$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f94b44f-a7be-33b2-9ed9-1c86754ce2aa.roa File: 9f94b44f-a7be-33b2-9ed9-1c86754ce2aa.roa (raw, json) Hash identifier: gE+2IxQrytz6dhQa2OFdgj11ROebKPpNOavde9FqB40= Subject key identifier: 81:2A:F2:8A:4F:7D:A3:98:27:A8:B2:7D:BF:2C:57:F1:45:A1:CE:FF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B92DD3FC516E635EA6572AC9C Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f94b44f-a7be-33b2-9ed9-1c86754ce2aa.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 7029 IP address blocks: 173.186.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:3f:c5:16:e6:35:ea:65:72:ac:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=d61d4150-8e86-449c-9c18-5986a8bd7d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9b:a8:38:3b:b7:67:d6:3a:7b:40:37:2a:14: bd:13:de:f9:85:63:6e:e2:3c:35:09:e2:81:00:68: 8e:42:39:6a:df:b5:59:07:29:34:e8:6c:3d:d9:9c: 35:83:f6:10:8c:a5:1d:76:d1:7c:f0:e0:ed:67:e0: 11:22:6d:ea:04:7b:b8:c0:62:5c:d0:61:a6:9b:d5: ba:90:46:b9:77:26:f7:f9:db:4b:fe:47:ca:a4:a0: 16:17:10:35:24:b1:b5:fb:57:d0:b8:ba:87:0b:35: d8:eb:7b:fa:d7:bc:d2:ff:7a:57:10:40:2c:d8:ba: 63:41:0b:ee:4e:7c:df:ab:47:cc:41:9b:ec:97:3f: fb:96:56:b4:c2:19:a5:19:e3:25:bd:98:de:be:57: 78:f9:73:57:0d:0f:ac:70:67:22:e0:83:3a:30:b9: 93:53:50:2f:59:7e:25:d5:14:4f:eb:39:96:d3:dd: 6b:c7:64:72:0e:6e:84:00:df:b5:96:03:06:1a:c4: d7:24:79:85:46:79:31:39:f4:90:ff:99:4d:a0:ae: 79:9e:81:fe:52:f5:c1:ed:56:d3:3f:1f:c2:df:e5: 26:36:83:b4:38:b2:54:de:ac:d8:08:7c:bc:ad:ab: cf:f8:4c:bc:88:b0:e7:2b:b7:22:25:50:27:84:03: a7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2A:F2:8A:4F:7D:A3:98:27:A8:B2:7D:BF:2C:57:F1:45:A1:CE:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f94b44f-a7be-33b2-9ed9-1c86754ce2aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:0f:10:72:48:ad:60:4f:ca:70:37:86:3c:76:46:9a:76:95: f1:be:34:2e:cb:f0:16:24:9c:7e:d8:26:b1:c8:90:7e:90:ab: 9f:3c:79:e3:4d:a6:21:23:49:08:07:74:15:a6:fd:c5:8e:08: 9e:7a:48:a0:9e:be:c6:6c:f2:4f:40:25:ac:61:56:39:30:59: 92:3e:5f:60:53:35:56:56:52:8a:15:67:3d:e6:c8:e7:a3:2b: ce:86:8a:be:2c:59:32:b1:4b:59:98:3e:04:5a:da:cc:46:e2: 8e:88:ba:82:b4:c7:7c:b2:58:28:22:95:bc:74:d1:b4:25:bb: e6:e2:fa:6d:ff:8f:be:7c:ad:2f:40:ce:58:e1:24:77:f8:42: c3:ea:15:a2:32:09:a8:92:13:07:a5:49:dc:a3:7b:d8:09:f0: f4:6a:eb:f6:a5:c5:de:27:b4:19:f3:b6:70:fa:8e:1b:f5:50: 89:d4:5c:e1:3a:1e:ba:ae:41:84:4f:a6:5d:5a:7b:ff:6e:e7: d1:93:3c:ae:99:fb:61:85:19:00:2f:89:93:e3:be:1e:62:ea: b0:ca:ee:82:42:b8:c9:f8:e4:8d:4d:76:42:57:f6:28:e3:2f: 72:a8:76:ce:d5:e2:a4:df:f5:33:0f:98:bc:6d:9d:9f:9c:ad: 34:ee:bd:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3T/FFuY16mVyrJwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk ZDYxZDQxNTAtOGU4Ni00NDljLTljMTgtNTk4NmE4YmQ3ZDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65uoODu3Z9Y6e0A3KhS9E975hWNu4jw1CeKB AGiOQjlq37VZByk06Gw92Zw1g/YQjKUddtF88ODtZ+ARIm3qBHu4wGJc0GGmm9W6 kEa5dyb3+dtL/kfKpKAWFxA1JLG1+1fQuLqHCzXY63v617zS/3pXEEAs2LpjQQvu Tnzfq0fMQZvslz/7lla0whmlGeMlvZjevld4+XNXDQ+scGci4IM6MLmTU1AvWX4l 1RRP6zmW091rx2RyDm6EAN+1lgMGGsTXJHmFRnkxOfSQ/5lNoK55noH+UvXB7VbT Px/C3+UmNoO0OLJU3qzYCHy8ravP+Ey8iLDnK7ciJVAnhAOn6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEq8opPfaOYJ6iyfb8sV/FFoc7/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWY5NGI0NGYtYTdiZS0z M2IyLTllZDktMWM4Njc1NGNlMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUPEHJIrWBPynA3hjx2Rpp2lfG+NC7L8BYknH7YJrHIkH6Qq588eeNN piEjSQgHdBWm/cWOCJ56SKCevsZs8k9AJaxhVjkwWZI+X2BTNVZWUooVZz3myOej K86Gir4sWTKxS1mYPgRa2sxG4o6IuoK0x3yyWCgilbx00bQlu+bi+m3/j758rS9A zljhJHf4QsPqFaIyCaiSEwelSdyje9gJ8PRq6/alxd4ntBnztnD6jhv1UInUXOE6 HrquQYRPpl1ae/9u59GTPK6Z+2GFGQAviZPjvh5i6rDK7oJCuMn45I1NdkJX9ijj L3Kods7V4qTf9TMPmLxtnZ+crTTuvUE= -----END CERTIFICATE-----Generated at Mon Oct 20 03:32:42 2025 by rpki-client