$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0aceaa06-2a51-3a36-be8a-d1b45e35b570.roa File: 0aceaa06-2a51-3a36-be8a-d1b45e35b570.roa (raw, json) Hash identifier: 9qkFGaR+Of7os5LHkrvNf0fLKmBH8m7lFSp8huLvFoY= Subject key identifier: 5F:F2:F4:4D:9D:EB:CF:B7:66:28:72:97:C1:D5:D3:50:52:BD:B6:D1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B94422077E3D32AA1491FFC20 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0aceaa06-2a51-3a36-be8a-d1b45e35b570.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 7029 IP address blocks: 67.141.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:20:77:e3:d3:2a:a1:49:1f:fc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=f49a8005-7011-42d1-9fff-554fc6c186a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cf:46:56:f6:ac:79:5d:12:41:00:99:75:8f: 69:5a:04:af:b3:7c:ca:53:7a:d0:29:b7:62:ee:43: 5f:0e:e2:ba:b6:e4:25:06:63:c9:7c:05:fa:0b:8a: 5f:4d:74:e4:e4:6b:15:f1:26:99:71:a2:34:c9:1b: e6:4c:5e:c6:bd:1e:68:cf:c1:39:04:91:af:66:3f: 77:7f:18:98:ac:0a:d5:09:f9:df:71:38:42:47:53: 8d:40:d0:ae:16:c4:9f:ca:40:9d:d5:8b:a5:2d:0d: a5:8b:53:8b:7e:c9:e1:36:f3:49:b8:e3:fe:f7:0d: 9e:84:8f:1e:6b:6c:9c:af:a3:42:5f:28:42:7b:a5: 54:9c:19:60:36:cf:5e:01:05:9f:d9:27:53:a2:a5: ee:14:82:c9:98:44:ea:55:2b:7e:49:06:d2:dd:90: 3c:1e:14:e4:ac:91:82:7e:e0:72:59:27:4c:fc:4a: f5:67:98:5e:00:4c:c8:8e:56:09:3f:12:c6:db:f7: 6e:8e:71:95:2d:be:ee:9b:c9:11:86:3a:52:2d:0f: d1:fd:e9:e3:34:3b:2c:5d:93:56:e7:7f:2f:5b:27: cd:8a:ff:57:28:7a:fa:62:e9:97:96:65:e9:ff:f7: f2:c1:cb:7f:d8:a1:80:9c:45:05:3a:5b:e3:2b:74: 32:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F2:F4:4D:9D:EB:CF:B7:66:28:72:97:C1:D5:D3:50:52:BD:B6:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0aceaa06-2a51-3a36-be8a-d1b45e35b570.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:53:74:23:33:e6:36:09:48:90:87:f1:21:e6:0f:81:c0:59: f8:19:27:dd:99:f9:d1:03:72:dd:63:97:5e:f7:4f:7b:7e:39: 99:f6:68:7c:2d:26:f6:27:2f:23:3d:b0:47:2a:e6:0c:f7:51: 9f:e9:8c:21:11:7b:fe:e9:50:8f:64:db:85:66:30:92:bf:8b: be:85:e2:14:ef:45:88:6c:dc:4d:45:52:fa:1c:24:74:61:8f: 53:c5:ba:a2:1f:c5:00:9f:f2:aa:bf:fe:60:b5:7d:f8:a7:5b: 9f:e2:33:d3:03:4e:e3:08:8b:04:3d:d6:d5:6a:bf:14:b8:b5: b1:dd:e7:e4:50:ab:de:64:21:b3:9e:e8:0d:6d:1f:bd:4b:dd: b6:47:53:f8:fe:83:82:01:f7:6d:d1:0a:60:e1:24:5b:a5:03: 62:cd:e8:be:7d:bd:5d:a5:af:b9:c1:4a:b1:e9:b9:e8:49:2f: a4:f7:0a:59:4e:ad:06:d4:e9:2e:9d:cc:33:ed:67:ef:37:44: 67:ab:84:f5:c0:12:d6:bd:6e:37:06:3c:1e:7d:39:a1:3a:05: 79:fa:39:19:d0:08:d1:c1:4b:12:67:37:35:d6:f2:3e:63:c6: f7:ba:8f:4f:2f:b0:a2:3d:86:e1:9b:42:40:93:18:0e:9b:d4: 44:bf:5b:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQiB349MqoUkf/CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk ZjQ5YTgwMDUtNzAxMS00MmQxLTlmZmYtNTU0ZmM2YzE4NmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM9GVvaseV0SQQCZdY9pWgSvs3zKU3rQKbdi 7kNfDuK6tuQlBmPJfAX6C4pfTXTk5GsV8SaZcaI0yRvmTF7GvR5oz8E5BJGvZj93 fxiYrArVCfnfcThCR1ONQNCuFsSfykCd1YulLQ2li1OLfsnhNvNJuOP+9w2ehI8e a2ycr6NCXyhCe6VUnBlgNs9eAQWf2SdToqXuFILJmETqVSt+SQbS3ZA8HhTkrJGC fuByWSdM/Er1Z5heAEzIjlYJPxLG2/dujnGVLb7um8kRhjpSLQ/R/enjNDssXZNW 538vWyfNiv9XKHr6YumXlmXp//fywct/2KGAnEUFOlvjK3QyJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/y9E2d68+3Zihyl8HV01BSvbbRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGFjZWFhMDYtMmE1MS0z YTM2LWJlOGEtZDFiNDVlMzViNTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ42gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJTdCMz5jYJSJCH8SHmD4HAWfgZJ92Z+dEDct1jl173T3t+OZn2aHwt JvYnLyM9sEcq5gz3UZ/pjCERe/7pUI9k24VmMJK/i76F4hTvRYhs3E1FUvocJHRh j1PFuqIfxQCf8qq//mC1ffinW5/iM9MDTuMIiwQ91tVqvxS4tbHd5+RQq95kIbOe 6A1tH71L3bZHU/j+g4IB923RCmDhJFulA2LN6L59vV2lr7nBSrHpuehJL6T3CllO rQbU6S6dzDPtZ+83RGerhPXAEta9bjcGPB59OaE6BXn6ORnQCNHBSxJnNzXW8j5j xve6j08vsKI9huGbQkCTGA6b1ES/Wwk= -----END CERTIFICATE-----Generated at Mon Oct 20 15:13:29 2025 by rpki-client