$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc3d5b76-8566-39f2-9c3c-9c799b0983a6.roa File: dc3d5b76-8566-39f2-9c3c-9c799b0983a6.roa (raw, json) Hash identifier: eQVjXJ7yWB3Jyj/1mPuG7KmhjluTe5b6ld9HLediWew= Subject key identifier: 3C:1D:CE:BD:B3:BD:D2:BF:4A:32:EB:74:23:42:79:93:0C:01:3F:21 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3F1C56EE833E42417EBFCE20 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc3d5b76-8566-39f2-9c3c-9c799b0983a6.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 174.131.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:56:ee:83:3e:42:41:7e:bf:ce:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=cc40f0a4-495b-4abb-8104-e397bc4a5fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:55:cd:a0:d6:04:19:1a:e5:86:7d:f5:af:43: df:44:88:45:71:74:9f:dd:86:60:e0:2f:62:99:02: 4b:b9:c0:8e:fc:1b:3d:bc:92:a4:e6:26:3e:92:4b: f7:48:df:d8:a7:fe:35:e3:c1:aa:36:9c:bc:7d:dd: 3a:f0:f5:a7:ad:1f:bf:c3:4d:7c:c3:f4:2b:a8:19: 77:5e:9a:f5:2a:0a:1c:f6:6f:9f:2b:df:1f:a9:47: c1:48:07:dd:40:65:68:ce:d1:19:33:b1:92:c8:51: b1:df:17:f6:03:af:d1:a1:07:73:7b:0b:9a:fb:2a: ab:3b:7a:53:9d:27:55:b1:e1:ca:8c:8f:7b:ab:40: 30:79:dd:27:72:f9:ea:01:8e:46:c1:58:6a:40:d0: 7a:a3:d4:04:35:b8:75:87:42:19:34:eb:29:0c:71: 54:f5:6b:74:66:54:f4:53:bb:a5:01:e3:a1:c9:82: 87:5c:d7:93:ea:a5:f4:93:19:19:bd:70:79:59:0e: 21:f2:44:d8:44:03:c7:5f:b9:01:6a:1a:10:ef:88: 48:57:ea:3e:f6:f3:3b:1c:a3:e7:05:47:e6:93:09: 73:43:55:e4:3e:56:29:f2:cf:60:f3:24:d7:06:1c: b6:13:81:a5:57:8a:8c:0f:46:c1:82:a2:a7:b6:b7: 1a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1D:CE:BD:B3:BD:D2:BF:4A:32:EB:74:23:42:79:93:0C:01:3F:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc3d5b76-8566-39f2-9c3c-9c799b0983a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:ae:7c:78:75:80:34:85:ca:17:ec:e6:9c:fa:3c:a3:24:89: 29:7a:b9:6d:02:e8:08:65:07:7e:de:40:ff:7e:fe:52:13:a3: 75:a8:98:00:40:fd:51:16:02:da:08:77:ec:47:be:10:a7:50: 41:eb:24:06:13:f4:29:84:03:5c:23:e3:28:25:7b:22:a5:b3: 04:83:cf:9f:8d:4b:bb:20:2f:63:67:70:8e:2b:02:9d:ca:52: 03:4f:b4:73:b7:8c:fe:78:44:1c:3f:0a:51:61:d0:89:8d:ed: e8:9c:2e:7e:95:91:44:bb:97:d7:76:90:62:26:c0:4c:f6:05: 54:6e:89:26:1b:a0:65:40:2a:dc:a9:50:5d:39:75:0d:69:f4: de:b2:95:2c:3f:f5:fa:95:0c:e0:64:8a:99:1b:29:ea:91:a1: 67:02:80:02:2b:90:05:f8:83:59:5e:fc:3b:5b:31:36:4c:71: b0:57:e2:4f:52:04:ae:64:7c:c3:7f:e6:a5:f5:1d:7f:36:3b: d6:0d:a3:46:3c:34:97:57:32:92:25:ec:27:6d:ff:eb:b1:f0: b2:fa:36:69:6d:e7:ce:8c:32:62:31:83:31:90:5b:cf:d3:b1: 78:f6:97:f9:93:71:73:e7:46:59:11:25:d0:06:6b:4d:e3:35: 98:0e:a9:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HFbugz5CQX6/ziAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk Y2M0MGYwYTQtNDk1Yi00YWJiLTgxMDQtZTM5N2JjNGE1ZmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFXNoNYEGRrlhn31r0PfRIhFcXSf3YZg4C9i mQJLucCO/Bs9vJKk5iY+kkv3SN/Yp/4148GqNpy8fd068PWnrR+/w018w/QrqBl3 Xpr1Kgoc9m+fK98fqUfBSAfdQGVoztEZM7GSyFGx3xf2A6/RoQdzewua+yqrO3pT nSdVseHKjI97q0Awed0ncvnqAY5GwVhqQNB6o9QENbh1h0IZNOspDHFU9Wt0ZlT0 U7ulAeOhyYKHXNeT6qX0kxkZvXB5WQ4h8kTYRAPHX7kBahoQ74hIV+o+9vM7HKPn BUfmkwlzQ1XkPlYp8s9g8yTXBhy2E4GlV4qMD0bBgqKntrcapQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwdzr2zvdK/SjLrdCNCeZMMAT8hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGMzZDViNzYtODU2Ni0z OWYyLTljM2MtOWM3OTliMDk4M2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBroO4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqufHh1gDSFyhfs5pz6PKMkiSl6uW0C6AhlB37eQP9+/lITo3WomABA /VEWAtoId+xHvhCnUEHrJAYT9CmEA1wj4ygleyKlswSDz5+NS7sgL2NncI4rAp3K UgNPtHO3jP54RBw/ClFh0ImN7eicLn6VkUS7l9d2kGImwEz2BVRuiSYboGVAKtyp UF05dQ1p9N6ylSw/9fqVDOBkipkbKeqRoWcCgAIrkAX4g1le/DtbMTZMcbBX4k9S BK5kfMN/5qX1HX82O9YNo0Y8NJdXMpIl7Cdt/+ux8LL6Nmlt586MMmIxgzGQW8/T sXj2l/mTcXPnRlkRJdAGa03jNZgOqeE= -----END CERTIFICATE-----Generated at Fri Oct 10 17:57:09 2025 by rpki-client