$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cc0c1dd-cb09-3709-bb88-090ec6e939dd.roa File: 9cc0c1dd-cb09-3709-bb88-090ec6e939dd.roa (raw, json) Hash identifier: O0dn3HEsXC9S4QmBwxYu3ZYNFZ9cudjkaDTWd3q8RBc= Subject key identifier: 0E:A8:96:27:67:E9:2F:AC:66:8A:C3:DA:16:0A:93:6F:2B:5B:77:54 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B821CB8DC9EC77B3F2C3B6680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cc0c1dd-cb09-3709-bb88-090ec6e939dd.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 7029 IP address blocks: 173.185.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:b8:dc:9e:c7:7b:3f:2c:3b:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=d6edb9de-b2e1-49f2-81c1-c4d0f52a6441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:39:ab:81:1f:5b:ee:fd:30:70:8c:9e:b0:cc: 0a:c0:8b:65:89:83:23:20:f8:26:b4:22:b3:d5:a9: 67:9d:53:16:43:9c:86:b1:2d:a8:12:87:89:94:f1: 1e:8a:b2:ea:52:a6:59:46:eb:a3:70:8c:55:91:12: 0d:7d:89:97:02:a8:6c:29:8c:b7:1d:3c:5e:bf:bf: 28:d9:d8:cc:ae:d3:77:28:e8:19:98:5b:8e:94:ea: 5c:d7:8c:ee:87:51:58:c7:48:bf:06:27:22:58:67: f0:1a:2d:f1:2d:0d:e0:9c:26:0f:fd:2b:19:a8:ff: e3:36:0d:14:13:9e:a8:f2:0b:51:97:8a:48:29:a3: d5:63:96:f6:e1:fa:25:ef:54:fc:72:3b:5d:41:b2: 12:ed:c8:95:4e:eb:15:04:78:e1:73:00:38:6a:4b: 1e:0e:e3:c2:76:e3:44:a9:55:4d:37:55:1b:45:80: 25:21:cf:e4:63:1d:9d:8b:60:60:fe:57:e4:4c:58: 27:d0:66:bd:e6:96:8e:6b:7a:db:b3:42:1b:82:de: ca:17:54:f5:7d:44:d1:b1:71:a1:57:fd:ed:cf:15: 19:f0:ac:f8:ed:41:e4:42:62:09:34:1b:d3:a8:c0: 19:a9:56:cd:58:c3:26:ff:e6:bc:f0:4f:2d:2d:69: d3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A8:96:27:67:E9:2F:AC:66:8A:C3:DA:16:0A:93:6F:2B:5B:77:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cc0c1dd-cb09-3709-bb88-090ec6e939dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:b9:87:94:7f:19:2d:db:88:d8:b7:09:5b:8e:ef:93:0e:fe: 2e:77:8b:d5:1c:2f:a6:f0:63:c4:5a:b9:91:0e:8d:f7:c0:72: 2b:e3:3d:51:09:b3:86:7d:a8:49:20:ef:4c:30:22:40:8d:3a: 03:5c:81:16:84:63:e6:a8:85:87:c0:0a:e5:23:28:a4:3d:39: 30:e4:ab:fc:5f:5c:28:e5:10:4a:90:ec:1a:8e:f4:03:a8:67: fb:9b:f2:7d:26:11:9a:fa:ff:4b:39:a0:c4:f8:ac:20:0f:f3: 1b:20:67:23:8c:09:37:04:89:b6:83:b1:0e:f7:06:0e:a0:fa: a3:ea:e5:0d:88:dd:51:14:7a:81:f1:e2:5f:90:a1:85:0c:0b: 11:14:c7:19:9a:7d:2b:ca:18:ef:40:20:cb:85:9a:25:2e:46: d1:ad:e2:18:8a:ea:f0:42:b7:e6:9d:9b:46:e3:a4:99:a6:4a: 4e:da:5f:23:ec:25:da:32:30:11:b0:63:eb:d6:65:de:9e:e3: e7:c8:82:23:f7:15:24:48:da:98:1a:2a:c4:46:14:fa:84:7e: 27:fb:90:d1:bf:67:50:1e:01:43:15:be:51:c1:6c:91:ca:3d: 37:15:91:a3:aa:76:93:8e:ca:4f:ae:3f:cf:20:e2:34:b4:c8: d8:77:aa:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHLjcnsd7Pyw7ZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ZDZlZGI5ZGUtYjJlMS00OWYyLTgxYzEtYzRkMGY1MmE2NDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjmrgR9b7v0wcIyesMwKwItliYMjIPgmtCKz 1alnnVMWQ5yGsS2oEoeJlPEeirLqUqZZRuujcIxVkRINfYmXAqhsKYy3HTxev78o 2djMrtN3KOgZmFuOlOpc14zuh1FYx0i/BiciWGfwGi3xLQ3gnCYP/SsZqP/jNg0U E56o8gtRl4pIKaPVY5b24fol71T8cjtdQbIS7ciVTusVBHjhcwA4akseDuPCduNE qVVNN1UbRYAlIc/kYx2di2Bg/lfkTFgn0Ga95paOa3rbs0Ibgt7KF1T1fUTRsXGh V/3tzxUZ8Kz47UHkQmIJNBvTqMAZqVbNWMMm/+a88E8tLWnTuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6olidn6S+sZorD2hYKk28rW3dUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWNjMGMxZGQtY2IwOS0z NzA5LWJiODgtMDkwZWM2ZTkzOWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+5h5R/GS3biNi3CVuO75MO/i53i9UcL6bwY8RauZEOjffAcivjPVEJ s4Z9qEkg70wwIkCNOgNcgRaEY+aohYfACuUjKKQ9OTDkq/xfXCjlEEqQ7BqO9AOo Z/ub8n0mEZr6/0s5oMT4rCAP8xsgZyOMCTcEibaDsQ73Bg6g+qPq5Q2I3VEUeoHx 4l+QoYUMCxEUxxmafSvKGO9AIMuFmiUuRtGt4hiK6vBCt+adm0bjpJmmSk7aXyPs JdoyMBGwY+vWZd6e4+fIgiP3FSRI2pgaKsRGFPqEfif7kNG/Z1AeAUMVvlHBbJHK PTcVkaOqdpOOyk+uP88g4jS0yNh3qho= -----END CERTIFICATE-----Generated at Mon Oct 20 13:07:45 2025 by rpki-client