$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0722c62d-81d2-3e55-afbb-1a92a0bc8c6b.roa File: 0722c62d-81d2-3e55-afbb-1a92a0bc8c6b.roa (raw, json) Hash identifier: xRUhCHrr0hO44vb/AP0OCHFTx7WazBZJbsqHkTVdkU0= Subject key identifier: F9:F4:86:9E:42:43:5A:85:D4:B7:1D:A3:2A:BE:BD:6A:E0:62:75:2E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B8EAD09D8F4FC649D0123EED0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0722c62d-81d2-3e55-afbb-1a92a0bc8c6b.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 7029 IP address blocks: 173.187.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ad:09:d8:f4:fc:64:9d:01:23:ee:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=fdfe3d4e-4078-4c0a-a780-2b5b7e94b4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9c:20:62:0c:bd:07:00:04:7a:f4:81:75:50: 2a:55:46:fa:a6:e1:e0:ce:6c:1e:4e:34:54:21:ef: 75:43:10:91:bd:53:79:b2:3b:62:d4:86:dd:38:79: 5e:32:03:63:47:2a:3b:2c:9d:30:32:d5:e0:3f:54: 55:a3:6a:88:1a:6d:97:15:d7:b2:63:dd:fd:8b:d3: cc:ee:ce:85:be:0c:c1:e1:54:79:85:4e:34:5c:1e: f0:d3:5c:cd:f0:e7:64:33:15:61:c4:0c:be:0e:e6: c7:ee:12:3b:a9:41:a9:29:77:78:d7:a5:76:5c:87: 46:2c:96:2e:0b:eb:b2:a2:7d:4a:ec:c7:05:b6:eb: 24:35:f3:c2:42:a2:75:a9:5b:2d:98:58:01:6c:39: 5e:ca:65:e5:2e:85:6f:3a:df:d1:0f:f8:b7:d0:9f: 14:db:08:f6:80:41:29:48:63:4f:ba:49:3f:67:a8: 72:5f:fc:74:55:47:12:fd:7a:f0:0a:c2:0b:1f:a1: ea:f1:7a:35:33:ca:41:74:84:cf:33:e0:bf:c5:e9: df:b9:04:ae:3a:06:d1:85:2d:fc:6e:d0:17:21:05: a2:6c:06:d0:ee:cc:00:87:2d:0e:7b:a1:6e:9e:39: 63:91:90:f9:e0:ba:68:b3:6d:c5:a0:74:82:04:2e: 15:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F4:86:9E:42:43:5A:85:D4:B7:1D:A3:2A:BE:BD:6A:E0:62:75:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0722c62d-81d2-3e55-afbb-1a92a0bc8c6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:19:26:05:0f:8a:14:bc:d5:c1:66:c8:66:15:24:3d:38:59: ee:cd:d0:85:b5:64:92:24:39:0d:bb:2f:61:d1:5a:a1:30:24: af:9e:4a:07:e7:7c:46:a9:dd:ee:37:6e:ef:4e:67:a4:9c:f3: c0:a1:e1:5d:a1:84:7d:46:21:09:f0:3c:03:e4:a4:e6:2e:46: f2:bd:e7:7b:e8:13:bd:76:52:1b:95:95:64:2a:dc:d2:be:e3: f3:c7:43:78:8b:bd:57:5d:5d:c6:b9:e4:65:05:f1:40:77:88: ee:41:6a:b5:b2:36:0d:1d:4d:bb:ce:d4:56:a2:25:2f:7a:c8: 81:97:f7:cb:c9:79:c0:7b:16:57:23:a6:39:1c:0c:35:62:d1: 13:2e:c6:17:a9:18:b2:f4:c1:fd:e7:8c:f9:36:d3:72:92:f2: bd:f3:03:5a:80:54:dc:60:a9:36:43:c4:2f:78:24:99:34:7c: a1:ed:49:67:bf:c8:df:ab:cf:7c:a9:25:09:4c:65:c9:08:bf: f2:46:84:75:5b:25:0e:30:03:e9:63:8b:33:2a:a3:b7:08:38: 62:71:97:85:4d:75:7d:b7:34:56:7d:5d:9c:21:ef:93:48:ee: e7:69:13:02:93:78:b8:d0:3b:1a:06:e3:6e:73:c9:1c:9c:4d: 64:f9:5d:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrQnY9PxknQEj7tAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZmRmZTNkNGUtNDA3OC00YzBhLWE3ODAtMmI1YjdlOTRiNGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZwgYgy9BwAEevSBdVAqVUb6puHgzmweTjRU Ie91QxCRvVN5sjti1IbdOHleMgNjRyo7LJ0wMtXgP1RVo2qIGm2XFdeyY939i9PM 7s6FvgzB4VR5hU40XB7w01zN8OdkMxVhxAy+DubH7hI7qUGpKXd416V2XIdGLJYu C+uyon1K7McFtuskNfPCQqJ1qVstmFgBbDleymXlLoVvOt/RD/i30J8U2wj2gEEp SGNPukk/Z6hyX/x0VUcS/XrwCsILH6Hq8Xo1M8pBdITPM+C/xenfuQSuOgbRhS38 btAXIQWibAbQ7swAhy0Oe6FunjljkZD54Lpos23FoHSCBC4V+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPn0hp5CQ1qF1Lcdoyq+vWrgYnUuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDcyMmM2MmQtODFkMi0z ZTU1LWFmYmItMWE5MmEwYmM4YzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbt0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcZJgUPihS81cFmyGYVJD04We7N0IW1ZJIkOQ27L2HRWqEwJK+eSgfn fEap3e43bu9OZ6Sc88Ch4V2hhH1GIQnwPAPkpOYuRvK953voE712UhuVlWQq3NK+ 4/PHQ3iLvVddXca55GUF8UB3iO5BarWyNg0dTbvO1FaiJS96yIGX98vJecB7Flcj pjkcDDVi0RMuxhepGLL0wf3njPk203KS8r3zA1qAVNxgqTZDxC94JJk0fKHtSWe/ yN+rz3ypJQlMZckIv/JGhHVbJQ4wA+ljizMqo7cIOGJxl4VNdX23NFZ9XZwh75NI 7udpEwKTeLjQOxoG425zyRycTWT5XWg= -----END CERTIFICATE-----Generated at Mon Oct 20 03:22:22 2025 by rpki-client