$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d908694-4b69-3fea-bfc2-bb32d464284d.roa File: 4d908694-4b69-3fea-bfc2-bb32d464284d.roa (raw, json) Hash identifier: 2UCZyIGrDTiwUE7+rucN2olOFTydqEx4u5gq2JC/UIo= Subject key identifier: C6:8F:EC:9D:C7:EA:C7:08:87:16:99:55:DC:9B:E9:A7:8A:5C:7E:B2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B821E1FF2592033EEB6AEEC40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d908694-4b69-3fea-bfc2-bb32d464284d.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 7029 IP address blocks: 173.185.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1e:1f:f2:59:20:33:ee:b6:ae:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=6bdfa1de-14a1-4ccc-9290-6f289d010bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:93:34:0d:70:b4:0a:42:72:f5:e9:4b:4c:97: 84:3f:16:72:2a:b4:dd:64:8e:33:58:d4:79:61:ad: 38:9d:76:f6:93:de:41:4a:78:b3:92:0c:f9:09:5c: 17:d2:93:08:a5:b6:90:cb:b6:7c:80:3f:ed:aa:c0: 05:62:ae:70:2a:a9:aa:1b:0a:2a:18:2c:8f:56:02: 95:e2:2a:28:a4:65:5f:56:20:f6:2f:77:d3:df:43: a3:b0:0f:2c:91:e2:2b:ab:24:e8:b3:04:5d:a5:96: 5e:02:7a:e6:d4:d2:e9:80:6e:74:81:ef:56:16:c8: 2c:16:d4:4b:ed:4e:07:c0:da:5d:50:c8:4e:e3:72: f4:ed:3b:17:89:5e:8c:94:9a:ca:24:ec:ad:11:73: 6b:a0:50:dc:1d:1a:0f:4b:fd:a9:85:41:ca:7a:6b: 79:25:cc:8d:10:6d:6b:f0:2c:72:7d:11:45:92:bb: 82:50:0a:a2:28:fa:af:b5:d0:6b:cf:4b:d9:2f:3e: f4:fd:b8:f5:8a:bf:c5:c9:5a:13:99:d5:21:4a:be: 02:3e:6f:9e:07:59:dd:bd:02:c4:29:60:5d:8d:cb: ca:c1:06:19:e7:7c:01:6a:e7:76:23:b6:f1:9e:88: 85:83:b0:d3:8e:6f:35:9c:e7:86:50:f3:67:aa:fb: 87:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8F:EC:9D:C7:EA:C7:08:87:16:99:55:DC:9B:E9:A7:8A:5C:7E:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d908694-4b69-3fea-bfc2-bb32d464284d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ed:25:fd:3a:ff:b1:04:be:82:ba:fa:c2:9b:c5:fe:72:3b: b7:59:9b:48:c4:d9:a3:1d:8a:c6:b9:61:a0:72:18:97:cb:07: 62:97:ed:18:7d:ac:13:f5:45:77:5c:ad:c6:ba:e5:47:5e:ec: b5:1f:5f:42:9f:05:c0:0a:34:29:f4:ee:b1:e6:9e:79:16:e8: b8:45:5f:ff:9e:2a:09:c1:9e:98:aa:6a:1f:e0:59:43:f4:ab: da:af:0b:bf:cb:d3:f2:e9:45:de:7d:11:cb:d1:49:06:01:77: 03:56:1f:e7:18:6a:89:78:b6:66:26:43:a4:d4:f9:de:3c:36: b5:2d:f3:71:08:84:69:32:f8:77:ea:d9:47:62:d3:0d:ba:77: 47:f7:59:52:98:cc:87:f9:86:ae:04:af:d4:b9:a2:ba:e1:b1: b6:7f:8b:58:07:e1:64:8b:2b:16:58:d4:14:a8:d3:b2:37:72: 96:e5:c9:c9:cb:67:34:7a:e3:75:81:a5:45:78:11:a3:0b:79: 6f:24:6d:b4:fd:1e:fe:ab:74:b6:ac:d5:d0:7b:20:73:0e:6c: 45:cd:f6:93:19:ae:e3:d6:ce:65:86:fb:5c:09:6b:9c:3a:05: bc:b4:ea:38:e6:5a:cd:d0:21:ca:79:93:73:30:bb:3b:46:3f: 02:af:a9:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHh/yWSAz7rau7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NmJkZmExZGUtMTRhMS00Y2NjLTkyOTAtNmYyODlkMDEwYmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpM0DXC0CkJy9elLTJeEPxZyKrTdZI4zWNR5 Ya04nXb2k95BSnizkgz5CVwX0pMIpbaQy7Z8gD/tqsAFYq5wKqmqGwoqGCyPVgKV 4ioopGVfViD2L3fT30OjsA8skeIrqyToswRdpZZeAnrm1NLpgG50ge9WFsgsFtRL 7U4HwNpdUMhO43L07TsXiV6MlJrKJOytEXNroFDcHRoPS/2phUHKemt5JcyNEG1r 8CxyfRFFkruCUAqiKPqvtdBrz0vZLz70/bj1ir/FyVoTmdUhSr4CPm+eB1ndvQLE KWBdjcvKwQYZ53wBaud2I7bxnoiFg7DTjm81nOeGUPNnqvuHJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMaP7J3H6scIhxaZVdyb6aeKXH6yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGQ5MDg2OTQtNGI2OS0z ZmVhLWJmYzItYmIzMmQ0NjQyODRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbnSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXtJf06/7EEvoK6+sKbxf5yO7dZm0jE2aMdisa5YaByGJfLB2KX7Rh9 rBP1RXdcrca65Ude7LUfX0KfBcAKNCn07rHmnnkW6LhFX/+eKgnBnpiqah/gWUP0 q9qvC7/L0/LpRd59EcvRSQYBdwNWH+cYaol4tmYmQ6TU+d48NrUt83EIhGky+Hfq 2Udi0w26d0f3WVKYzIf5hq4Er9S5orrhsbZ/i1gH4WSLKxZY1BSo07I3cpblycnL ZzR643WBpUV4EaMLeW8kbbT9Hv6rdLas1dB7IHMObEXN9pMZruPWzmWG+1wJa5w6 Bby06jjmWs3QIcp5k3MwuztGPwKvqQs= -----END CERTIFICATE-----Generated at Mon Oct 20 08:05:18 2025 by rpki-client