$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bdcc1688-3489-357f-95be-95cce13504c4.roa File: bdcc1688-3489-357f-95be-95cce13504c4.roa (raw, json) Hash identifier: 7cNpL0RkEsgLmCZokd8B1P4GzN3JDvJcKqiGcozU41Y= Subject key identifier: 86:72:88:3E:7F:C1:A1:DD:DC:F9:89:F5:36:72:4B:F5:98:7D:BA:E6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B9442265EB7D4FB414DDA2DC8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bdcc1688-3489-357f-95be-95cce13504c4.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 7029 IP address blocks: 173.189.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:26:5e:b7:d4:fb:41:4d:da:2d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=d479bf86-473b-454d-a73e-4f4e8f3967a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3f:5d:05:5c:3b:9c:c5:d9:38:d7:a6:c2:34: b3:3a:3b:7a:c6:a8:f7:f3:21:f1:a7:a9:9b:34:8e: 89:77:cf:7a:17:af:32:01:79:e8:b3:04:27:f4:3b: 9d:92:4a:f7:c2:5d:6f:0b:62:1f:26:07:db:f5:2c: da:3d:46:4f:1f:cc:ac:44:09:3f:61:32:0c:f9:e3: e7:7f:26:58:16:13:f8:17:0e:8f:8e:2e:63:bf:34: b5:76:e4:c3:e4:ed:3c:19:d8:03:d2:22:0d:6a:4c: 13:90:bb:5d:9b:98:a3:2d:25:9f:aa:88:b5:ad:58: 5b:d9:82:0b:2c:17:e6:bc:5e:cc:11:4d:b3:9a:c4: 37:9e:69:f8:41:a9:de:3e:42:8f:70:97:9d:69:3d: 41:e8:0e:bb:aa:2d:9a:b7:6d:5c:a8:7d:7e:77:27: d6:fd:f0:de:7b:55:a6:65:6f:2f:96:28:c9:d3:27: 95:ff:0e:d5:b5:52:14:da:6e:3d:ef:f5:37:a1:c6: 59:7f:3b:2f:16:5b:e9:aa:a9:e4:9a:eb:0f:cb:28: b4:4d:39:d1:c6:93:bd:58:80:8e:a4:5e:4e:64:58: 9e:ef:94:71:c9:f4:04:a8:c3:a8:78:35:46:8d:b4: 20:e8:e7:f7:2c:cb:3f:0f:8a:40:dd:0e:09:e8:49: c5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:72:88:3E:7F:C1:A1:DD:DC:F9:89:F5:36:72:4B:F5:98:7D:BA:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bdcc1688-3489-357f-95be-95cce13504c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:b6:1c:04:15:be:e8:c9:0f:c3:6e:ee:f8:13:47:8f:12:cb: a1:f5:58:18:28:f8:62:4a:36:86:90:00:b9:66:be:63:4d:f8: 32:f2:7d:e5:04:38:d0:d3:99:62:09:41:a5:21:2d:5d:7f:f7: 73:0d:24:ef:eb:75:36:75:96:2d:61:b0:b2:23:ca:89:54:7f: e7:14:94:b2:b7:1b:b7:6b:34:6a:26:f3:f8:b9:e2:6d:05:5f: f6:7d:39:01:df:52:74:ff:bb:9b:4a:f4:e0:20:2c:89:4c:d9: c5:12:ba:2d:6e:7b:ba:8e:26:72:84:65:75:87:64:8c:9d:5e: f2:46:c6:fe:6c:dc:66:5a:8e:7b:72:f5:c3:55:e0:60:af:7c: a9:30:12:58:3b:7d:a7:a1:8d:c3:a7:87:a8:37:9e:7c:d4:db: 82:45:f9:68:f6:40:43:6b:f6:4a:f2:03:9a:c1:8d:b3:7d:76: af:06:26:b8:a0:48:23:a3:d6:2a:57:e5:be:1f:4d:7a:23:b3: 3d:2d:74:d8:e8:34:3f:9a:56:ec:73:58:2e:48:5e:6b:65:82: b2:31:9f:95:50:34:57:8c:e7:57:25:da:4e:10:68:b1:0f:30: f5:e3:54:0b:b2:b9:10:d6:41:ee:86:5b:51:03:57:d5:f4:ae: e2:ab:d5:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQiZet9T7QU3aLcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk ZDQ3OWJmODYtNDczYi00NTRkLWE3M2UtNGY0ZThmMzk2N2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD9dBVw7nMXZONemwjSzOjt6xqj38yHxp6mb NI6Jd896F68yAXnoswQn9Dudkkr3wl1vC2IfJgfb9SzaPUZPH8ysRAk/YTIM+ePn fyZYFhP4Fw6Pji5jvzS1duTD5O08GdgD0iINakwTkLtdm5ijLSWfqoi1rVhb2YIL LBfmvF7MEU2zmsQ3nmn4QanePkKPcJedaT1B6A67qi2at21cqH1+dyfW/fDee1Wm ZW8vlijJ0yeV/w7VtVIU2m497/U3ocZZfzsvFlvpqqnkmusPyyi0TTnRxpO9WICO pF5OZFie75RxyfQEqMOoeDVGjbQg6Of3LMs/D4pA3Q4J6EnFIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZyiD5/waHd3PmJ9TZyS/WYfbrmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmRjYzE2ODgtMzQ4OS0z NTdmLTk1YmUtOTVjY2UxMzUwNGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrb1sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+2HAQVvujJD8Nu7vgTR48Sy6H1WBgo+GJKNoaQALlmvmNN+DLyfeUE ONDTmWIJQaUhLV1/93MNJO/rdTZ1li1hsLIjyolUf+cUlLK3G7drNGom8/i54m0F X/Z9OQHfUnT/u5tK9OAgLIlM2cUSui1ue7qOJnKEZXWHZIydXvJGxv5s3GZajnty 9cNV4GCvfKkwElg7faehjcOnh6g3nnzU24JF+Wj2QENr9kryA5rBjbN9dq8GJrig SCOj1ipX5b4fTXojsz0tdNjoND+aVuxzWC5IXmtlgrIxn5VQNFeM51cl2k4QaLEP MPXjVAuyuRDWQe6GW1EDV9X0ruKr1W4= -----END CERTIFICATE-----Generated at Mon Oct 20 05:39:24 2025 by rpki-client