$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b20ae154-a53f-3420-abc1-04af85e66c56.roa File: b20ae154-a53f-3420-abc1-04af85e66c56.roa (raw, json) Hash identifier: IebADA+YjQb+Q0YfWplyclzoLhbWkk7RhkpcuyE3rfQ= Subject key identifier: 89:24:F5:45:D3:96:B5:94:42:58:B8:4A:4B:05:77:84:0E:38:0F:E0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3F1C65BBD4D2C3BEAA3A2380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b20ae154-a53f-3420-abc1-04af85e66c56.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 216.96.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:65:bb:d4:d2:c3:be:aa:3a:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=260ef7fa-dd91-44fe-aa27-0d308bfd2727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e4:84:ba:6e:57:71:d6:14:81:e2:4e:66:68: 16:8f:fd:63:73:26:33:ed:80:63:02:e8:3f:7d:ee: 92:b8:e7:2b:7f:ef:f1:b0:dd:0a:d5:a6:25:94:8b: 63:5a:4f:87:9a:10:fc:4b:9e:bb:47:4c:04:f4:da: 0e:cd:38:13:fb:b8:1e:e2:64:ef:30:d1:fb:c7:53: bd:68:dd:54:4e:6c:36:e4:d9:57:61:72:d9:b5:04: 81:7e:88:48:15:3a:df:9e:11:20:97:56:ff:05:83: 61:94:93:82:6e:5f:72:a0:d8:9c:b7:d3:0f:93:cc: d4:54:ba:aa:4c:1d:ad:b1:9f:5d:21:d1:a8:06:0b: 3f:31:8d:54:68:8e:d5:67:8b:00:af:b3:ec:e0:9f: 3b:8d:7f:93:fc:ee:45:94:98:94:80:7a:a4:6f:bf: 20:af:10:d3:9d:49:3c:3c:d9:2f:5d:ba:67:30:89: 97:62:8c:d2:7f:75:1f:08:c6:0b:83:e9:b2:72:63: e8:a5:49:0b:80:4c:b1:c5:45:3a:8b:14:c2:81:0f: da:a4:ec:15:77:18:a2:f2:dc:e7:f1:07:b5:41:25: 62:49:40:85:0a:64:50:0e:c1:ae:5a:50:87:7e:44: 22:e2:f1:5c:80:77:1c:3c:2e:ab:ba:b1:d1:fc:6c: 27:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:24:F5:45:D3:96:B5:94:42:58:B8:4A:4B:05:77:84:0E:38:0F:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b20ae154-a53f-3420-abc1-04af85e66c56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:72:99:1a:1d:c3:dd:d5:dc:6b:b5:b9:2e:fb:f9:75:63:58: a6:c7:14:34:e2:21:ad:ac:cc:d7:a8:82:8a:96:e5:c6:5d:e9: e4:bc:f7:d9:53:4f:0b:8f:7f:52:93:33:e2:dc:74:f4:fb:22: 1d:88:0f:28:71:93:4c:28:fd:96:2a:c7:3e:18:37:c1:b6:78: 70:2c:d0:43:30:1a:6e:c4:5a:ff:6c:28:82:e0:a8:c8:d0:ba: f9:15:20:c1:4f:06:15:10:18:35:55:fc:cc:c5:f4:6b:ed:a1: 80:74:3b:df:4e:3b:92:5f:d9:34:94:03:78:b2:66:ab:9c:af: fa:b8:9b:03:4c:4d:db:6c:55:ec:ae:0c:0b:b5:54:67:c7:af: 74:2a:85:3a:4b:f6:4b:c3:81:69:79:33:86:ff:b2:e6:11:b8: 1a:88:cc:88:2f:23:5c:ec:1a:16:52:1a:4d:49:dd:dd:3a:8f: da:1b:c2:7d:a9:66:f9:dc:11:da:ec:ce:9b:a0:21:69:b7:24: 28:a5:76:2e:91:3e:a1:98:5d:a1:3a:3e:79:1e:2a:f2:07:c8: 7e:d5:aa:27:9c:42:7a:86:1b:93:6c:66:08:14:0a:62:7f:cf: da:10:2d:09:0f:46:33:06:2f:b8:21:ba:54:a1:00:9b:bf:d9: fc:19:18:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HGW71NLDvqo6I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk MjYwZWY3ZmEtZGQ5MS00NGZlLWFhMjctMGQzMDhiZmQyNzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieSEum5XcdYUgeJOZmgWj/1jcyYz7YBjAug/ fe6SuOcrf+/xsN0K1aYllItjWk+HmhD8S567R0wE9NoOzTgT+7ge4mTvMNH7x1O9 aN1UTmw25NlXYXLZtQSBfohIFTrfnhEgl1b/BYNhlJOCbl9yoNict9MPk8zUVLqq TB2tsZ9dIdGoBgs/MY1UaI7VZ4sAr7Ps4J87jX+T/O5FlJiUgHqkb78grxDTnUk8 PNkvXbpnMImXYozSf3UfCMYLg+mycmPopUkLgEyxxUU6ixTCgQ/apOwVdxii8tzn 8Qe1QSViSUCFCmRQDsGuWlCHfkQi4vFcgHccPC6rurHR/Gwn3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkk9UXTlrWUQli4SksFd4QOOA/gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjIwYWUxNTQtYTUzZi0z NDIwLWFiYzEtMDRhZjg1ZTY2YzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2GBiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5ymRodw93V3Gu1uS77+XVjWKbHFDTiIa2szNeogoqW5cZd6eS899lT TwuPf1KTM+LcdPT7Ih2IDyhxk0wo/ZYqxz4YN8G2eHAs0EMwGm7EWv9sKILgqMjQ uvkVIMFPBhUQGDVV/MzF9GvtoYB0O99OO5Jf2TSUA3iyZqucr/q4mwNMTdtsVeyu DAu1VGfHr3QqhTpL9kvDgWl5M4b/suYRuBqIzIgvI1zsGhZSGk1J3d06j9obwn2p ZvncEdrszpugIWm3JCildi6RPqGYXaE6PnkeKvIHyH7VqiecQnqGG5NsZggUCmJ/ z9oQLQkPRjMGL7ghulShAJu/2fwZGKM= -----END CERTIFICATE-----Generated at Mon Oct 20 06:45:40 2025 by rpki-client