$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa File: ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa (raw, json) Hash identifier: 6gF4YAmkV9/VYU4m3GsXjbMuS5BDHV1a8m/ruTD1fFc= Subject key identifier: 9A:44:86:41:18:4F:EC:2F:ED:11:ED:D1:2B:9C:C4:D2:FF:C1:4E:0A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CFDA685C99C08BA74DA80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 216.236.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:fd:a6:85:c9:9c:08:ba:74:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=4b091680-f8d5-4b81-bd5c-829cf1fa7c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0d:ca:a0:eb:15:4e:39:55:19:de:49:24:a2: 6d:bb:b2:1b:89:b0:fe:4c:db:c2:eb:6c:6e:f5:5d: 08:fc:96:c1:a4:26:6d:25:59:f5:f0:c1:60:da:24: e1:44:06:6f:2b:e0:5c:c9:6d:2a:85:e6:ad:80:b3: 96:45:64:9f:9d:e4:26:b7:be:0b:b3:10:53:db:11: 3c:0a:d5:a4:fb:e5:bb:fa:48:f9:5a:72:4e:85:85: ca:b6:d5:7a:97:1c:82:4b:89:22:8c:c7:ed:8a:2c: 99:e3:31:0c:7b:1f:14:9c:10:1f:54:9a:06:a1:cd: bc:da:9b:78:09:04:93:dd:dd:57:6c:92:80:7c:fe: 07:ea:5a:7f:60:f7:9f:92:ab:16:13:e2:8a:b0:e2: 90:4d:6f:b0:66:e5:bc:cc:67:bb:ed:d1:bf:03:54: 9b:0a:5b:8e:0f:a8:e9:23:bc:5e:8f:7f:30:2b:17: b5:df:7b:8c:da:c4:b3:87:19:90:cf:32:4f:0b:ed: 06:cc:7f:3a:45:a3:fc:1b:d9:04:4c:7b:6f:d1:cd: 2e:39:2e:3b:6a:8b:b8:99:09:38:43:aa:ae:1f:d3: a6:b4:88:6e:ea:8f:e7:8e:15:d4:ac:89:50:e6:e1: 6c:05:e1:c6:1f:4b:99:d1:d5:25:65:f6:4c:15:68: 7b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:44:86:41:18:4F:EC:2F:ED:11:ED:D1:2B:9C:C4:D2:FF:C1:4E:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.236.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:37:7a:f6:79:65:37:8a:c7:1b:eb:20:6f:a1:fa:cf:e9:8c: cf:ee:d6:74:1a:f1:b8:8e:46:e3:75:90:b5:97:33:19:3b:fe: 91:7a:47:4e:46:ca:d7:99:31:34:0e:49:21:0d:01:44:c2:62: 91:0b:a0:5c:16:bf:bd:aa:c9:0c:a3:a7:e6:9e:f9:9b:71:14: 54:8a:4a:8b:b2:a8:e4:79:21:d2:2b:6a:75:da:96:6b:50:83: 58:1e:2e:ee:81:34:27:b3:5f:d2:21:b4:e0:e1:b8:95:ac:4a: 8e:7b:bc:6e:db:b5:5b:3a:3e:66:f9:85:52:e6:75:16:87:82: fd:33:68:c1:9d:1b:a1:15:16:cc:ef:4d:bc:6d:23:b0:cd:aa: 77:9d:0b:40:40:2e:07:6f:30:e4:d6:92:4e:21:09:59:d9:53: 88:1f:61:94:4f:a2:18:cf:41:37:fc:f7:73:23:0e:97:4e:05: e7:f3:a6:6e:84:19:aa:8e:f0:e2:da:d2:1c:7a:1e:fb:2c:a2: d7:80:1e:ce:35:76:b6:3f:9c:8c:2a:ca:90:ec:cb:ce:46:7f: 1a:35:ee:8c:24:d0:34:b1:eb:26:6c:39:e8:2d:3b:dc:42:f8: 9e:bb:bf:73:b0:f4:85:39:6b:32:ed:5c:e2:eb:1d:15:5c:da: 2a:d7:87:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXP2mhcmcCLp02oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NGIwOTE2ODAtZjhkNS00YjgxLWJkNWMtODI5Y2YxZmE3YzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg3KoOsVTjlVGd5JJKJtu7IbibD+TNvC62xu 9V0I/JbBpCZtJVn18MFg2iThRAZvK+BcyW0qheatgLOWRWSfneQmt74LsxBT2xE8 CtWk++W7+kj5WnJOhYXKttV6lxyCS4kijMftiiyZ4zEMex8UnBAfVJoGoc282pt4 CQST3d1XbJKAfP4H6lp/YPefkqsWE+KKsOKQTW+wZuW8zGe77dG/A1SbCluOD6jp I7xej38wKxe133uM2sSzhxmQzzJPC+0GzH86RaP8G9kETHtv0c0uOS47aou4mQk4 Q6quH9OmtIhu6o/njhXUrIlQ5uFsBeHGH0uZ0dUlZfZMFWh7dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpEhkEYT+wv7RHt0SucxNL/wU4KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2E1YmY1YjEtNjE3Yy0z ZGM2LWIzYTgtZDQ5M2M0YTA3MzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OxVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAc3evZ5ZTeKxxvrIG+h+s/pjM/u1nQa8biORuN1kLWXMxk7/pF6R05G yteZMTQOSSENAUTCYpELoFwWv72qyQyjp+ae+ZtxFFSKSouyqOR5IdIranXalmtQ g1geLu6BNCezX9IhtODhuJWsSo57vG7btVs6Pmb5hVLmdRaHgv0zaMGdG6EVFszv TbxtI7DNqnedC0BALgdvMOTWkk4hCVnZU4gfYZRPohjPQTf893MjDpdOBefzpm6E GaqO8OLa0hx6HvssoteAHs41drY/nIwqypDsy85Gfxo17owk0DSx6yZsOegtO9xC +J67v3Ow9IU5azLtXOLrHRVc2irXh94= -----END CERTIFICATE-----Generated at Mon Oct 20 06:54:01 2025 by rpki-client