e7: 0d:2a:d6:bc:03:b0:89:e0:73:30:ed:04:29:a6:d7:74:38:78: 06:0f:da:c1:6f:37:8c:fe:3f:ba:49:eb:78:51:60:74:b4:77: cb:fd:b0:56:b7:4e:1b:99:01:ef:67:75:8b:11:9f:c1:06:25: e2:88:74:04:83:f4:a4:04:2c:20:2c:60:a0:bf:a9:06:cc:b4: ed:9b:b9:76:f1:b9:ff:33:5c:a2:91:41:80:24:d2:d1:05:0f: bf:c2:90:9f:ad:fe:d5:3e:63:8e:8f:c6:0c:a9:94:2b:75:37: cd:2f:d5:53:e4:ed:c2:d9:7f:32:c2:da:e1:ef:80:7c:eb:22: 50:5b:77:f9:18:ec:ad:f2:d2:f7:d2:46:82:2a:2b:91:ca:81: df:fb:a7:04:9e:74:55:25:be:70:df:71:54:18:62:da:e7:f6: 12:e2:d1:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEoMiv+cxYDyrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk YjljM2NkYmUtY2ZmOS00Y2RhLWEwZTctYzliNzM2YzhmY2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbKs1k1KpU17w3dVBr29eTeyQ+5Ng1GKzjaT teSn26V9cH9OCkmzK+X+T7tSsSv9pbUX5zA2dYZo8jNAMQuqmqnOD86hXOtX7HOZ X9agYe96BjuZ6fvLiQCNzw8S/FFLqMPaNCiXOmgasHy1TMJrOlkjv0Dnl3J32+Wz 4o/SByieVc9MYX2nZJUKKtMoWr4Ei4j0fWj6vmoheiNLS/Z9SEwc23+3D+/2YlCA gftxNdUPm1FswvCZjmupy8Aoq95s8l2uwM1G0iAbQ/6DSE84EHNLWQbHX8xx4vks dpUHxdOUk9I1kKqHTaZJ09uR1uFoBixifhaP/nIrMREY5fcnHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjiuuxTmaMCuxVIGJXsugk31wehMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzJlNjlhNGUtYTkxYi0z ZDczLWJlYTYtNDY3OTkyZTE2MzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxEegAj3NqSma+Uwu/6lxbRnG71yHS5rpG8MjSnQM+Eczh0nYvts2wX gtqfWmqukYe9VdGWHlUoTNeMtuwryyStxRxxrmcGo5C1Q6Q0FAVa77kyDatU3Ugk 5w0q1rwDsIngczDtBCmm13Q4eAYP2sFvN4z+P7pJ63hRYHS0d8v9sFa3ThuZAe9n dYsRn8EGJeKIdASD9KQELCAsYKC/qQbMtO2buXbxuf8zXKKRQYAk0tEFD7/CkJ+t /tU+Y46PxgyplCt1N80v1VPk7cLZfzLC2uHvgHzrIlBbd/kY7K3y0vfSRoIqK5HK gd/7pwSedFUlvnDfcVQYYtrn9hLi0Uw= -----END CERTIFICATE-----Generated at Fri Oct 10 19:52:11 2025 by rpki-client