$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1582a278-a9a0-34ec-b9a0-508aef382872.roa File: 1582a278-a9a0-34ec-b9a0-508aef382872.roa (raw, json) Hash identifier: rzHLD+8QNLq4XJCPqk8ifgExS1zNMqprl6e/VNP8/9A= Subject key identifier: B3:B7:3E:0E:B2:77:9A:6E:09:BD:49:81:56:6D:F6:23:BE:6B:A3:95 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B92DD3E159F07FFEFFFE19F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1582a278-a9a0-34ec-b9a0-508aef382872.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 7029 IP address blocks: 67.140.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:3e:15:9f:07:ff:ef:ff:e1:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=e7b7bfcf-4f90-4aa5-ac6a-e3be9dcda0cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:93:a8:75:e1:d8:94:5c:92:fd:3d:71:ee:52: 4f:ac:7c:da:73:88:b4:4a:8c:9e:fb:f6:b9:67:df: ac:3f:7b:f2:d9:1e:8b:3f:d9:36:13:1e:26:e1:65: b8:d2:85:c2:95:ef:4e:11:7f:81:f5:f0:f2:91:66: cb:be:a6:4f:e6:14:8c:76:95:9b:82:79:00:9f:65: ab:f0:d0:ab:27:1c:fa:c6:ed:74:8a:d8:30:cd:9e: d0:02:ce:80:8c:84:24:ed:39:b1:b9:53:8a:75:e4: b5:24:83:da:88:2a:f3:5f:0b:72:e4:2c:34:fb:21: cb:ef:5b:12:f9:08:c3:dc:8c:ff:d1:71:a8:c0:2d: 3b:9c:b3:70:bc:59:12:a9:84:bb:f5:a7:1c:c4:59: 25:93:dd:01:bd:0c:d5:d9:44:aa:da:6e:8e:17:ad: bd:6f:98:a4:e7:30:7f:69:8c:21:6e:4a:87:6c:c5: a3:5c:e0:7b:46:67:2e:04:b2:b3:3a:7c:a4:70:c5: b8:d1:e1:38:ba:70:97:55:c7:d5:13:40:9b:c6:1e: f4:65:31:50:6a:fe:77:fd:32:29:06:96:f7:01:01: 60:43:0e:4f:99:05:0b:46:34:39:ff:db:24:1f:9a: 04:5e:c7:a1:96:19:42:29:f3:5d:e7:58:6e:3c:6b: e1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B7:3E:0E:B2:77:9A:6E:09:BD:49:81:56:6D:F6:23:BE:6B:A3:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1582a278-a9a0-34ec-b9a0-508aef382872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:b0:5c:a7:99:82:19:48:e4:a9:a7:44:24:9c:7f:39:0d:36: 7f:dd:29:ec:c7:fe:dd:da:eb:f6:d7:76:3d:af:d7:eb:58:79: f1:24:0b:16:5c:80:10:92:c8:7b:d8:f3:57:b4:e9:6b:e2:6f: ed:31:34:9c:f9:04:d4:d8:c0:7d:b6:38:1d:9b:68:e7:be:7b: 80:4d:ce:58:81:2a:4b:3f:c7:1c:ff:c9:e4:91:7d:8c:e9:e4: 23:10:b9:cd:fe:a8:e3:8f:28:e3:43:68:8a:59:ab:32:cc:4d: 48:66:ea:87:20:65:20:f0:a9:b5:74:dd:a4:f9:1f:7d:5e:38: 21:36:ba:52:ea:a4:7b:6d:a7:39:a4:ae:8f:fa:3e:00:58:e5: f9:a2:d8:89:7e:cf:96:a7:2e:b5:bd:6f:8e:54:cd:4f:47:57: 6e:61:96:0d:9c:e7:be:53:bf:f8:87:0d:b4:40:97:14:37:f8: 63:40:2b:bc:15:e4:d7:a6:eb:51:e8:ce:88:eb:37:e8:84:e4: 3a:de:f3:18:21:a6:d9:81:6f:bd:00:a8:39:e7:9b:f2:98:4b: 66:f3:42:8d:f6:3a:75:27:9b:a9:8b:e3:d5:69:c7:76:b7:5c: d7:cc:d8:0e:4f:8a:2b:d1:38:a1:34:6e:fc:1b:05:0c:8a:47: 8a:c2:5c:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3T4Vnwf/7//hn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk ZTdiN2JmY2YtNGY5MC00YWE1LWFjNmEtZTNiZTlkY2RhMGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05OodeHYlFyS/T1x7lJPrHzac4i0Soye+/a5 Z9+sP3vy2R6LP9k2Ex4m4WW40oXCle9OEX+B9fDykWbLvqZP5hSMdpWbgnkAn2Wr 8NCrJxz6xu10itgwzZ7QAs6AjIQk7TmxuVOKdeS1JIPaiCrzXwty5Cw0+yHL71sS +QjD3Iz/0XGowC07nLNwvFkSqYS79accxFklk90BvQzV2USq2m6OF629b5ik5zB/ aYwhbkqHbMWjXOB7RmcuBLKzOnykcMW40eE4unCXVcfVE0Cbxh70ZTFQav53/TIp Bpb3AQFgQw5PmQULRjQ5/9skH5oEXsehlhlCKfNd51huPGvhgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLO3Pg6yd5puCb1JgVZt9iO+a6OVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTU4MmEyNzgtYTlhMC0z NGVjLWI5YTAtNTA4YWVmMzgyODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ4xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKwXKeZghlI5KmnRCScfzkNNn/dKezH/t3a6/bXdj2v1+tYefEkCxZc gBCSyHvY81e06Wvib+0xNJz5BNTYwH22OB2baOe+e4BNzliBKks/xxz/yeSRfYzp 5CMQuc3+qOOPKONDaIpZqzLMTUhm6ocgZSDwqbV03aT5H31eOCE2ulLqpHttpzmk ro/6PgBY5fmi2Il+z5anLrW9b45UzU9HV25hlg2c575Tv/iHDbRAlxQ3+GNAK7wV 5Nem61HozojrN+iE5Dre8xghptmBb70AqDnnm/KYS2bzQo32OnUnm6mL49Vpx3a3 XNfM2A5PiivROKE0bvwbBQyKR4rCXMA= -----END CERTIFICATE-----Generated at Mon Oct 20 08:37:25 2025 by rpki-client