$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac1816ef-f693-3a2c-bce4-791ca42d5e95.roa File: ac1816ef-f693-3a2c-bce4-791ca42d5e95.roa (raw, json) Hash identifier: 2Zu9fMtpF1vMD9o4kz0eKMal6Y54bzeNf/qS4p7n5kE= Subject key identifier: 0C:FA:1A:67:AE:0D:FC:A9:1E:D8:9D:DD:FD:C4:AD:73:C0:10:03:BB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B92DD3FD55A11C0A6BB5F1A24 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac1816ef-f693-3a2c-bce4-791ca42d5e95.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 7029 IP address blocks: 173.191.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:3f:d5:5a:11:c0:a6:bb:5f:1a:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=4b5c1e85-eed7-4605-9f7a-85b5182d1de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:80:d8:00:23:34:83:04:89:09:d4:05:00:c0: 72:da:08:7f:02:45:10:a1:e5:17:88:41:b1:f6:ea: cb:52:96:c2:a3:c1:d4:6c:93:48:42:f0:24:53:6e: 30:1c:f6:21:48:00:41:12:57:7f:f8:47:db:8f:33: 79:b0:ea:11:7b:db:22:9c:c7:9b:f8:1c:78:2b:c7: 83:e7:79:d3:cb:30:c8:6c:d9:93:60:75:4e:af:85: a0:8e:e7:ed:54:62:2c:c5:e2:a9:22:7e:38:bf:d1: 50:ca:de:e2:71:34:73:87:43:7d:28:c9:6b:c1:04: f9:23:83:57:4f:41:c0:e7:5b:80:ee:73:bf:c6:c0: c3:73:9d:f2:3a:98:3c:f8:96:14:32:d0:89:08:a3: 05:f5:f2:58:ef:74:66:36:c8:32:8f:31:47:9f:86: a8:bc:81:59:47:e0:73:09:e0:aa:3e:71:80:b0:b3: dc:f9:fd:4f:9d:1c:40:96:e2:31:b4:2a:50:9b:64: c6:24:8a:24:f9:16:c1:b2:d0:ef:1c:bd:af:c8:64: 0f:fc:78:a8:d2:14:90:a9:ae:ec:6b:13:67:e5:ef: b8:b5:4a:fe:5b:c6:88:7d:5d:61:23:29:8e:b2:29: fe:aa:6f:27:bf:dd:8e:72:88:6a:86:48:aa:c0:66: ab:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:FA:1A:67:AE:0D:FC:A9:1E:D8:9D:DD:FD:C4:AD:73:C0:10:03:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac1816ef-f693-3a2c-bce4-791ca42d5e95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:bc:3b:31:87:2a:f4:be:db:a1:21:50:4e:f1:8e:5a:9b:a6: f8:1d:76:d4:ad:ea:8c:6c:ad:69:88:91:6c:a9:fe:18:55:ff: ef:7b:80:61:db:e3:72:e2:d2:c2:81:e2:67:b9:6f:a5:b8:19: 91:de:08:26:fc:51:e5:83:d1:94:d2:47:0b:4d:a1:12:31:1f: 43:66:53:6e:ed:57:4e:82:df:d1:a5:d5:c8:cb:9f:90:f4:0d: 25:99:a0:62:1e:6f:47:76:12:bf:51:12:44:7a:6f:51:de:37: 62:93:e6:2a:24:f1:b5:de:94:a0:c7:40:47:68:89:b6:59:9d: 3a:83:b7:88:8e:d7:cd:8d:9f:c0:30:01:e9:90:e8:c1:38:a9: 61:48:0f:dc:d8:52:85:fd:db:a8:78:fe:9b:71:0a:1c:41:38: 3b:5d:ab:c5:f3:31:e9:f3:4c:61:52:c0:74:e9:f2:a2:3a:67: 70:37:37:43:f3:60:a5:12:8a:9d:7a:88:e3:66:31:31:72:f7: 78:46:45:40:52:3e:10:43:30:40:0f:ca:23:2b:40:24:bb:63: 1a:70:dc:e9:5b:ef:2f:64:4e:09:1a:43:e5:d3:91:ca:f8:95: 33:bd:a2:b0:5e:3a:a5:8b:f5:76:b2:29:94:21:3d:5d:5b:bc: 0e:d1:6f:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3T/VWhHAprtfGiQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk NGI1YzFlODUtZWVkNy00NjA1LTlmN2EtODViNTE4MmQxZGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYDYACM0gwSJCdQFAMBy2gh/AkUQoeUXiEGx 9urLUpbCo8HUbJNIQvAkU24wHPYhSABBEld/+EfbjzN5sOoRe9sinMeb+Bx4K8eD 53nTyzDIbNmTYHVOr4WgjuftVGIsxeKpIn44v9FQyt7icTRzh0N9KMlrwQT5I4NX T0HA51uA7nO/xsDDc53yOpg8+JYUMtCJCKMF9fJY73RmNsgyjzFHn4aovIFZR+Bz CeCqPnGAsLPc+f1PnRxAluIxtCpQm2TGJIok+RbBstDvHL2vyGQP/Hio0hSQqa7s axNn5e+4tUr+W8aIfV1hIymOsin+qm8nv92OcohqhkiqwGarCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAz6GmeuDfypHtid3f3ErXPAEAO7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWMxODE2ZWYtZjY5My0z YTJjLWJjZTQtNzkxY2E0MmQ1ZTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEm8OzGHKvS+26EhUE7xjlqbpvgddtSt6oxsrWmIkWyp/hhV/+97gGHb 43Li0sKB4me5b6W4GZHeCCb8UeWD0ZTSRwtNoRIxH0NmU27tV06C39Gl1cjLn5D0 DSWZoGIeb0d2Er9REkR6b1HeN2KT5iok8bXelKDHQEdoibZZnTqDt4iO182Nn8Aw AemQ6ME4qWFID9zYUoX926h4/ptxChxBODtdq8XzMenzTGFSwHTp8qI6Z3A3N0Pz YKUSip16iONmMTFy93hGRUBSPhBDMEAPyiMrQCS7Yxpw3Olb7y9kTgkaQ+XTkcr4 lTO9orBeOqWL9XayKZQhPV1bvA7Rb8E= -----END CERTIFICATE-----Generated at Mon Oct 20 09:39:54 2025 by rpki-client