$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a598b2b0-16e5-30a3-a8d0-df4da5fb2080.roa File: a598b2b0-16e5-30a3-a8d0-df4da5fb2080.roa (raw, json) Hash identifier: kUdWLMF67nN4HP/iKXkGKQA6KLLRGpb5P9+7uEHam6Q= Subject key identifier: 0A:5E:25:5B:1B:E3:64:7B:02:14:8F:BF:DF:8A:40:3F:69:88:1C:D3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B92DD89CC6D25CFAEEC25B280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a598b2b0-16e5-30a3-a8d0-df4da5fb2080.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 7029 IP address blocks: 173.191.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:89:cc:6d:25:cf:ae:ec:25:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=29cda467-10bb-4809-b070-5b2ef6f2f80b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a1:90:56:ab:d3:ca:c2:bf:a9:8a:dc:e6:18: 1d:22:e0:db:65:ec:ce:29:72:98:59:75:38:6c:74: 9b:22:ab:52:36:10:86:0b:0f:f4:2d:17:bd:ef:27: e0:2f:03:87:6b:4e:6e:6d:9a:ab:ca:0e:f4:b4:6a: d6:28:39:48:f5:66:76:f4:d6:d8:8d:08:c9:51:48: 62:c4:0f:61:9a:e9:95:79:cd:bb:83:26:b1:83:25: 1a:df:6e:e7:8d:1d:5a:b1:ae:3d:0f:b9:9b:e1:c5: 8c:bc:d8:2e:c9:43:91:6f:be:a3:73:a8:fe:3a:1c: d0:1e:c3:eb:a3:d5:a7:eb:e2:f6:d2:68:46:1c:17: e9:0b:f2:87:31:34:f4:6a:62:4d:20:6b:da:9a:94: f7:04:97:ae:bb:e5:34:ea:a0:32:9a:45:a5:66:51: 9e:ab:38:a2:ef:c9:7d:87:0a:e8:71:55:41:f5:dc: f0:87:29:29:d0:9c:4d:78:da:49:79:8d:86:3f:fe: 94:72:13:c2:77:21:1c:cf:a3:68:5d:12:35:5c:5b: ac:75:ca:c2:53:35:59:2e:71:e6:e2:26:a8:cf:7a: 93:64:98:41:9e:27:15:68:6c:af:b7:50:83:53:06: f5:78:29:73:b0:35:2b:60:2e:7d:ba:e8:bd:cd:40: 4b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5E:25:5B:1B:E3:64:7B:02:14:8F:BF:DF:8A:40:3F:69:88:1C:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a598b2b0-16e5-30a3-a8d0-df4da5fb2080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:45:eb:7c:a6:c7:c3:8b:52:41:f4:8b:fb:f5:4f:5c:fe:0c: f6:72:2e:0e:43:19:d9:b5:c9:a9:b4:19:9b:af:4c:27:19:87: 9c:54:07:d7:4e:2e:fb:31:0c:b4:36:7c:af:cd:67:27:b3:ea: c9:6a:5b:95:16:9f:e4:31:d6:60:5f:3a:78:8a:9a:a5:7a:0e: 97:4e:4d:2d:32:2e:05:e2:e9:bc:48:6f:06:f8:5e:d8:6d:32: be:fd:88:a2:df:dc:e6:63:00:b1:15:13:41:ef:4d:b7:87:09: d8:5f:08:88:87:e9:60:33:85:1f:5e:5f:9c:fa:bb:79:86:02: 02:92:2f:f9:89:23:8b:0d:d8:5d:29:aa:12:c8:1c:9d:0b:57: 46:78:ca:ec:38:7c:13:22:a3:3e:a8:d6:ab:94:6e:fd:f0:2e: 8b:d6:6c:2b:fb:e5:00:e8:ab:3d:19:44:13:7f:89:d2:e6:05: f2:6b:09:f4:f4:6f:4c:02:f4:6d:28:5b:9d:77:b1:40:bb:59: ba:ee:4b:7c:71:43:5d:d2:1e:7f:13:41:58:98:3f:e0:8d:b8: 38:1f:d5:d2:af:f3:49:08:ae:df:7d:ec:ae:bd:ca:f6:a4:bc: 09:f8:b0:bf:43:d3:8d:15:60:78:67:b7:4f:b5:1b:83:22:66: cf:84:13:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3YnMbSXPruwlsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk MjljZGE0NjctMTBiYi00ODA5LWIwNzAtNWIyZWY2ZjJmODBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaGQVqvTysK/qYrc5hgdIuDbZezOKXKYWXU4 bHSbIqtSNhCGCw/0LRe97yfgLwOHa05ubZqryg70tGrWKDlI9WZ29NbYjQjJUUhi xA9hmumVec27gyaxgyUa327njR1asa49D7mb4cWMvNguyUORb76jc6j+OhzQHsPr o9Wn6+L20mhGHBfpC/KHMTT0amJNIGvampT3BJeuu+U06qAymkWlZlGeqzii78l9 hwrocVVB9dzwhykp0JxNeNpJeY2GP/6UchPCdyEcz6NoXRI1XFusdcrCUzVZLnHm 4iaoz3qTZJhBnicVaGyvt1CDUwb1eClzsDUrYC59uui9zUBLUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApeJVsb42R7AhSPv9+KQD9piBzTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTU5OGIyYjAtMTZlNS0z MGEzLWE4ZDAtZGY0ZGE1ZmIyMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb9QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1F63ymx8OLUkH0i/v1T1z+DPZyLg5DGdm1yam0GZuvTCcZh5xUB9dO LvsxDLQ2fK/NZyez6slqW5UWn+Qx1mBfOniKmqV6DpdOTS0yLgXi6bxIbwb4Xtht Mr79iKLf3OZjALEVE0HvTbeHCdhfCIiH6WAzhR9eX5z6u3mGAgKSL/mJI4sN2F0p qhLIHJ0LV0Z4yuw4fBMioz6o1quUbv3wLovWbCv75QDoqz0ZRBN/idLmBfJrCfT0 b0wC9G0oW513sUC7WbruS3xxQ13SHn8TQViYP+CNuDgf1dKv80kIrt997K69yvak vAn4sL9D040VYHhnt0+1G4MiZs+EEwE= -----END CERTIFICATE-----Generated at Mon Oct 20 06:27:59 2025 by rpki-client