$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11e7b337-02b9-3773-b8d3-007a653255a7.roa File: 11e7b337-02b9-3773-b8d3-007a653255a7.roa (raw, json) Hash identifier: 9QNhkW93D/Ip67IvmBylXjPPKwvjZewktVcMtSOaNu0= Subject key identifier: F3:A0:FD:C7:D3:86:2D:78:77:F8:1C:4E:2D:77:C3:E6:3E:78:49:B0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B92DD3F0EF6ED46D958E49440 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11e7b337-02b9-3773-b8d3-007a653255a7.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 7029 IP address blocks: 67.141.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:3f:0e:f6:ed:46:d9:58:e4:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=4747301d-0d0f-4149-a507-6db84c4f81e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:97:fe:aa:7e:30:e6:c0:12:46:d3:27:2d:38: 15:80:98:50:b9:94:a6:c6:72:95:70:99:b7:ed:8a: 62:1d:c0:90:f1:0b:b6:5b:49:01:31:f4:9e:3d:18: 33:d9:ee:a1:65:d6:92:d4:70:0e:10:8c:0a:ba:ba: 08:47:0c:ab:44:5a:0d:8b:07:61:ba:1c:53:c1:c7: e5:eb:6f:34:23:63:8e:0a:e8:61:7e:ca:b3:fd:30: 33:f4:9a:73:a4:0e:61:ad:2c:89:2f:10:fc:7f:83: 51:d7:ff:ad:00:18:62:7c:44:42:00:1b:b2:5d:32: 1b:2f:92:56:22:a9:ff:14:bb:0a:a7:ae:91:45:cd: f9:c8:8a:25:11:86:05:70:94:e6:c0:62:2b:28:03: 0f:b5:74:b9:45:8d:b8:85:10:31:7b:7d:a7:61:0f: 3c:6a:ba:02:2c:8f:4c:20:ad:8d:e6:82:fb:6d:61: 7d:db:a5:0f:bf:5a:c2:27:86:ca:0b:28:89:d0:26: 9e:c1:58:31:ea:95:b7:8c:b2:80:24:3c:f9:07:b8: 52:2a:5d:ac:4c:f0:ea:55:36:9d:2e:77:11:b3:4c: 0d:58:21:fd:d8:23:37:71:b7:1b:1d:fa:86:f1:6d: 73:b0:82:e2:fc:31:84:fe:c6:8e:49:c5:4a:3f:69: c0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A0:FD:C7:D3:86:2D:78:77:F8:1C:4E:2D:77:C3:E6:3E:78:49:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11e7b337-02b9-3773-b8d3-007a653255a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:0d:e2:39:11:86:b3:0e:b0:37:ab:bc:e4:8e:63:40:ce:e2: 57:80:04:f3:ee:7b:6c:94:94:90:0d:be:52:4a:ec:aa:1e:5d: b8:c3:34:ae:b2:a7:22:5f:39:1f:6f:5f:dc:65:fc:b1:d8:8e: 06:eb:56:d5:6a:ad:d8:9b:44:5a:4e:67:70:bd:fe:dc:1d:4c: 51:93:4b:e8:bd:22:5f:bc:f2:7c:b3:4f:8c:e5:15:95:54:37: 53:c7:7c:26:49:d6:80:1b:4c:13:af:10:b7:51:27:e7:68:69: 91:3a:e0:10:2c:9f:1e:f5:31:46:dd:df:6d:0c:cb:ff:fb:e4: d2:97:d8:af:d8:74:81:17:21:c6:37:1f:cf:50:79:c0:a2:e9: b0:32:ac:04:5c:ad:b4:7d:7a:fc:99:da:aa:68:39:10:77:33: 84:be:54:6f:c3:6c:a4:2b:6c:5e:c5:a3:51:f4:05:c8:37:6b: b9:95:6a:0d:23:df:f5:34:c3:bf:5d:02:37:01:7f:1e:81:5a: 42:c4:7e:9d:32:5f:54:1c:75:fb:cc:c8:8f:f4:18:30:8c:f1: 25:c6:71:98:d5:9f:8a:6c:4d:1a:62:2f:37:84:58:de:59:86: 53:ca:e9:37:50:be:db:7f:6c:be:bf:e6:a0:52:bd:c0:cd:89: b0:0b:15:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3T8O9u1G2VjklEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk NDc0NzMwMWQtMGQwZi00MTQ5LWE1MDctNmRiODRjNGY4MWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZf+qn4w5sASRtMnLTgVgJhQuZSmxnKVcJm3 7YpiHcCQ8Qu2W0kBMfSePRgz2e6hZdaS1HAOEIwKuroIRwyrRFoNiwdhuhxTwcfl 6280I2OOCuhhfsqz/TAz9JpzpA5hrSyJLxD8f4NR1/+tABhifERCABuyXTIbL5JW Iqn/FLsKp66RRc35yIolEYYFcJTmwGIrKAMPtXS5RY24hRAxe32nYQ88aroCLI9M IK2N5oL7bWF926UPv1rCJ4bKCyiJ0CaewVgx6pW3jLKAJDz5B7hSKl2sTPDqVTad LncRs0wNWCH92CM3cbcbHfqG8W1zsILi/DGE/saOScVKP2nA2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOg/cfThi14d/gcTi13w+Y+eEmwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTFlN2IzMzctMDJiOS0z NzczLWI4ZDMtMDA3YTY1MzI1NWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ438MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkN4jkRhrMOsDervOSOY0DO4leABPPue2yUlJANvlJK7KoeXbjDNK6y pyJfOR9vX9xl/LHYjgbrVtVqrdibRFpOZ3C9/twdTFGTS+i9Il+88nyzT4zlFZVU N1PHfCZJ1oAbTBOvELdRJ+doaZE64BAsnx71MUbd320My//75NKX2K/YdIEXIcY3 H89QecCi6bAyrARcrbR9evyZ2qpoORB3M4S+VG/DbKQrbF7Fo1H0Bcg3a7mVag0j 3/U0w79dAjcBfx6BWkLEfp0yX1QcdfvMyI/0GDCM8SXGcZjVn4psTRpiLzeEWN5Z hlPK6TdQvtt/bL6/5qBSvcDNibALFfY= -----END CERTIFICATE-----Generated at Mon Oct 20 10:14:35 2025 by rpki-client