$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a9b43e7-08dd-36ba-955c-641e74a58673.roa File: 5a9b43e7-08dd-36ba-955c-641e74a58673.roa (raw, json) Hash identifier: 4+eMeX32i7NBl2WWeUXld0rWnVZYPJJfneCEOAuX00o= Subject key identifier: 76:22:D7:93:7E:35:AE:35:2C:42:12:44:C4:10:40:B6:DB:BD:81:2B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC25BAC871A4410377F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a9b43e7-08dd-36ba-955c-641e74a58673.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 67.151.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c2:5b:ac:87:1a:44:10:37:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=a622f169-7a82-4961-8d85-635e6c4cc0ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:16:05:13:6f:6f:8a:35:95:04:b8:74:3b:99: 86:87:68:21:c2:12:eb:1a:22:56:4f:9f:c0:d8:ff: 00:79:18:97:91:d0:da:0b:ba:76:f0:dc:c6:70:76: b8:34:3b:9f:72:50:8c:16:2d:35:68:1c:0f:2d:5d: e6:62:2d:c5:e5:65:b4:39:92:b2:76:6e:a1:9e:59: 31:45:1d:3f:00:06:62:26:e2:57:a4:9c:c1:43:c7: 3b:e0:b7:c7:72:97:b0:e9:24:bb:b0:09:bb:bb:57: c7:bb:79:14:ea:42:8f:6e:8c:89:08:f3:af:87:2a: 1a:58:54:93:71:91:d1:4a:34:63:02:33:13:67:81: 01:95:ac:a9:45:4a:97:a8:e8:00:62:50:36:e0:a3: cc:b2:6b:26:e1:47:a7:a4:5d:ab:40:cf:66:5f:df: 5f:14:11:48:fe:88:08:a6:49:16:6c:7a:47:c1:4c: 79:7c:b4:b8:e3:e6:cc:3b:cd:21:99:c9:e2:a9:b5: 99:87:ea:4a:80:b6:ed:82:41:64:ee:7d:9c:96:7d: 96:4d:54:76:13:fd:16:73:ed:2a:43:42:5d:fb:9b: 75:e8:ef:03:bb:4f:5d:ef:3d:63:19:d8:56:e6:1a: 94:b0:b2:a8:6f:37:cb:99:42:25:c8:f2:8e:d0:71: 3f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:22:D7:93:7E:35:AE:35:2C:42:12:44:C4:10:40:B6:DB:BD:81:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a9b43e7-08dd-36ba-955c-641e74a58673.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.151.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:ab:8c:d1:a1:b0:bc:75:00:a2:8f:16:07:00:35:31:90:11: d5:26:0e:be:fd:45:32:13:08:c5:ef:fe:63:31:b1:03:92:35: 04:20:8b:db:a0:cd:d7:44:ef:90:ab:b0:41:33:d6:d4:91:bb: ef:ce:7a:b0:6b:06:90:c4:65:2e:73:27:97:8c:39:57:f5:87: 1b:0f:80:8b:77:5b:f7:5c:c0:a5:18:59:2d:7f:86:cd:c3:40: 6b:72:af:1f:15:a1:e8:aa:a2:93:79:d2:cd:6e:0d:2b:6d:c8: 18:44:c7:b3:1b:07:39:a4:77:30:c7:82:55:98:c6:75:3f:76: 84:f2:fe:ea:b1:2b:d2:e1:71:35:b8:11:ee:38:12:24:2b:af: 28:e8:73:d6:26:16:c5:3e:4f:c7:45:0f:d2:f8:69:b6:b4:a2: d4:88:1b:7d:d6:d6:77:5f:99:4b:e4:73:66:a9:cd:8e:7a:bf: d6:28:19:1d:30:45:b8:5e:17:e9:34:53:a6:05:c5:b4:70:cc: 79:e3:a4:3a:99:1f:a0:2d:00:8e:17:3c:72:0d:66:92:da:25: 6b:86:52:49:fc:09:05:a7:4d:15:b1:6a:de:3f:ce:6d:47:66: ef:a3:fe:48:ee:9e:b8:2c:b6:57:b1:3c:b9:ea:56:a6:ce:bc: 40:0e:45:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMJbrIcaRBA3fwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YTYyMmYxNjktN2E4Mi00OTYxLThkODUtNjM1ZTZjNGNjMGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhYFE29vijWVBLh0O5mGh2ghwhLrGiJWT5/A 2P8AeRiXkdDaC7p28NzGcHa4NDufclCMFi01aBwPLV3mYi3F5WW0OZKydm6hnlkx RR0/AAZiJuJXpJzBQ8c74LfHcpew6SS7sAm7u1fHu3kU6kKPboyJCPOvhyoaWFST cZHRSjRjAjMTZ4EBlaypRUqXqOgAYlA24KPMsmsm4UenpF2rQM9mX99fFBFI/ogI pkkWbHpHwUx5fLS44+bMO80hmcniqbWZh+pKgLbtgkFk7n2cln2WTVR2E/0Wc+0q Q0Jd+5t16O8Du09d7z1jGdhW5hqUsLKobzfLmUIlyPKO0HE/vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYi15N+Na41LEISRMQQQLbbvYErMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWE5YjQzZTctMDhkZC0z NmJhLTk1NWMtNjQxZTc0YTU4NjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ5fzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmrjNGhsLx1AKKPFgcANTGQEdUmDr79RTITCMXv/mMxsQOSNQQgi9ug zddE75CrsEEz1tSRu+/OerBrBpDEZS5zJ5eMOVf1hxsPgIt3W/dcwKUYWS1/hs3D QGtyrx8VoeiqopN50s1uDSttyBhEx7MbBzmkdzDHglWYxnU/doTy/uqxK9LhcTW4 Ee44EiQrryjoc9YmFsU+T8dFD9L4aba0otSIG33W1ndfmUvkc2apzY56v9YoGR0w RbheF+k0U6YFxbRwzHnjpDqZH6AtAI4XPHINZpLaJWuGUkn8CQWnTRWxat4/zm1H Zu+j/kjunrgstlexPLnqVqbOvEAORVI= -----END CERTIFICATE-----Generated at Mon Oct 20 06:32:18 2025 by rpki-client