$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ac4e2f2-1660-32a9-9900-e9690e843a51.roa File: 1ac4e2f2-1660-32a9-9900-e9690e843a51.roa (raw, json) Hash identifier: iwAEwjRmD1wOqyordWAIepsJ555FRXGUzFYH9zSb/wc= Subject key identifier: EE:81:4E:93:D0:40:44:0D:71:38:8E:FB:D4:10:C4:4B:A7:49:D2:90 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B7B21F6177CBCAC1D8C4BA480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ac4e2f2-1660-32a9-9900-e9690e843a51.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 7029 IP address blocks: 151.213.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:f6:17:7c:bc:ac:1d:8c:4b:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=89f58962-95f0-45d7-ba07-9647bc3f48a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:64:5f:d4:2b:ef:fb:c2:04:09:82:a4:fd:a2: f9:26:34:1b:cc:1a:6c:00:aa:85:86:e8:2e:5d:a8: a0:ce:f3:de:83:25:31:91:ca:c7:24:36:e9:7b:c5: c6:8f:d5:1a:72:1b:59:52:2d:e0:14:8b:15:7e:54: 17:7e:ba:7a:9d:7f:ec:80:b5:91:08:21:79:6f:b2: ba:bd:73:0f:09:41:53:80:19:72:03:f2:43:30:55: be:ac:a3:2f:b7:3f:0a:02:f1:04:8b:be:38:aa:9d: ba:2c:20:bf:fe:8f:0e:0a:a4:b9:8c:bd:ec:92:3d: f4:c6:bb:36:47:11:05:53:5f:f3:7a:8d:29:36:46: 64:fe:64:e8:e4:6a:bb:6c:bc:38:1e:5f:5b:a1:f7: fa:eb:0f:68:c5:59:e5:82:35:e0:9b:dd:3f:f4:cc: 68:87:f6:6b:9f:fe:c7:13:15:ab:67:65:1a:90:d2: 32:f6:6c:2a:a1:65:f2:51:39:3d:6a:2b:16:60:be: d8:93:31:5a:02:fb:34:cd:d9:6e:17:84:df:f2:7a: dd:3a:0a:ad:b6:1d:a0:a4:23:56:9a:9d:40:5d:84: 11:75:18:b1:5d:2c:ed:e9:67:4f:63:25:71:2e:8c: c1:a8:1d:d1:71:59:77:55:53:dc:93:e4:dc:af:b0: d7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:81:4E:93:D0:40:44:0D:71:38:8E:FB:D4:10:C4:4B:A7:49:D2:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ac4e2f2-1660-32a9-9900-e9690e843a51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:13:68:0e:a8:a6:c9:d3:df:a1:29:66:5d:be:c8:b7:6c:5e: ac:56:60:ae:71:a4:17:84:f6:ab:e9:7d:21:2b:10:dd:81:77: bf:57:4d:8a:a2:d9:94:cc:40:51:1b:03:de:a1:e6:22:b8:91: 9d:5a:68:28:77:e7:50:c3:9f:67:81:c7:a4:ed:e0:cb:f6:e8: 84:f8:64:33:f8:5a:c0:f3:f2:ff:bf:c6:46:c1:71:c5:af:64: f1:b3:28:a6:5e:3a:e3:13:4c:44:65:04:f6:62:99:83:2b:c8: 80:17:69:3d:f4:41:69:90:7d:ce:50:80:14:34:a6:33:43:79: b3:c9:44:1d:4a:28:d1:1a:b1:8e:ad:bd:d2:7c:36:58:22:e0: 42:be:ac:bc:65:d5:7b:ad:76:6d:21:19:43:7c:17:95:21:c3: f1:66:a3:cb:74:7c:68:f1:f8:1e:0b:34:b5:ab:4e:96:a7:c3: 5d:16:58:0e:cd:47:c3:66:f7:9d:a1:19:15:47:6a:40:e7:e4: ab:93:05:80:ae:cc:d8:5c:c8:a5:10:91:e5:6d:e6:35:77:a8: 47:c1:a7:52:e0:6f:22:be:38:65:d4:3a:46:1d:fa:59:55:4a: e1:bc:28:0e:99:e8:24:71:f2:7a:98:86:8b:3e:d8:9b:da:29: 90:f9:47:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7IfYXfLysHYxLpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk ODlmNTg5NjItOTVmMC00NWQ3LWJhMDctOTY0N2JjM2Y0OGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWRf1Cvv+8IECYKk/aL5JjQbzBpsAKqFhugu XaigzvPegyUxkcrHJDbpe8XGj9UachtZUi3gFIsVflQXfrp6nX/sgLWRCCF5b7K6 vXMPCUFTgBlyA/JDMFW+rKMvtz8KAvEEi744qp26LCC//o8OCqS5jL3skj30xrs2 RxEFU1/zeo0pNkZk/mTo5Gq7bLw4Hl9boff66w9oxVnlgjXgm90/9Mxoh/Zrn/7H ExWrZ2UakNIy9mwqoWXyUTk9aisWYL7YkzFaAvs0zdluF4Tf8nrdOgqtth2gpCNW mp1AXYQRdRixXSzt6WdPYyVxLozBqB3RcVl3VVPck+Tcr7DXLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6BTpPQQEQNcTiO+9QQxEunSdKQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWFjNGUyZjItMTY2MC0z MmE5LTk5MDAtZTk2OTBlODQzYTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl9WLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFETaA6opsnT36EpZl2+yLdsXqxWYK5xpBeE9qvpfSErEN2Bd79XTYqi 2ZTMQFEbA96h5iK4kZ1aaCh351DDn2eBx6Tt4Mv26IT4ZDP4WsDz8v+/xkbBccWv ZPGzKKZeOuMTTERlBPZimYMryIAXaT30QWmQfc5QgBQ0pjNDebPJRB1KKNEasY6t vdJ8Nlgi4EK+rLxl1Xutdm0hGUN8F5Uhw/Fmo8t0fGjx+B4LNLWrTpanw10WWA7N R8Nm952hGRVHakDn5KuTBYCuzNhcyKUQkeVt5jV3qEfBp1LgbyK+OGXUOkYd+llV SuG8KA6Z6CRx8nqYhos+2JvaKZD5R4s= -----END CERTIFICATE-----Generated at Mon Oct 20 07:01:30 2025 by rpki-client