$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ceef92dd-ffef-35a7-9def-455b260a3f30.roa File: ceef92dd-ffef-35a7-9def-455b260a3f30.roa (raw, json) Hash identifier: ZOTijFp46xVOUzeF+OAF1109uTafZWp0cAMP1inc0Sg= Subject key identifier: D2:60:A8:C9:C2:EA:5E:FF:C3:67:DC:19:03:AB:F5:5A:A9:55:F6:4E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B7F525EFA57DE6E665C454FA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ceef92dd-ffef-35a7-9def-455b260a3f30.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 173.188.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:5e:fa:57:de:6e:66:5c:45:4f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=7985a962-2d97-4b02-804a-dae4bc6732f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4d:ac:ea:aa:51:48:79:ff:1b:d1:b2:e6:ef: 7f:c6:10:5f:dc:ea:a2:08:70:75:48:d0:38:21:76: ac:da:81:14:c9:b2:15:ff:0c:da:ce:8f:d4:b2:27: 17:0b:d0:ae:d4:4b:eb:76:84:b8:83:8c:ed:c8:b2: 41:91:6c:fd:25:48:a1:dd:fa:d6:bf:7e:61:d0:2d: 83:a0:04:9c:74:ce:d7:8a:ec:c8:23:ec:c3:91:4b: e1:3b:8c:67:3d:2a:23:3c:ff:df:f3:be:79:f5:22: 21:65:fb:ce:4e:93:83:aa:68:9a:fa:fa:78:0d:7e: 59:05:ec:e3:67:b6:59:2a:dc:9e:90:82:b6:c2:4a: e4:bc:bd:69:c8:34:79:80:bd:d4:95:c3:f4:1c:1f: 09:03:c3:05:e8:30:78:02:9e:5b:fb:0d:1c:52:7f: 9a:de:71:8f:65:da:79:10:25:8c:3a:52:7d:3a:09: 5f:5c:b5:59:cc:73:4f:55:02:3a:10:46:e0:f2:98: 89:18:fc:91:9f:6d:c6:95:97:31:f7:f6:7e:15:e3: c8:3b:4e:87:b4:84:82:17:ea:ce:76:d4:c7:da:e6: d8:5a:1a:09:85:47:c6:58:7c:ba:f5:0c:b9:65:ad: bb:7e:ae:01:b5:b4:c3:c0:4b:72:38:9b:1d:f9:e6: 1b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:60:A8:C9:C2:EA:5E:FF:C3:67:DC:19:03:AB:F5:5A:A9:55:F6:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ceef92dd-ffef-35a7-9def-455b260a3f30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:97:2e:6e:88:94:f8:f9:c8:ec:2c:22:cc:aa:3e:56:01:8f: b9:22:71:51:5c:91:58:dc:53:71:0f:2a:cb:6e:d0:43:d3:fd: f6:22:41:52:46:58:00:e8:5b:61:87:88:ae:94:f9:4d:09:ce: e4:7e:7b:c5:f8:32:3a:4e:b7:c9:60:3b:7b:91:47:b0:f7:4d: 99:40:e5:5d:46:80:b9:93:9c:d5:e5:1c:5f:cd:98:60:b0:be: 26:be:91:ef:de:26:d8:48:1f:a3:94:61:60:2a:25:82:0d:72: 1a:51:d4:00:9c:96:76:8f:7f:44:51:e6:44:72:57:d0:c2:61: a8:e1:53:b0:0d:2b:60:38:b4:73:d6:df:3c:b5:79:c6:dd:7b: d5:76:c3:90:ce:d8:09:07:9c:f9:b8:db:9d:d7:19:45:0e:a2: 20:0f:52:73:ab:98:25:8e:45:ff:9f:9a:62:9f:8a:e4:a8:4d: 44:0d:e7:c9:60:75:94:b6:57:9c:d0:ba:db:a0:da:76:10:40: 46:f8:31:96:89:bb:20:00:b1:82:3a:62:2c:31:5d:74:25:af: e4:7d:64:62:51:8a:ee:8f:0e:41:aa:b1:1d:10:1f:0b:e2:2c: 93:ef:c2:f6:5b:9b:8a:09:1c:ea:03:de:cc:e2:17:a8:8d:2f: f4:03:f1:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Ul76V95uZlxFT6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk Nzk4NWE5NjItMmQ5Ny00YjAyLTgwNGEtZGFlNGJjNjczMmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU2s6qpRSHn/G9Gy5u9/xhBf3OqiCHB1SNA4 IXas2oEUybIV/wzazo/UsicXC9Cu1EvrdoS4g4ztyLJBkWz9JUih3frWv35h0C2D oAScdM7XiuzII+zDkUvhO4xnPSojPP/f87559SIhZfvOTpODqmia+vp4DX5ZBezj Z7ZZKtyekIK2wkrkvL1pyDR5gL3UlcP0HB8JA8MF6DB4Ap5b+w0cUn+a3nGPZdp5 ECWMOlJ9OglfXLVZzHNPVQI6EEbg8piJGPyRn23GlZcx9/Z+FePIO06HtISCF+rO dtTH2ubYWhoJhUfGWHy69Qy5Za27fq4BtbTDwEtyOJsd+eYbBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJgqMnC6l7/w2fcGQOr9VqpVfZOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2VlZjkyZGQtZmZlZi0z NWE3LTlkZWYtNDU1YjI2MGEzZjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbwSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+XLm6IlPj5yOwsIsyqPlYBj7kicVFckVjcU3EPKstu0EPT/fYiQVJG WADoW2GHiK6U+U0JzuR+e8X4MjpOt8lgO3uRR7D3TZlA5V1GgLmTnNXlHF/NmGCw via+ke/eJthIH6OUYWAqJYINchpR1ACclnaPf0RR5kRyV9DCYajhU7ANK2A4tHPW 3zy1ecbde9V2w5DO2AkHnPm4253XGUUOoiAPUnOrmCWORf+fmmKfiuSoTUQN58lg dZS2V5zQutug2nYQQEb4MZaJuyAAsYI6YiwxXXQlr+R9ZGJRiu6PDkGqsR0QHwvi LJPvwvZbm4oJHOoD3sziF6iNL/QD8WA= -----END CERTIFICATE-----Generated at Mon Oct 20 06:30:35 2025 by rpki-client