$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a87d8463-137e-3a43-a39b-5b5abfd08d8b.roa File: a87d8463-137e-3a43-a39b-5b5abfd08d8b.roa (raw, json) Hash identifier: 3HSYgQQu7rIiBrwptPsNdul4hPCqq2SPIEa/GEP9p0o= Subject key identifier: 6C:B8:03:58:2F:89:1B:41:C6:4E:EF:FD:BD:C3:11:65:8D:F3:FB:D2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCB2198EA88F7BAEF8600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a87d8463-137e-3a43-a39b-5b5abfd08d8b.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 216.176.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:cb:21:98:ea:88:f7:ba:ef:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=63ab73c5-9e26-4f90-9af1-1c0cf6f79ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a3:fe:f4:15:e9:12:8b:00:ad:3d:e8:47:86: 9e:d6:c4:65:0e:d4:a2:25:0f:59:55:cc:fc:b9:3b: b5:50:aa:dc:b9:97:e8:9e:97:8f:70:31:df:f5:66: 92:4c:55:3f:95:f7:22:8c:3d:e3:4e:91:64:a2:08: 01:e6:1d:f1:9a:a1:a1:f7:d3:1f:65:8b:1b:4b:59: 59:5a:c4:55:99:06:56:c3:ce:bc:c3:6a:0f:54:67: ce:70:6c:df:72:ff:0b:42:e9:3e:83:e9:63:e7:56: ac:48:f1:14:16:d4:c2:9a:99:01:f8:da:e4:19:cc: cc:94:c0:fc:ed:e6:8e:c3:18:32:f6:1b:c2:ae:cf: 4c:65:1a:0c:75:0f:70:4d:d9:ee:a1:83:32:34:28: 1a:ef:a4:78:52:24:12:22:24:ba:35:62:3d:27:bc: 95:2d:bc:e4:b9:ac:41:ba:51:71:eb:1b:c2:b8:2e: 3f:0e:49:d8:a4:c9:65:b1:ba:21:26:f2:93:8e:27: 86:fe:06:91:c7:b1:77:9e:49:d1:0e:a8:93:59:f4: 67:9c:24:76:94:66:26:a5:43:ba:d0:a6:78:60:c7: 91:71:f5:26:c2:e5:9c:3f:70:11:72:ad:10:d3:16: b8:d4:d5:c3:0f:ff:7a:c2:61:89:c4:4c:72:c1:b7: 65:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B8:03:58:2F:89:1B:41:C6:4E:EF:FD:BD:C3:11:65:8D:F3:FB:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a87d8463-137e-3a43-a39b-5b5abfd08d8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.176.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:57:55:37:c6:f4:87:6d:67:8b:11:5c:bc:51:15:17:62:89: b7:49:2f:49:ba:dc:53:e4:93:ae:29:0f:40:6f:a7:9c:69:09: 00:90:22:03:7f:84:c7:70:56:9c:91:13:c8:04:63:64:5a:ce: 5a:e6:39:8a:6a:bf:e4:35:a5:1f:61:76:80:ef:1c:ec:0e:10: 37:dc:80:3e:54:ca:eb:f0:bf:1f:7a:71:1b:92:41:52:d2:3a: 4b:88:59:41:bc:23:1e:23:df:03:d0:38:d0:1f:46:3e:11:fb: 0a:9c:8b:8a:d7:91:ed:c1:27:fa:f7:83:a1:71:3d:da:4f:e9: e2:6c:81:a1:bd:d2:b4:2d:c7:50:c5:30:b4:b0:ab:59:28:0e: 9a:f7:51:10:2a:21:0f:d8:26:56:9e:83:8e:ca:48:c6:85:61: e2:af:4d:b2:72:3f:84:54:03:2c:bc:94:16:c3:88:d2:3d:2b: 71:ee:2f:9e:30:2c:cd:f1:6a:db:7f:94:6a:65:ba:ea:6e:37: 89:99:15:ed:3e:05:50:70:49:93:a7:67:21:d0:c0:75:ce:b2: d6:7e:21:df:46:a5:e7:27:bb:43:b0:70:95:fe:07:e1:8a:c3: 31:15:86:d2:2c:96:c7:ee:ad:b3:1b:1e:32:20:92:1b:f2:a3: 09:65:f4:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMshmOqI97rvhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NjNhYjczYzUtOWUyNi00ZjkwLTlhZjEtMWMwY2Y2Zjc5ZWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqP+9BXpEosArT3oR4ae1sRlDtSiJQ9ZVcz8 uTu1UKrcuZfonpePcDHf9WaSTFU/lfcijD3jTpFkoggB5h3xmqGh99MfZYsbS1lZ WsRVmQZWw868w2oPVGfOcGzfcv8LQuk+g+lj51asSPEUFtTCmpkB+NrkGczMlMD8 7eaOwxgy9hvCrs9MZRoMdQ9wTdnuoYMyNCga76R4UiQSIiS6NWI9J7yVLbzkuaxB ulFx6xvCuC4/DknYpMllsbohJvKTjieG/gaRx7F3nknRDqiTWfRnnCR2lGYmpUO6 0KZ4YMeRcfUmwuWcP3ARcq0Q0xa41NXDD/96wmGJxExywbdlMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGy4A1gviRtBxk7v/b3DEWWN8/vSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTg3ZDg0NjMtMTM3ZS0z YTQzLWEzOWItNWI1YWJmZDA4ZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2LDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZXVTfG9IdtZ4sRXLxRFRdiibdJL0m63FPkk64pD0Bvp5xpCQCQIgN/ hMdwVpyRE8gEY2RazlrmOYpqv+Q1pR9hdoDvHOwOEDfcgD5Uyuvwvx96cRuSQVLS OkuIWUG8Ix4j3wPQONAfRj4R+wqci4rXke3BJ/r3g6FxPdpP6eJsgaG90rQtx1DF MLSwq1koDpr3URAqIQ/YJlaeg47KSMaFYeKvTbJyP4RUAyy8lBbDiNI9K3HuL54w LM3xatt/lGpluupuN4mZFe0+BVBwSZOnZyHQwHXOstZ+Id9Gpecnu0OwcJX+B+GK wzEVhtIslsfurbMbHjIgkhvyowll9Hw= -----END CERTIFICATE-----Generated at Mon Oct 20 06:45:00 2025 by rpki-client