$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9b93ebea-6362-3113-8de4-cffbc2fdeb5c.roa File: 9b93ebea-6362-3113-8de4-cffbc2fdeb5c.roa (raw, json) Hash identifier: 25IEZ57QSqcS3JyMBDMeEioTH9A+zgYx2Ltsn/MDVA0= Subject key identifier: 6D:C6:6B:7B:59:5E:C8:C4:49:40:93:D1:C2:4A:E5:D1:CB:F4:4C:A1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B7F525E64BF1214FDF3E6F200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9b93ebea-6362-3113-8de4-cffbc2fdeb5c.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 173.185.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:5e:64:bf:12:14:fd:f3:e6:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=da5c11f3-81e8-4015-a208-3ae62dee7b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:6d:85:9b:2c:e0:d6:28:a5:27:d3:5f:69:10: 85:bc:29:59:3d:58:6e:3a:b2:b5:ba:c5:88:3e:64: 44:88:f0:48:6d:d2:34:39:d9:c5:81:28:08:ec:3c: ad:34:a2:59:32:6b:2d:94:54:a2:f2:ad:56:b1:30: 39:b3:ce:d0:eb:51:13:d9:e6:e3:1e:cb:df:8f:07: b7:79:f7:18:89:1b:9f:a5:af:45:20:70:24:46:8d: 6d:fa:b9:ad:df:37:cb:d0:0a:ef:d7:64:f3:18:f6: 9b:10:cb:fb:77:ba:91:47:81:eb:03:4a:54:97:8b: ba:97:81:6e:66:de:1d:19:88:c2:72:66:96:26:f4: ee:03:8c:c1:e9:86:46:d1:80:61:13:8c:3e:65:c1: ea:f1:dd:4f:d6:09:4b:2c:03:72:3b:75:1c:1a:a1: 27:8e:f4:45:74:6f:03:f9:01:eb:f1:a3:ac:19:24: f3:52:02:3b:2c:90:a2:d4:13:d9:db:75:2d:36:3b: 9f:2d:5d:7b:c4:a7:95:15:5b:b7:a4:56:8c:54:a9: 9c:ae:5b:7d:de:da:fb:26:86:4c:bd:8d:f1:91:2d: 52:b7:31:49:13:96:47:7a:5e:a3:6c:a8:b0:11:f6: 0e:50:e5:cb:0b:4c:b1:7c:96:1e:8a:de:03:44:53: e6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C6:6B:7B:59:5E:C8:C4:49:40:93:D1:C2:4A:E5:D1:CB:F4:4C:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9b93ebea-6362-3113-8de4-cffbc2fdeb5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b0:7e:74:fc:e0:42:77:20:99:bb:1c:a5:d8:37:e6:0e:fa: 4e:65:f8:ce:a1:34:4c:7b:76:41:1e:29:fb:56:c4:81:0e:7d: a6:ce:82:20:08:8b:15:22:a8:a0:a6:95:b1:ad:c9:74:4c:b4: 98:92:fe:07:5e:91:11:20:69:47:be:7b:3a:7a:62:5e:c2:97: 85:6c:95:31:26:7d:a7:39:a8:0d:bf:fd:5b:ce:94:e3:03:e5: e2:34:5f:6b:67:ef:7b:c4:82:bc:ac:c4:56:45:c1:9f:76:be: 8a:b8:83:46:97:5d:c3:35:15:49:eb:6a:5b:00:ed:6e:3e:20: 9d:23:3c:b7:5b:3d:af:dc:ad:43:a0:ac:f8:a9:2a:3b:f9:ad: 19:1d:10:14:ba:3f:ea:a8:df:85:a8:51:39:9e:57:48:95:e7: 71:e1:da:32:35:db:f5:17:f5:98:37:da:91:56:c9:2f:42:33: f9:ca:aa:81:ca:93:c1:da:46:83:5e:a2:01:99:18:1f:83:42: 04:f5:5a:1b:2c:f9:54:1a:72:f0:b9:e1:60:95:bd:ef:4d:53: a8:a9:24:b5:ab:e7:95:64:83:ec:1f:10:96:ed:d3:7a:7d:33: a2:9e:58:07:81:94:14:26:cb:0c:b6:6f:ae:78:a6:7e:01:95: e3:5c:c6:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Ul5kvxIU/fPm8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZGE1YzExZjMtODFlOC00MDE1LWEyMDgtM2FlNjJkZWU3YjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA622Fmyzg1iilJ9NfaRCFvClZPVhuOrK1usWI PmREiPBIbdI0OdnFgSgI7DytNKJZMmstlFSi8q1WsTA5s87Q61ET2ebjHsvfjwe3 efcYiRufpa9FIHAkRo1t+rmt3zfL0Arv12TzGPabEMv7d7qRR4HrA0pUl4u6l4Fu Zt4dGYjCcmaWJvTuA4zB6YZG0YBhE4w+ZcHq8d1P1glLLANyO3UcGqEnjvRFdG8D +QHr8aOsGSTzUgI7LJCi1BPZ23UtNjufLV17xKeVFVu3pFaMVKmcrlt93tr7JoZM vY3xkS1StzFJE5ZHel6jbKiwEfYOUOXLC0yxfJYeit4DRFPmOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3Ga3tZXsjESUCT0cJK5dHL9EyhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWI5M2ViZWEtNjM2Mi0z MTEzLThkZTQtY2ZmYmMyZmRlYjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCwfnT84EJ3IJm7HKXYN+YO+k5l+M6hNEx7dkEeKftWxIEOfabOgiAI ixUiqKCmlbGtyXRMtJiS/gdekREgaUe+ezp6Yl7Cl4VslTEmfac5qA2//VvOlOMD 5eI0X2tn73vEgrysxFZFwZ92voq4g0aXXcM1FUnralsA7W4+IJ0jPLdbPa/crUOg rPipKjv5rRkdEBS6P+qo34WoUTmeV0iV53Hh2jI12/UX9Zg32pFWyS9CM/nKqoHK k8HaRoNeogGZGB+DQgT1Whss+VQacvC54WCVve9NU6ipJLWr55Vkg+wfEJbt03p9 M6KeWAeBlBQmywy2b654pn4BleNcxpE= -----END CERTIFICATE-----Generated at Mon Oct 20 03:32:13 2025 by rpki-client