$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3fb1de1-24c4-3ca8-81b2-3aeb8099c5b3.roa File: a3fb1de1-24c4-3ca8-81b2-3aeb8099c5b3.roa (raw, json) Hash identifier: dUuJoui5bdbF1bMkgai5lxz/quszu1sFyRvRfEbr6iY= Subject key identifier: 8D:59:3D:BF:0A:C1:CE:96:29:6B:D6:45:45:A5:AD:56:8F:98:9C:B9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B92DD3FB44F97A36A320CB900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3fb1de1-24c4-3ca8-81b2-3aeb8099c5b3.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 7029 IP address blocks: 173.185.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:3f:b4:4f:97:a3:6a:32:0c:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=6988b51b-67e4-4739-a5ac-4a442cffe656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1a:ad:93:3f:4d:20:10:df:a2:89:f7:cd:9f: 38:d5:78:ab:ec:47:9f:cb:54:cc:4f:67:7f:e7:9a: 2b:ef:20:e7:67:92:6c:15:78:a3:90:97:9d:ef:4b: 97:ab:26:62:f9:97:a8:d6:7b:2b:06:40:ea:40:2d: e0:6e:d9:31:33:02:cc:3c:b9:6f:c1:7b:13:47:4c: 5e:52:8d:95:2a:6c:29:40:0f:6a:1b:0b:68:51:3b: f6:e7:cd:5a:61:d1:86:bf:06:20:11:1c:f0:77:d1: 7f:c2:90:43:65:1c:ea:31:1b:85:a1:6e:85:2e:93: 42:c8:a9:2a:1c:dd:4d:06:36:39:fb:f9:cb:13:13: 47:96:2a:73:54:0e:c3:36:a6:87:c5:53:e0:03:b1: f8:fe:79:68:f0:6b:4b:77:da:bb:ab:03:9a:ae:f4: 83:47:5b:7f:4c:1e:11:be:62:6c:20:b7:38:f6:df: 36:03:52:cc:88:72:2f:b3:a6:b4:16:c4:65:ed:2a: 15:37:a1:03:82:2a:38:36:d4:2d:a1:8c:1e:1d:f3: 09:d0:3c:80:a0:26:8f:b0:ac:78:30:82:93:70:61: f9:9b:d5:f8:63:26:8d:8a:e6:b1:46:af:3a:c8:ec: c7:00:a8:ee:31:17:be:d5:6b:4c:df:a9:ff:31:2a: a3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:59:3D:BF:0A:C1:CE:96:29:6B:D6:45:45:A5:AD:56:8F:98:9C:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3fb1de1-24c4-3ca8-81b2-3aeb8099c5b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:9f:f2:93:d4:2f:00:41:cf:0a:26:ba:b0:ef:63:ea:e5:cb: 8e:cb:c1:fb:fe:60:54:f4:f1:85:c8:da:2c:70:8d:de:82:94: 1d:a4:b4:55:a0:0c:0f:ac:4c:89:4e:ba:f9:78:32:51:d4:4f: db:cd:08:c3:5e:db:5e:3d:c4:12:b6:43:54:ab:c9:02:6e:da: a7:4b:41:3e:58:fb:3b:c1:37:eb:ce:a1:02:55:31:63:56:02: 70:d2:f6:00:0a:2d:4a:1a:0c:46:75:96:e6:30:1e:5a:fe:7e: 9a:c3:03:38:e6:93:02:db:d1:70:1f:1e:40:d5:1f:51:c2:22: 5a:ce:e6:1b:c7:71:5d:ac:de:ce:a4:c6:5f:3c:35:20:59:7f: 65:69:ba:cb:f1:ac:8a:66:6e:24:b7:61:5a:d4:97:41:84:aa: e1:e6:f6:bd:b8:4f:e0:c1:a6:82:56:ad:48:9d:bb:33:26:5b: 2b:eb:e9:3d:72:42:27:5c:05:a3:7f:64:7e:1a:ca:b8:e6:3b: 63:2f:86:02:e0:54:ee:12:7d:3c:24:92:9e:c9:e1:1d:90:7e: 28:5c:8c:5c:d0:ef:60:f3:be:a4:0a:13:6f:bf:d8:1f:b9:1a: db:25:46:b7:42:b3:3e:f7:e8:3f:e3:dc:2b:72:f1:bb:61:e7: 63:3c:18:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3T+0T5ejajIMuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk Njk4OGI1MWItNjdlNC00NzM5LWE1YWMtNGE0NDJjZmZlNjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRqtkz9NIBDfoon3zZ841Xir7Eefy1TMT2d/ 55or7yDnZ5JsFXijkJed70uXqyZi+Zeo1nsrBkDqQC3gbtkxMwLMPLlvwXsTR0xe Uo2VKmwpQA9qGwtoUTv2581aYdGGvwYgERzwd9F/wpBDZRzqMRuFoW6FLpNCyKkq HN1NBjY5+/nLExNHlipzVA7DNqaHxVPgA7H4/nlo8GtLd9q7qwOarvSDR1t/TB4R vmJsILc49t82A1LMiHIvs6a0FsRl7SoVN6EDgio4NtQtoYweHfMJ0DyAoCaPsKx4 MIKTcGH5m9X4YyaNiuaxRq86yOzHAKjuMRe+1WtM36n/MSqj1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1ZPb8Kwc6WKWvWRUWlrVaPmJy5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTNmYjFkZTEtMjRjNC0z Y2E4LTgxYjItM2FlYjgwOTljNWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbnIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHef8pPULwBBzwomurDvY+rly47Lwfv+YFT08YXI2ixwjd6ClB2ktFWg DA+sTIlOuvl4MlHUT9vNCMNe2149xBK2Q1SryQJu2qdLQT5Y+zvBN+vOoQJVMWNW AnDS9gAKLUoaDEZ1luYwHlr+fprDAzjmkwLb0XAfHkDVH1HCIlrO5hvHcV2s3s6k xl88NSBZf2VpusvxrIpmbiS3YVrUl0GEquHm9r24T+DBpoJWrUiduzMmWyvr6T1y QidcBaN/ZH4ayrjmO2MvhgLgVO4SfTwkkp7J4R2QfihcjFzQ72DzvqQKE2+/2B+5 GtslRrdCsz736D/j3Cty8bth52M8GE0= -----END CERTIFICATE-----Generated at Mon Oct 20 03:17:22 2025 by rpki-client