$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7b9e94ae-1878-33a9-9d1d-ef09867b01ef.roa File: 7b9e94ae-1878-33a9-9d1d-ef09867b01ef.roa (raw, json) Hash identifier: dM+1ge0gzKlndMwVZN9wAWls5o14FDSocRSzo9p+h+A= Subject key identifier: 0D:9D:09:1C:82:18:69:B3:79:31:9F:E6:59:B1:01:1E:C5:A6:05:32 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B92DD3E78CB250FE386C5B920 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7b9e94ae-1878-33a9-9d1d-ef09867b01ef.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 7029 IP address blocks: 67.140.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:3e:78:cb:25:0f:e3:86:c5:b9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=cce2605b-3f12-43f7-8b23-9746fa291759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0a:fc:57:b0:2b:fa:cc:75:2d:2b:3e:2a:4c: 3c:4b:57:f2:6e:63:5a:5f:25:33:99:d6:7d:65:2f: 3a:99:9c:fe:47:d9:b2:74:c0:b5:f6:68:07:c9:f9: 80:8d:19:f9:93:a2:e4:fb:19:b3:46:e8:96:73:4a: af:ef:55:e5:ce:2a:6a:97:ac:b1:be:b4:3e:b1:1e: 9c:f5:cc:56:1c:0e:24:e1:dc:62:30:4e:bd:88:97: 32:f4:18:21:88:7c:dc:3b:a8:bb:5d:df:e6:c3:6d: 51:b3:52:f8:81:63:fa:6d:46:59:b3:20:a1:7f:31: eb:0e:10:02:4f:c2:9e:42:e2:2a:62:57:13:12:f5: 69:2d:2f:37:5e:f1:6d:ed:05:a4:1b:fc:c8:18:e2: 50:48:97:a5:e5:62:ac:31:7c:f7:b7:e5:48:a5:39: 12:9c:d1:5d:95:6d:03:38:d2:88:bb:ee:f3:e2:34: 73:32:c3:13:31:69:af:e1:f6:35:97:9a:5a:5e:74: 74:07:10:7f:80:24:7c:75:88:c9:b7:e8:b2:10:7d: d9:9c:cd:b8:e2:8a:4a:e9:6a:20:6e:b2:b9:e0:14: f8:9e:4a:7b:5b:c8:64:2d:9e:77:67:b6:5d:f9:68: b7:f6:57:f9:f6:56:27:72:97:e2:3f:be:aa:0c:2c: 37:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9D:09:1C:82:18:69:B3:79:31:9F:E6:59:B1:01:1E:C5:A6:05:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7b9e94ae-1878-33a9-9d1d-ef09867b01ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:56:76:dc:ae:e6:ef:7f:12:9a:2a:a0:3e:29:e2:cf:41:f1: 8d:87:bb:ed:96:f5:ca:4a:4f:1e:1d:db:76:78:03:9d:83:4f: a8:71:37:3c:a5:07:8c:ec:c4:ee:00:7d:ec:8e:c7:d0:a8:93: 66:ff:d6:9c:68:82:8e:23:16:85:86:b7:60:3b:47:55:98:08: 41:b4:85:b9:7c:07:71:de:50:f0:f6:ba:79:03:dc:c2:af:76: a6:3e:72:bb:e6:44:e3:75:03:3b:96:d4:74:91:57:ad:86:1d: d4:ae:95:89:c6:10:d6:b3:54:c9:f4:82:73:c9:92:dc:3d:83: 6a:58:10:de:da:40:42:ae:ce:15:bd:51:f7:f9:e4:35:75:31: fb:36:f3:28:a5:8b:a1:18:7d:f7:7e:e8:83:58:4a:a3:72:16: f6:56:a7:ae:fe:d0:2f:b8:0e:3b:eb:83:09:84:f0:17:3c:b0: 8e:f0:1c:04:c0:2c:62:0a:85:6f:4c:7b:59:1d:09:8f:9d:d4: ee:c4:d4:9b:81:41:d5:fe:53:96:25:68:3d:0f:8a:68:c6:78: d2:13:94:67:b6:bf:d3:79:91:b0:7e:30:3f:a9:d4:c8:90:b9: 7a:4d:2c:48:be:cb:69:de:90:7b:46:43:c5:51:fb:3c:0d:3b: ee:88:c9:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3T54yyUP44bFuSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk Y2NlMjYwNWItM2YxMi00M2Y3LThiMjMtOTc0NmZhMjkxNzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAr8V7Ar+sx1LSs+Kkw8S1fybmNaXyUzmdZ9 ZS86mZz+R9mydMC19mgHyfmAjRn5k6Lk+xmzRuiWc0qv71Xlzipql6yxvrQ+sR6c 9cxWHA4k4dxiME69iJcy9BghiHzcO6i7Xd/mw21Rs1L4gWP6bUZZsyChfzHrDhAC T8KeQuIqYlcTEvVpLS83XvFt7QWkG/zIGOJQSJel5WKsMXz3t+VIpTkSnNFdlW0D ONKIu+7z4jRzMsMTMWmv4fY1l5paXnR0BxB/gCR8dYjJt+iyEH3ZnM244opK6Wog brK54BT4nkp7W8hkLZ53Z7Zd+Wi39lf59lYncpfiP76qDCw3UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2dCRyCGGmzeTGf5lmxAR7FpgUyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2I5ZTk0YWUtMTg3OC0z M2E5LTlkMWQtZWYwOTg2N2IwMWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ4yQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBWdtyu5u9/EpoqoD4p4s9B8Y2Hu+2W9cpKTx4d23Z4A52DT6hxNzyl B4zsxO4AfeyOx9Cok2b/1pxogo4jFoWGt2A7R1WYCEG0hbl8B3HeUPD2unkD3MKv dqY+crvmRON1AzuW1HSRV62GHdSulYnGENazVMn0gnPJktw9g2pYEN7aQEKuzhW9 Uff55DV1Mfs28yili6EYffd+6INYSqNyFvZWp67+0C+4DjvrgwmE8Bc8sI7wHATA LGIKhW9Me1kdCY+d1O7E1JuBQdX+U5YlaD0PimjGeNITlGe2v9N5kbB+MD+p1MiQ uXpNLEi+y2nekHtGQ8VR+zwNO+6IyYQ= -----END CERTIFICATE-----Generated at Mon Oct 20 10:36:43 2025 by rpki-client