$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64d7bc3d-01fa-3761-aa0d-05cbcd1ad392.roa File: 64d7bc3d-01fa-3761-aa0d-05cbcd1ad392.roa (raw, json) Hash identifier: 1qNB4rzLsls4O07RN/6m+k5nDW+WgCBX5nlB5w6AFsk= Subject key identifier: CC:6F:E3:86:1C:5B:E6:EF:A0:96:64:9A:E9:FB:99:0C:D3:4C:30:30 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B9442238375D83D15D6F08400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64d7bc3d-01fa-3761-aa0d-05cbcd1ad392.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 7029 IP address blocks: 151.213.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:23:83:75:d8:3d:15:d6:f0:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=455a51ca-442c-458f-b65c-e0a1e44811fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d0:af:bb:d8:c7:02:ca:43:7c:89:cd:c3:a4: d8:c2:b1:11:7b:92:4f:7a:87:5a:82:32:e7:3f:d3: e0:35:5f:b9:9c:7f:c9:0c:a2:75:0b:64:fe:9f:40: 16:6e:3d:1b:b8:6c:56:c2:d6:96:20:06:fc:7a:16: 05:78:30:75:32:26:c3:65:d2:de:8b:9d:50:82:c1: 1d:0b:c4:e5:f4:46:d3:7f:8f:16:bf:7f:ae:dc:14: de:04:83:4a:ba:09:e2:e5:12:cb:da:50:fa:a5:af: c0:0c:d3:5d:62:4a:04:79:6c:34:a3:32:23:00:e9: 6c:30:46:d0:1e:5e:f1:1d:1f:80:e6:e9:6f:42:33: 61:94:f0:18:be:8a:e0:f9:81:ae:d8:f4:99:51:8f: a3:ec:4e:4e:44:83:29:8e:c4:99:23:8f:ef:78:c4: cc:43:fe:24:74:08:0b:46:5e:4d:22:73:34:be:af: 84:3a:05:2b:86:6c:68:24:85:84:c1:09:77:92:10: 43:ce:72:f9:48:ea:e9:29:61:90:98:28:74:a7:18: 53:7b:54:15:b6:27:9f:f0:a2:13:ee:77:22:da:a3: c6:1c:a8:5b:3e:fc:d7:73:68:53:97:22:76:67:10: b2:b9:7d:f8:f5:00:df:4f:5e:c9:69:65:b0:4a:36: b6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6F:E3:86:1C:5B:E6:EF:A0:96:64:9A:E9:FB:99:0C:D3:4C:30:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64d7bc3d-01fa-3761-aa0d-05cbcd1ad392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:8d:8a:33:b0:d8:ed:73:39:f2:f5:c0:15:3a:4d:0d:2f:bb: 56:ae:41:2d:2a:fe:34:ce:5b:f0:c1:09:33:8e:55:4c:e4:6b: fe:ac:19:fd:f3:01:c5:09:5b:38:1f:40:a1:6e:6b:cb:d8:9a: 0b:fe:22:8f:61:ee:33:fd:f0:7a:14:e5:54:de:4d:cc:4a:b9: ba:ff:bf:33:f7:1a:e2:f6:ba:80:3f:6a:b7:d9:89:bc:a5:69: ae:b5:2c:c5:53:9d:df:de:72:b1:33:88:8b:9b:7d:71:52:d1: 9a:85:ae:62:84:41:22:21:93:2b:9a:11:84:9d:b3:48:87:f3: ba:ad:65:3f:35:dd:a7:58:5f:64:fe:eb:5e:af:44:ad:f7:0b: 3b:a0:f3:4e:cf:b4:40:ac:30:a2:f8:c7:f8:31:ef:0e:64:9d: f4:d3:53:53:99:32:c7:5d:e3:93:40:4a:cd:0e:3e:dd:59:e3: 20:b7:11:83:cb:bc:18:ae:2e:d2:ec:10:ad:52:76:45:1a:f3: ce:81:8f:23:95:3c:e4:fb:56:18:4f:07:e6:0a:a2:27:a3:40: 69:bd:c8:df:b2:9a:2a:7c:c0:42:4b:a2:d6:42:7d:ee:78:2f: ae:23:a2:a1:45:4f:99:5b:2e:e0:08:05:c4:3e:60:ed:2d:7d: ca:90:6b:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQiODddg9FdbwhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk NDU1YTUxY2EtNDQyYy00NThmLWI2NWMtZTBhMWU0NDgxMWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNCvu9jHAspDfInNw6TYwrERe5JPeodagjLn P9PgNV+5nH/JDKJ1C2T+n0AWbj0buGxWwtaWIAb8ehYFeDB1MibDZdLei51QgsEd C8Tl9EbTf48Wv3+u3BTeBINKugni5RLL2lD6pa/ADNNdYkoEeWw0ozIjAOlsMEbQ Hl7xHR+A5ulvQjNhlPAYvorg+YGu2PSZUY+j7E5ORIMpjsSZI4/veMTMQ/4kdAgL Rl5NInM0vq+EOgUrhmxoJIWEwQl3khBDznL5SOrpKWGQmCh0pxhTe1QVtief8KIT 7nci2qPGHKhbPvzXc2hTlyJ2ZxCyuX349QDfT17JaWWwSja2iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxv44YcW+bvoJZkmun7mQzTTDAwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjRkN2JjM2QtMDFmYS0z NzYxLWFhMGQtMDVjYmNkMWFkMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEl9XgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiNijOw2O1zOfL1wBU6TQ0vu1auQS0q/jTOW/DBCTOOVUzka/6sGf3z AcUJWzgfQKFua8vYmgv+Io9h7jP98HoU5VTeTcxKubr/vzP3GuL2uoA/arfZibyl aa61LMVTnd/ecrEziIubfXFS0ZqFrmKEQSIhkyuaEYSds0iH87qtZT813adYX2T+ 616vRK33Czug807PtECsMKL4x/gx7w5knfTTU1OZMsdd45NASs0OPt1Z4yC3EYPL vBiuLtLsEK1SdkUa886BjyOVPOT7VhhPB+YKoiejQGm9yN+ymip8wEJLotZCfe54 L64joqFFT5lbLuAIBcQ+YO0tfcqQa9A= -----END CERTIFICATE-----Generated at Mon Oct 20 07:07:55 2025 by rpki-client