$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/878d5f19-4462-3a7d-b6d8-8204485f2a99.roa File: 878d5f19-4462-3a7d-b6d8-8204485f2a99.roa (raw, json) Hash identifier: DhPGKqLj5RtYZg4ltEGMXsBH36ZixC0MC3Ey8VQKyIw= Subject key identifier: E2:68:49:29:60:4E:B7:11:14:66:3C:54:1E:C9:06:86:AD:13:23:F6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B8EAD0A338232CE21E93AC0C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/878d5f19-4462-3a7d-b6d8-8204485f2a99.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 7029 IP address blocks: 139.55.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ad:0a:33:82:32:ce:21:e9:3a:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=f7e1f61f-21e2-4741-93f2-f95b09e4f7a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9b:82:97:20:42:46:13:47:33:f2:fc:b3:5b: 8c:a9:6b:97:70:fa:bd:86:5a:cc:7b:16:75:2d:3b: 88:7d:ae:a4:30:24:e3:6f:9c:6d:f3:f6:9e:66:b4: f5:9a:5c:3d:6d:3e:71:e4:e6:d6:e2:79:04:bf:ba: 2b:51:ab:72:97:77:d0:8d:c2:4d:d9:91:91:bd:cd: 49:2a:17:8f:46:85:b2:c4:78:72:cc:08:ac:08:62: 5a:3c:2d:59:e4:c7:a2:98:7f:66:f5:91:81:2e:04: 10:30:e8:68:af:35:c7:8f:3b:58:8a:25:d6:4e:39: 1e:f3:df:30:49:81:41:45:e5:5d:34:d9:7e:95:29: a6:ae:5d:76:af:b8:be:fe:2a:7c:75:4b:2c:3f:b5: 64:60:16:61:01:ad:b5:65:6f:5d:62:38:99:2a:1d: f9:b3:24:65:b7:ed:77:cd:12:3a:84:d1:42:ec:55: 53:c6:d4:01:db:06:ed:2a:85:2e:07:1a:41:a9:e0: 78:68:3c:9b:c1:49:6d:0c:28:5e:cb:be:4a:b6:15: 0b:30:46:03:61:b0:11:c5:f4:dd:ba:17:88:f8:9b: b7:c7:ee:21:ec:3c:2a:53:5d:7a:ee:38:18:54:f0: 91:f1:05:91:95:79:bd:35:04:71:34:03:a6:29:eb: 47:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:68:49:29:60:4E:B7:11:14:66:3C:54:1E:C9:06:86:AD:13:23:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/878d5f19-4462-3a7d-b6d8-8204485f2a99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 139.55.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:67:f0:31:b7:9e:ed:9c:01:a9:7a:6c:4a:56:73:36:ae:ea: b5:5b:e3:e3:ea:1d:ff:fd:03:a8:bf:9e:4f:5b:99:5f:49:75: ce:88:de:4b:7b:2e:ef:91:15:d5:bf:80:b2:4c:3f:f9:36:ad: dd:9d:f9:2d:82:97:a4:a4:4f:1a:a4:b0:5a:2b:ed:4c:de:88: 04:dc:bb:3d:be:ba:24:de:4c:fb:e5:22:2e:7f:42:eb:74:2f: d9:4d:b3:74:0f:58:12:c8:10:c2:36:ab:43:89:9f:0b:69:1f: 03:de:de:80:a3:43:d7:19:46:2f:86:83:7c:66:b5:ee:24:a4: 17:3c:75:bc:79:29:36:b6:e7:fa:74:2c:01:0a:43:45:43:b0: e5:b6:60:79:78:55:43:c4:48:03:19:62:e9:b0:ef:24:b5:85: 35:29:f5:0d:44:cf:04:47:f0:6d:5b:f3:61:41:1d:28:1e:37: d0:b2:b8:d8:fa:a1:c3:82:5d:ca:28:da:f3:8e:46:2c:df:ec: e6:ab:13:81:53:62:e9:93:ac:d7:9b:cb:66:e4:e7:ac:1d:40: 62:39:f0:db:77:57:ac:60:36:70:68:ab:88:6d:ff:b7:d4:06: 7b:58:01:6d:38:8a:13:da:36:80:6b:d7:ad:18:0c:ed:1a:dd: 4a:b4:30:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrQozgjLOIek6wMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZjdlMWY2MWYtMjFlMi00NzQxLTkzZjItZjk1YjA5ZTRmN2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpuClyBCRhNHM/L8s1uMqWuXcPq9hlrMexZ1 LTuIfa6kMCTjb5xt8/aeZrT1mlw9bT5x5ObW4nkEv7orUatyl3fQjcJN2ZGRvc1J KhePRoWyxHhyzAisCGJaPC1Z5MeimH9m9ZGBLgQQMOhorzXHjztYiiXWTjke898w SYFBReVdNNl+lSmmrl12r7i+/ip8dUssP7VkYBZhAa21ZW9dYjiZKh35syRlt+13 zRI6hNFC7FVTxtQB2wbtKoUuBxpBqeB4aDybwUltDChey75KthULMEYDYbARxfTd uheI+Ju3x+4h7DwqU1167jgYVPCR8QWRlXm9NQRxNAOmKetHiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJoSSlgTrcRFGY8VB7JBoatEyP2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODc4ZDVmMTktNDQ2Mi0z YTdkLWI2ZDgtODIwNDQ4NWYyYTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBizfmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpn8DG3nu2cAal6bEpWczau6rVb4+PqHf/9A6i/nk9bmV9Jdc6I3kt7 Lu+RFdW/gLJMP/k2rd2d+S2Cl6SkTxqksFor7UzeiATcuz2+uiTeTPvlIi5/Qut0 L9lNs3QPWBLIEMI2q0OJnwtpHwPe3oCjQ9cZRi+Gg3xmte4kpBc8dbx5KTa25/p0 LAEKQ0VDsOW2YHl4VUPESAMZYumw7yS1hTUp9Q1EzwRH8G1b82FBHSgeN9CyuNj6 ocOCXcoo2vOORizf7OarE4FTYumTrNeby2bk56wdQGI58Nt3V6xgNnBoq4ht/7fU BntYAW04ihPaNoBr160YDO0a3Uq0MLI= -----END CERTIFICATE-----Generated at Mon Oct 20 09:43:57 2025 by rpki-client