$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baab7286-a5eb-325a-b2bf-19029d98c328.roa File: baab7286-a5eb-325a-b2bf-19029d98c328.roa (raw, json) Hash identifier: CrxuGXhp4SA6O1KSTQG77BUOc78fwrPJOfoGKpO5Rxs= Subject key identifier: 55:06:B1:55:57:C2:C3:4F:FF:B3:7B:95:04:B0:00:44:17:1E:C8:27 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B7F525ED83BB7E956A92C0300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baab7286-a5eb-325a-b2bf-19029d98c328.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 173.187.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:5e:d8:3b:b7:e9:56:a9:2c:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=ba32c0ea-995c-40fd-8706-8f55eb9646dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1f:22:f5:e3:fd:9f:3a:3d:da:c4:1f:ec:3b: 3f:01:8f:7d:7b:c5:f3:7a:e9:1e:61:60:cd:fc:b4: 77:c3:17:46:b0:2c:0a:84:d0:72:16:90:eb:ef:e4: df:14:be:a8:e4:32:0e:99:b6:7e:ff:48:b7:e5:de: 12:49:84:f3:4a:12:bd:24:f9:ab:38:af:a2:e7:05: 91:2b:43:06:23:d3:89:94:d6:c6:9e:cf:f8:37:85: c0:1a:d7:40:46:f2:8d:ed:8d:fe:b6:ac:bc:06:60: cd:91:75:b9:a8:ce:88:03:bb:2b:11:c2:91:8d:40: d7:6c:ff:7a:a0:e6:4c:3f:9d:4e:5a:61:63:b1:de: 27:d6:f8:7d:5a:87:2b:a5:3f:1a:ec:6e:16:57:e2: 86:d9:e3:46:0f:e5:c8:12:09:7b:d8:5a:98:22:55: f4:24:1c:ac:27:5b:fd:dd:c8:20:96:62:aa:e8:66: bd:9c:91:8a:70:d8:04:ba:01:fb:01:2e:b5:b5:a9: 03:e9:b4:b8:34:23:29:3d:af:dc:ee:f4:f4:09:f8: b9:91:57:06:65:92:19:ce:38:55:a2:9b:99:b0:cb: 3b:09:10:fe:14:1e:aa:5a:a9:98:1b:fb:f1:37:63: a4:5f:60:fc:4f:1d:17:dd:19:56:74:48:ea:9f:1a: 19:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:06:B1:55:57:C2:C3:4F:FF:B3:7B:95:04:B0:00:44:17:1E:C8:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baab7286-a5eb-325a-b2bf-19029d98c328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:03:05:d7:47:d0:e4:06:2c:a9:27:bb:10:3b:fd:8e:de:a7: d5:2b:ea:43:47:8c:19:95:2a:b4:c9:17:42:d2:8a:4e:30:e6: 21:04:50:62:51:10:9b:d9:a5:a6:f7:b8:ce:54:ec:d7:e6:53: d5:d8:4a:b3:dc:f1:e8:70:91:7e:e1:71:5b:d5:5b:2f:d0:51: 2c:bd:53:aa:55:17:df:e9:17:93:04:91:55:c9:1a:7a:04:fc: 9e:33:9d:6e:01:73:cc:20:84:b5:50:7b:76:4d:48:48:6a:e0: 1f:62:93:ae:32:71:27:59:a8:a0:df:ed:fd:2e:d3:b7:7c:16: 0a:fe:65:24:bb:2b:a6:79:df:7f:5e:a7:72:f1:24:c3:75:64: 92:f0:56:62:72:55:f8:4a:af:2a:cd:45:ef:cb:dc:56:01:f0: 1f:8f:ac:ae:ae:7b:29:41:dc:1b:04:db:a7:aa:a2:74:43:14: 1b:61:a0:ae:a7:bc:c6:f1:98:2c:5f:25:d4:e3:d9:41:52:5b: c3:83:aa:3b:1f:b5:24:01:12:76:f8:de:94:87:96:cf:dc:28: 5a:7b:75:06:c4:54:a0:d1:1e:5c:14:37:a4:8e:18:f6:d8:1c: 13:1d:8e:54:99:c9:c1:24:19:12:be:d0:f5:49:c1:ea:24:6c: c3:30:1a:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Ul7YO7fpVqksAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YmEzMmMwZWEtOTk1Yy00MGZkLTg3MDYtOGY1NWViOTY0NmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix8i9eP9nzo92sQf7Ds/AY99e8XzeukeYWDN /LR3wxdGsCwKhNByFpDr7+TfFL6o5DIOmbZ+/0i35d4SSYTzShK9JPmrOK+i5wWR K0MGI9OJlNbGns/4N4XAGtdARvKN7Y3+tqy8BmDNkXW5qM6IA7srEcKRjUDXbP96 oOZMP51OWmFjsd4n1vh9WocrpT8a7G4WV+KG2eNGD+XIEgl72FqYIlX0JBysJ1v9 3cgglmKq6Ga9nJGKcNgEugH7AS61takD6bS4NCMpPa/c7vT0Cfi5kVcGZZIZzjhV opuZsMs7CRD+FB6qWqmYG/vxN2OkX2D8Tx0X3RlWdEjqnxoZDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUGsVVXwsNP/7N7lQSwAEQXHsgnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmFhYjcyODYtYTVlYi0z MjVhLWIyYmYtMTkwMjlkOThjMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbvoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0DBddH0OQGLKknuxA7/Y7ep9Ur6kNHjBmVKrTJF0LSik4w5iEEUGJR EJvZpab3uM5U7NfmU9XYSrPc8ehwkX7hcVvVWy/QUSy9U6pVF9/pF5MEkVXJGnoE /J4znW4Bc8wghLVQe3ZNSEhq4B9ik64ycSdZqKDf7f0u07d8Fgr+ZSS7K6Z5339e p3LxJMN1ZJLwVmJyVfhKryrNRe/L3FYB8B+PrK6ueylB3BsE26eqonRDFBthoK6n vMbxmCxfJdTj2UFSW8ODqjsftSQBEnb43pSHls/cKFp7dQbEVKDRHlwUN6SOGPbY HBMdjlSZycEkGRK+0PVJweokbMMwGss= -----END CERTIFICATE-----Generated at Mon Oct 20 04:00:03 2025 by rpki-client