$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/63de0ba5-a548-32b6-a9ec-9253d50ce8d1.roa File: 63de0ba5-a548-32b6-a9ec-9253d50ce8d1.roa (raw, json) Hash identifier: glp8y8l+R9uIJx2+LC+iE4xZXM4W1KCd6y3aogTqsko= Subject key identifier: AE:42:34:6C:66:2C:67:4C:A6:A4:9F:53:0E:0C:C3:5E:8A:69:87:8F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B28C6EAD70514F17FEBA535C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/63de0ba5-a548-32b6-a9ec-9253d50ce8d1.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 27338 IP address blocks: 74.10.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:ea:d7:05:14:f1:7f:eb:a5:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=b2fcd764-c21f-4042-b5db-2b026cd785ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:78:94:43:f4:97:3b:69:3d:47:80:01:8e:9b: fd:4f:2c:56:a7:7c:15:20:ee:0b:dc:c5:a1:c6:fd: c4:67:42:04:cd:98:d1:2a:91:14:12:04:29:37:cb: 76:bb:d3:b4:5f:3a:70:63:63:aa:3b:04:9a:0c:f6: 10:36:7f:8f:89:4b:bf:8b:b9:69:b1:4d:d9:1e:2b: 71:47:4e:4b:79:49:a1:78:9f:bd:12:b6:ff:82:e9: d3:79:10:cc:92:71:49:32:34:a2:78:4e:03:63:77: e6:8f:82:0e:71:13:08:08:70:94:5c:cf:32:eb:76: de:73:8f:fc:65:8e:38:99:40:77:67:4e:1d:d7:79: ec:78:d5:61:66:71:f8:b1:2e:94:50:45:97:30:d9: 31:a1:19:1e:98:b1:12:6b:d6:42:89:66:e1:d2:26: b5:a4:11:68:18:6d:e0:68:bb:ce:6e:88:69:00:cc: fe:a1:82:cb:16:16:55:2f:3d:bf:78:19:b4:be:38: 8a:d9:2f:af:d9:43:a9:a2:4a:49:dc:6a:ee:41:9e: 6b:2a:d8:56:6c:27:dc:cb:28:9a:22:e4:8d:55:9e: 3f:71:2e:ae:74:60:4f:a2:00:29:ee:9f:38:aa:be: d6:6a:9b:94:d2:e7:99:c9:1e:84:5f:43:05:89:9e: 6e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:42:34:6C:66:2C:67:4C:A6:A4:9F:53:0E:0C:C3:5E:8A:69:87:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/63de0ba5-a548-32b6-a9ec-9253d50ce8d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.10.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:e3:55:7a:1b:ac:aa:7f:de:e0:49:a3:4b:ff:3f:f6:c4:5a: 16:69:55:15:14:dd:0c:40:e1:5c:18:54:0f:ee:2a:6c:0d:7f: f7:ac:42:e6:c9:fb:58:59:89:c1:89:03:f5:7c:fb:77:98:77: 8a:c0:53:da:5b:1d:7d:f4:f8:6a:6e:4b:af:dd:6e:3f:ff:b8: 16:78:06:7a:27:c7:9f:92:42:9f:a6:07:bf:8f:45:61:14:bc: 9c:1d:6d:6d:51:11:82:78:14:ed:ff:16:f0:ca:13:9b:1b:2e: 69:f4:c9:1b:0c:83:23:97:63:bc:e1:b7:5f:bb:28:ab:f0:7e: 41:5c:78:dc:29:34:72:f7:b0:61:84:c1:6d:31:0d:36:77:33: 9e:52:62:fc:5e:03:2c:8f:c5:1f:61:52:5e:a4:c3:15:ed:c3: 2f:32:27:61:83:1c:7f:6b:ff:69:d4:ea:74:bc:e3:82:ec:30: 6c:c5:7f:4a:1d:4d:ca:76:a0:dd:2f:a9:a2:60:c2:97:e0:13: 8f:50:c8:db:87:8e:68:ef:19:5a:98:de:66:d0:1c:a6:6d:1c: 71:cc:98:c8:59:95:04:9a:97:c7:2e:61:ec:82:7d:80:ad:37: 4f:fa:ff:26:06:55:80:c7:4f:79:6c:e4:2c:50:d7:9e:1d:a7: 0a:8d:aa:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxurXBRTxf+ulNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk YjJmY2Q3NjQtYzIxZi00MDQyLWI1ZGItMmIwMjZjZDc4NWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHiUQ/SXO2k9R4ABjpv9TyxWp3wVIO4L3MWh xv3EZ0IEzZjRKpEUEgQpN8t2u9O0XzpwY2OqOwSaDPYQNn+PiUu/i7lpsU3ZHitx R05LeUmheJ+9Erb/gunTeRDMknFJMjSieE4DY3fmj4IOcRMICHCUXM8y63bec4/8 ZY44mUB3Z04d13nseNVhZnH4sS6UUEWXMNkxoRkemLESa9ZCiWbh0ia1pBFoGG3g aLvObohpAMz+oYLLFhZVLz2/eBm0vjiK2S+v2UOpokpJ3GruQZ5rKthWbCfcyyia IuSNVZ4/cS6udGBPogAp7p84qr7WapuU0ueZyR6EX0MFiZ5upwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5CNGxmLGdMpqSfUw4Mw16KaYePMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjNkZTBiYTUtYTU0OC0z MmI2LWE5ZWMtOTI1M2Q1MGNlOGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgosMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATjVXobrKp/3uBJo0v/P/bEWhZpVRUU3QxA4VwYVA/uKmwNf/esQubJ +1hZicGJA/V8+3eYd4rAU9pbHX30+GpuS6/dbj//uBZ4Bnonx5+SQp+mB7+PRWEU vJwdbW1REYJ4FO3/FvDKE5sbLmn0yRsMgyOXY7zht1+7KKvwfkFceNwpNHL3sGGE wW0xDTZ3M55SYvxeAyyPxR9hUl6kwxXtwy8yJ2GDHH9r/2nU6nS844LsMGzFf0od Tcp2oN0vqaJgwpfgE49QyNuHjmjvGVqY3mbQHKZtHHHMmMhZlQSal8cuYeyCfYCt N0/6/yYGVYDHT3ls5CxQ154dpwqNqgE= -----END CERTIFICATE-----Generated at Mon Oct 20 12:03:45 2025 by rpki-client