$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e3254a01-a9a7-306b-97e6-f2a4cdc2ea7d.roa File: e3254a01-a9a7-306b-97e6-f2a4cdc2ea7d.roa (raw, json) Hash identifier: Jqc702zvy3ouH9gaWdVQ+7f3eiIHJdefQjhYu6lONPs= Subject key identifier: C8:47:CF:EF:4D:49:47:27:6A:56:50:9C:88:B8:38:76:73:91:38:24 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2E5C58AFA4F4BA30F2017E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e3254a01-a9a7-306b-97e6-f2a4cdc2ea7d.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 173.185.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:58:af:a4:f4:ba:30:f2:01:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=62b829db-fbcc-40d2-b14e-2330b9d5af98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1c:2c:04:65:14:a8:f1:d4:d9:ca:28:dc:cb: 08:46:04:6c:56:ed:5e:f2:4e:e6:10:aa:cd:71:a8: f9:1e:1c:a6:53:b6:17:e4:24:0e:0f:cb:ab:c8:d4: a9:5b:c5:4b:6d:3c:3d:35:6e:34:24:bc:04:10:73: 21:4b:78:60:bf:c0:69:bd:b1:cf:8c:39:1d:2e:b0: ba:ae:b7:00:c1:d4:b8:f9:f7:e8:92:7d:ff:97:0c: 3b:ba:07:4d:db:86:1e:8f:1e:e4:42:70:a7:db:be: 76:ed:b9:76:a6:6a:dd:6a:34:41:5b:43:bf:0b:7f: c9:87:f0:d8:66:6d:45:b7:88:c7:c9:90:1e:3e:e8: 6b:11:75:2b:30:b6:75:14:a0:66:65:e6:59:04:ae: 12:41:07:c3:1b:c0:79:e1:28:17:35:45:8a:e8:fe: 01:33:d9:be:1a:1a:a0:1b:d2:8f:89:aa:a3:6d:94: d1:5b:df:18:08:ee:92:49:c0:97:02:4a:5b:49:45: 53:37:23:9a:a9:52:9f:2b:4c:83:98:cb:d7:8c:6a: 3b:df:11:e7:dc:04:0d:29:70:e2:05:64:23:2d:a9: 32:24:fc:75:f5:b9:c9:74:57:c2:1a:8a:45:16:9a: bb:27:ea:d4:5e:ed:6e:9d:11:0a:c0:42:e3:97:36: f8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:47:CF:EF:4D:49:47:27:6A:56:50:9C:88:B8:38:76:73:91:38:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e3254a01-a9a7-306b-97e6-f2a4cdc2ea7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:8b:6c:19:c6:e5:30:8f:f8:a1:9c:a5:f1:7c:9d:29:6d:72: ae:3a:fb:bd:51:c1:e0:c6:b9:8b:d5:f1:38:ce:30:59:69:a8: 9b:b4:c3:c4:b2:1b:20:6e:76:9e:76:9e:fb:15:0c:da:f3:bf: 78:59:bb:46:a8:44:a4:30:19:3e:68:d5:8e:bb:31:2c:22:9c: c9:75:d4:bb:cd:7b:c9:0c:a9:7a:dc:9e:78:c2:e5:ce:59:b0: e8:5e:3c:c4:b1:31:b8:5e:65:01:4e:6c:a7:ed:17:d5:7e:7b: 74:3a:86:7c:81:ce:67:1b:27:2e:54:1f:67:7e:85:4b:09:b2: 1c:45:d4:89:2e:68:4f:27:de:b9:f4:35:4f:39:3b:77:c5:03: d3:a3:5b:b6:7e:0e:66:e8:ec:85:3b:b1:ee:3b:50:4a:1a:9b: 93:12:d5:b8:91:3b:ff:ef:b5:e6:4a:ec:91:60:e8:04:47:6a: ce:1e:47:4e:18:81:98:06:04:88:b4:2c:88:31:4a:71:87:ad: 4e:da:16:54:02:45:1a:72:4d:cf:f7:7d:5a:ab:8c:1f:5e:c4: 68:22:05:ba:61:76:23:32:29:fc:24:16:03:1c:ac:ab:b7:aa: 7a:2b:fd:4c:9d:bc:61:dc:e3:d1:7d:59:43:df:70:51:29:7b: af:eb:e6:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXFivpPS6MPIBfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk NjJiODI5ZGItZmJjYy00MGQyLWIxNGUtMjMzMGI5ZDVhZjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBwsBGUUqPHU2coo3MsIRgRsVu1e8k7mEKrN caj5HhymU7YX5CQOD8uryNSpW8VLbTw9NW40JLwEEHMhS3hgv8BpvbHPjDkdLrC6 rrcAwdS4+ffokn3/lww7ugdN24Yejx7kQnCn27527bl2pmrdajRBW0O/C3/Jh/DY Zm1Ft4jHyZAePuhrEXUrMLZ1FKBmZeZZBK4SQQfDG8B54SgXNUWK6P4BM9m+Ghqg G9KPiaqjbZTRW98YCO6SScCXAkpbSUVTNyOaqVKfK0yDmMvXjGo73xHn3AQNKXDi BWQjLakyJPx19bnJdFfCGopFFpq7J+rUXu1unREKwELjlzb4mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhHz+9NSUcnalZQnIi4OHZzkTgkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTMyNTRhMDEtYTlhNy0z MDZiLTk3ZTYtZjJhNGNkYzJlYTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbnXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2LbBnG5TCP+KGcpfF8nSltcq46+71RweDGuYvV8TjOMFlpqJu0w8Sy GyBudp52nvsVDNrzv3hZu0aoRKQwGT5o1Y67MSwinMl11LvNe8kMqXrcnnjC5c5Z sOhePMSxMbheZQFObKftF9V+e3Q6hnyBzmcbJy5UH2d+hUsJshxF1IkuaE8n3rn0 NU85O3fFA9OjW7Z+Dmbo7IU7se47UEoam5MS1biRO//vteZK7JFg6ARHas4eR04Y gZgGBIi0LIgxSnGHrU7aFlQCRRpyTc/3fVqrjB9exGgiBbphdiMyKfwkFgMcrKu3 qnor/UydvGHc49F9WUPfcFEpe6/r5l0= -----END CERTIFICATE-----Generated at Fri Oct 10 17:49:15 2025 by rpki-client