$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f2756625-3400-3b21-b99a-4860555ace81.roa File: f2756625-3400-3b21-b99a-4860555ace81.roa (raw, json) Hash identifier: 7dfmc9yYPtjN480Ee0FIo3QJ8XLOtmtJfr74AmV1Xck= Subject key identifier: 01:17:50:21:52:9E:66:F2:A6:9B:E3:CF:E3:66:5A:69:FA:0A:ED:02 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3F1C554470778F87078B3B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f2756625-3400-3b21-b99a-4860555ace81.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 173.187.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:55:44:70:77:8f:87:07:8b:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=f1ca6c66-6d99-4b5c-ba09-9531f0e31291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3e:c4:20:e5:24:0a:3f:f5:d9:bb:f8:44:13: 71:45:e6:4f:8b:2c:9e:65:80:56:ca:3d:e7:2d:66: f1:cb:53:6a:75:fb:af:c9:c7:cd:46:a7:76:1d:ae: 9b:58:aa:41:d7:db:48:d2:0b:52:fb:6e:3b:94:3b: 36:2a:c2:68:53:a3:72:ca:af:09:00:8b:70:a4:f5: 48:83:d3:8b:61:d1:7b:40:fd:86:a6:e3:39:55:fe: 78:da:71:71:f3:64:11:af:27:ca:48:84:7a:cb:8f: 0e:0e:a4:fb:14:18:d2:8d:ae:cf:3e:ed:ba:5e:4e: 73:28:c8:73:39:ef:0f:ea:f5:bd:37:04:95:54:03: d8:ad:61:fe:a2:47:d5:88:07:3a:b1:6c:18:8a:79: 8f:a3:e6:95:4f:76:9c:3c:b3:f7:13:46:3e:28:44: 7e:cb:81:b5:e9:a4:50:1e:e7:9c:df:db:4a:98:31: 75:59:f8:7d:a8:b4:bc:4c:38:34:67:c8:1e:f0:fd: 81:91:95:a2:f0:5b:37:6f:a4:65:cb:71:3a:8b:05: 30:ac:18:93:76:4d:58:69:86:2c:3e:ef:3c:0f:84: ca:38:92:1f:4b:5f:0e:0a:ef:80:08:59:a7:04:1e: 57:ce:69:6e:62:3a:d5:25:99:1e:7c:d5:3a:64:30: 5f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:17:50:21:52:9E:66:F2:A6:9B:E3:CF:E3:66:5A:69:FA:0A:ED:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f2756625-3400-3b21-b99a-4860555ace81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:a5:b4:92:94:56:08:8e:43:be:22:5f:d6:c4:5b:f6:ec:46: a2:04:18:53:1e:6b:80:ef:cf:84:ac:e2:d4:65:56:db:15:60: a1:50:81:ca:30:6a:23:2a:84:b0:1e:83:32:eb:8c:df:ef:15: d2:da:be:84:cc:24:33:75:c3:e3:3a:c1:90:73:9f:5a:77:d1: 32:c5:ea:85:ff:ae:5c:ba:98:72:bc:23:80:e4:bd:44:3c:65: 28:cc:4d:45:2b:f8:34:60:da:10:92:f3:ba:3d:24:96:ea:b1: 36:78:b1:ee:0f:30:81:2d:a2:6a:50:b7:d1:0a:f8:ad:88:b3: a4:a7:d8:dc:de:e3:c3:7a:c3:5c:af:ca:e3:93:57:06:c2:b5: 4c:fd:b1:fb:92:36:ce:36:48:d6:56:16:93:32:5f:b3:57:98: fc:b2:ae:62:9b:06:8c:45:99:d6:c9:61:2a:12:8a:b7:7b:d0: 9e:dd:ee:2b:2b:b7:e3:a6:d4:41:00:83:d4:82:57:01:48:71: 38:55:6f:99:c5:33:38:2b:89:1e:cf:81:db:ef:72:97:fe:bc: 3e:9f:61:ce:73:79:45:a5:17:a9:5f:9c:4a:81:61:44:b1:da: 56:85:52:ce:f3:32:5e:6a:be:4c:7e:66:b7:e1:c8:b8:23:35: 1a:c3:f0:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HFVEcHePhweLO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk ZjFjYTZjNjYtNmQ5OS00YjVjLWJhMDktOTUzMWYwZTMxMjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5T7EIOUkCj/12bv4RBNxReZPiyyeZYBWyj3n LWbxy1NqdfuvycfNRqd2Ha6bWKpB19tI0gtS+247lDs2KsJoU6Nyyq8JAItwpPVI g9OLYdF7QP2GpuM5Vf542nFx82QRryfKSIR6y48ODqT7FBjSja7PPu26Xk5zKMhz Oe8P6vW9NwSVVAPYrWH+okfViAc6sWwYinmPo+aVT3acPLP3E0Y+KER+y4G16aRQ Huec39tKmDF1Wfh9qLS8TDg0Z8ge8P2BkZWi8Fs3b6Rly3E6iwUwrBiTdk1YaYYs Pu88D4TKOJIfS18OCu+ACFmnBB5XzmluYjrVJZkefNU6ZDBf6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEXUCFSnmbyppvjz+NmWmn6Cu0CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjI3NTY2MjUtMzQwMC0z YjIxLWI5OWEtNDg2MDU1NWFjZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiltJKUVgiOQ74iX9bEW/bsRqIEGFMea4Dvz4Ss4tRlVtsVYKFQgcow aiMqhLAegzLrjN/vFdLavoTMJDN1w+M6wZBzn1p30TLF6oX/rly6mHK8I4DkvUQ8 ZSjMTUUr+DRg2hCS87o9JJbqsTZ4se4PMIEtompQt9EK+K2Is6Sn2Nze48N6w1yv yuOTVwbCtUz9sfuSNs42SNZWFpMyX7NXmPyyrmKbBoxFmdbJYSoSird70J7d7isr t+Om1EEAg9SCVwFIcThVb5nFMzgriR7Pgdvvcpf+vD6fYc5zeUWlF6lfnEqBYUSx 2laFUs7zMl5qvkx+ZrfhyLgjNRrD8Fc= -----END CERTIFICATE-----Generated at Fri Oct 10 20:03:21 2025 by rpki-client