$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/282bef38-7c98-31f3-9540-44db9761880d.roa File: 282bef38-7c98-31f3-9540-44db9761880d.roa (raw, json) Hash identifier: xpPO1CrI3p6eJ0GxkpE2l/Fr+n0/UNMpI0VQkjMcSHs= Subject key identifier: 70:90:9D:32:1D:88:F5:44:6D:2E:5B:15:A8:A9:A3:BF:E0:DC:63:01 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B95AA283C933EEB4124777506 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/282bef38-7c98-31f3-9540-44db9761880d.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7029 IP address blocks: 64.24.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:28:3c:93:3e:eb:41:24:77:75:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=a04b9dd3-cf25-4320-af72-cbd7b71ae65a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f3:2f:59:57:0f:03:d4:d0:49:45:6b:14:8a: 7f:5c:73:b4:1d:22:d9:50:6f:76:a1:7d:02:7b:ba: 57:a0:85:2b:a4:e4:82:ef:09:c6:f2:15:5c:e3:42: a5:b1:9d:48:43:ff:bb:7a:2d:25:00:ba:a9:71:e6: d8:bb:c5:7b:14:6d:25:08:10:6d:6d:d9:05:92:9e: 26:9f:4d:68:0b:22:19:a4:30:c6:a3:64:cf:fb:73: c7:76:24:23:c9:6b:35:56:72:56:f9:82:ce:d7:a6: 18:a5:a9:c2:5b:a2:28:54:6d:60:d9:43:fa:b8:07: da:0d:fc:0b:73:20:de:ea:b9:9a:f8:f0:2d:ae:59: 08:32:63:f4:dc:16:30:75:6e:36:c7:dd:61:63:7e: 39:43:57:94:af:2e:e9:74:03:92:d2:be:3e:3b:1b: 15:fe:48:aa:c9:3b:73:21:4c:99:df:2f:c1:59:bd: fd:29:d1:ef:fd:f3:64:40:d8:bf:1d:03:2f:97:b1: 6e:b0:52:ef:50:66:f9:2b:e3:b2:6f:4d:06:81:bf: 46:e7:e1:1b:c5:14:f2:d3:95:fc:b8:aa:ef:fd:58: df:f8:88:f1:62:74:34:2c:9d:d1:f5:bf:5b:9d:4f: af:da:53:4e:45:57:72:60:16:bb:65:06:14:9e:86: 8b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:90:9D:32:1D:88:F5:44:6D:2E:5B:15:A8:A9:A3:BF:E0:DC:63:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/282bef38-7c98-31f3-9540-44db9761880d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.24.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:43:f7:40:f3:8c:b7:11:ae:45:d0:f1:26:26:8a:ce:9b:56: 1f:63:bd:91:57:89:81:b3:4f:21:19:6a:50:1b:14:3b:ac:49: be:84:2c:8c:38:eb:29:c7:db:b5:51:5d:53:39:c7:be:05:80: d3:0c:b6:3a:33:6a:8a:ee:7a:35:f2:e0:ee:e9:b7:93:17:90: ff:3d:8c:e8:8d:33:8c:58:71:da:f7:74:6d:84:99:b5:22:64: 8a:7f:97:2f:c8:4e:5c:6a:7b:e3:44:7d:6d:6e:a8:1b:49:4b: 6f:30:d9:72:fa:b4:14:59:1a:3f:3b:8a:df:d3:77:8a:49:26: ab:33:f0:18:82:d2:9c:20:f0:4d:30:cf:bb:03:23:42:2f:54: ae:de:65:28:b3:e3:9a:68:49:eb:61:31:a3:0b:bf:3e:46:f4: f1:00:00:2b:f2:34:24:a8:7f:99:b0:d6:42:74:8c:94:02:6e: 66:05:2e:e1:72:ac:11:68:0d:a6:a6:65:e9:8e:a2:57:41:1c: 1b:e0:62:45:aa:93:60:f2:4f:27:19:e2:88:d6:5b:3a:55:1b: fb:0f:87:d7:52:45:c9:08:9b:f1:a3:b7:6e:58:99:9d:8f:ef: 29:b8:18:7f:9d:5b:d5:ac:24:25:75:5c:10:9a:21:f8:df:98: fb:ce:36:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqig8kz7rQSR3dQYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YTA0YjlkZDMtY2YyNS00MzIwLWFmNzItY2JkN2I3MWFlNjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPMvWVcPA9TQSUVrFIp/XHO0HSLZUG92oX0C e7pXoIUrpOSC7wnG8hVc40KlsZ1IQ/+7ei0lALqpcebYu8V7FG0lCBBtbdkFkp4m n01oCyIZpDDGo2TP+3PHdiQjyWs1VnJW+YLO16YYpanCW6IoVG1g2UP6uAfaDfwL cyDe6rma+PAtrlkIMmP03BYwdW42x91hY345Q1eUry7pdAOS0r4+OxsV/kiqyTtz IUyZ3y/BWb39KdHv/fNkQNi/HQMvl7FusFLvUGb5K+Oyb00Ggb9G5+EbxRTy05X8 uKrv/Vjf+IjxYnQ0LJ3R9b9bnU+v2lNORVdyYBa7ZQYUnoaLvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCQnTIdiPVEbS5bFaipo7/g3GMBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjgyYmVmMzgtN2M5OC0z MWYzLTk1NDAtNDRkYjk3NjE4ODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQBiQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpD90DzjLcRrkXQ8SYmis6bVh9jvZFXiYGzTyEZalAbFDusSb6ELIw4 6ynH27VRXVM5x74FgNMMtjozaoruejXy4O7pt5MXkP89jOiNM4xYcdr3dG2EmbUi ZIp/ly/ITlxqe+NEfW1uqBtJS28w2XL6tBRZGj87it/Td4pJJqsz8BiC0pwg8E0w z7sDI0IvVK7eZSiz45poSethMaMLvz5G9PEAACvyNCSof5mw1kJ0jJQCbmYFLuFy rBFoDaamZemOoldBHBvgYkWqk2DyTycZ4ojWWzpVG/sPh9dSRckIm/Gjt25YmZ2P 7ym4GH+dW9WsJCV1XBCaIfjfmPvONmU= -----END CERTIFICATE-----Generated at Tue Oct 21 07:17:36 2025 by rpki-client