$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/885c11da-75ed-30f3-be92-905354edd7ef.roa File: 885c11da-75ed-30f3-be92-905354edd7ef.roa (raw, json) Hash identifier: 21r1gE0mHJaWeHFBm8WhpEQ/q4aCJlo4pkLUTKj7Fgg= Subject key identifier: CD:EF:99:44:6F:AD:FB:B4:E9:7E:42:75:F9:CB:BB:2C:15:F1:18:3D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B9442209D55394E1BC3FA5800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/885c11da-75ed-30f3-be92-905354edd7ef.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 7029 IP address blocks: 173.189.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:20:9d:55:39:4e:1b:c3:fa:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=5b8b505e-0ba3-4376-b333-1103d5cfbd77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e7:97:80:f2:4c:2d:ec:c6:1b:cb:fd:24:1c: ce:ab:8d:fc:1f:d9:c1:32:02:1c:8f:b5:d2:77:b1: db:65:19:16:58:de:e3:cd:a3:2d:b7:e4:a8:99:1c: a0:b5:60:ff:e2:7c:4c:c7:91:04:e9:64:ea:47:07: 05:65:7e:bb:1a:5c:f2:b7:0e:f3:4f:fe:0a:64:c3: 36:a6:67:af:42:97:a3:be:41:37:a2:0c:99:e2:16: 7f:0e:74:59:e6:0b:40:90:22:63:ce:8e:8d:02:50: 93:b3:50:a8:6f:65:d7:bc:39:23:ec:ca:fe:24:e5: 83:65:1d:6c:bc:7d:0c:e0:b0:d5:fa:90:d4:2e:7e: a1:b0:43:48:f6:b1:6f:e5:1c:2d:c9:90:0e:24:61: 36:9f:b4:65:9b:3c:11:0e:34:50:42:bd:05:f5:8b: 64:53:96:3a:b2:e3:18:63:b9:84:86:86:3e:6b:18: 1f:c7:46:b2:40:ad:ff:65:95:c4:8d:aa:cb:5e:fe: a3:90:9c:9f:d2:04:af:ea:e2:32:f3:b9:70:5a:9c: fc:01:11:a8:c2:8b:d3:a7:52:74:95:7e:be:98:7f: b2:79:29:4a:4f:f7:30:53:a5:79:89:72:cc:ec:34: 9c:bb:4c:84:3a:13:60:31:d8:5c:c4:cc:29:11:2e: 25:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:EF:99:44:6F:AD:FB:B4:E9:7E:42:75:F9:CB:BB:2C:15:F1:18:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/885c11da-75ed-30f3-be92-905354edd7ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:41:63:fd:c2:9a:a6:e1:5a:9e:56:22:32:2c:ac:68:60:49: da:28:12:9b:82:c6:22:89:ad:a8:c1:24:b1:5f:17:fc:4a:17: ad:26:5c:c4:08:49:59:96:85:0a:a0:af:6b:26:88:fe:a3:7a: c5:a5:4d:c8:3e:36:65:a4:6c:70:a3:f8:18:5c:33:f6:7a:d5: b9:e9:57:22:46:00:83:cf:30:bc:1c:3f:7c:3a:69:e6:8b:95: f8:04:2b:19:0a:f9:93:ba:d7:34:33:aa:a6:19:fd:d9:84:4e: 3d:ce:b5:9e:da:e0:22:a1:a0:a9:8c:3f:88:de:be:90:86:7a: 3d:d2:b0:dd:a8:63:7e:cd:d8:41:4e:a5:15:3e:9e:26:02:ae: f4:92:d6:99:a3:05:07:85:cc:59:3d:54:0b:b3:d3:81:a6:18: c4:e0:e5:9c:08:f1:15:79:bc:1f:98:74:67:02:80:34:b2:36: 91:35:82:a2:9e:a9:17:66:c4:43:3c:19:c7:44:dc:23:95:6a: 91:12:26:8c:5c:d6:5d:b3:c6:2a:6c:fa:24:ac:ae:18:a2:79: b9:31:67:de:6b:9b:2e:00:d9:be:68:7e:87:f0:49:85:21:25: 62:8c:ed:e7:26:89:25:5f:f8:91:23:ea:b6:23:d9:35:28:cf: bb:dd:52:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQiCdVTlOG8P6WAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk NWI4YjUwNWUtMGJhMy00Mzc2LWIzMzMtMTEwM2Q1Y2ZiZDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqueXgPJMLezGG8v9JBzOq438H9nBMgIcj7XS d7HbZRkWWN7jzaMtt+SomRygtWD/4nxMx5EE6WTqRwcFZX67Glzytw7zT/4KZMM2 pmevQpejvkE3ogyZ4hZ/DnRZ5gtAkCJjzo6NAlCTs1Cob2XXvDkj7Mr+JOWDZR1s vH0M4LDV+pDULn6hsENI9rFv5RwtyZAOJGE2n7RlmzwRDjRQQr0F9YtkU5Y6suMY Y7mEhoY+axgfx0ayQK3/ZZXEjarLXv6jkJyf0gSv6uIy87lwWpz8ARGowovTp1J0 lX6+mH+yeSlKT/cwU6V5iXLM7DScu0yEOhNgMdhcxMwpES4lewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3vmURvrfu06X5CdfnLuywV8Rg9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODg1YzExZGEtNzVlZC0z MGYzLWJlOTItOTA1MzU0ZWRkN2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb1vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRBY/3CmqbhWp5WIjIsrGhgSdooEpuCxiKJrajBJLFfF/xKF60mXMQI SVmWhQqgr2smiP6jesWlTcg+NmWkbHCj+BhcM/Z61bnpVyJGAIPPMLwcP3w6aeaL lfgEKxkK+ZO61zQzqqYZ/dmETj3OtZ7a4CKhoKmMP4jevpCGej3SsN2oY37N2EFO pRU+niYCrvSS1pmjBQeFzFk9VAuz04GmGMTg5ZwI8RV5vB+YdGcCgDSyNpE1gqKe qRdmxEM8GcdE3COVapESJoxc1l2zxips+iSsrhiiebkxZ95rmy4A2b5ofofwSYUh JWKM7ecmiSVf+JEj6rYj2TUoz7vdUoA= -----END CERTIFICATE-----Generated at Mon Oct 20 14:00:30 2025 by rpki-client