$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d75ba6fd-c2e9-38bd-b4d2-0aaf2c64e221.roa File: d75ba6fd-c2e9-38bd-b4d2-0aaf2c64e221.roa (raw, json) Hash identifier: jW5X4h/T7jy3aBZzljR//zEKEjRkDgVinB4NhFAtn5g= Subject key identifier: 05:A8:DC:A2:38:B7:0C:C4:81:12:92:4F:10:17:50:7B:EE:D8:36:B1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6631F8834B4ABFD9A1F4C180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d75ba6fd-c2e9-38bd-b4d2-0aaf2c64e221.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 7029 IP address blocks: 151.213.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:f8:83:4b:4a:bf:d9:a1:f4:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=0b2cfcfb-eb8d-4ebf-9999-8fbe284776fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ec:cf:12:2b:35:ce:ce:5d:38:cb:1c:9d:3e: b5:cc:4e:89:8f:8f:87:56:90:a9:63:2d:76:e9:88: 12:9b:82:55:21:3c:9a:8f:42:63:cf:c7:a3:0a:1b: 14:8b:29:29:67:74:78:b9:6d:a2:ba:c3:fd:08:97: d3:2f:b0:c2:e5:9d:04:fb:11:3f:08:04:ad:1e:ef: 43:b7:61:d3:27:b2:c6:1f:9d:af:3b:22:2a:56:40: 76:ad:fe:8d:99:7b:6d:91:c2:05:2f:f4:03:46:ce: c0:d1:bd:4d:d6:cc:b5:98:e5:7d:62:f6:c3:95:47: c9:69:3c:62:7e:ac:de:16:ce:b4:da:20:54:b3:7c: e6:32:e1:1b:2a:15:89:1d:42:ae:51:75:8d:ed:d6: f7:a1:8e:7a:6b:d2:05:45:06:5d:5a:08:0a:06:77: 24:ce:d1:0e:cb:7b:5a:41:25:e7:b6:3b:e1:e5:35: 96:8f:54:fb:ab:f0:8e:24:08:7e:32:2f:c8:ae:fa: 9a:e6:fc:40:25:b7:89:ae:41:dc:26:ff:8a:1f:e0: b7:80:1a:68:05:68:40:9f:aa:3c:0c:de:80:92:f0: 5a:85:6d:03:57:b6:ca:12:2d:96:9b:0d:bd:6c:19: c5:5e:aa:2b:29:39:1c:fa:f6:9d:52:e9:be:82:9a: 82:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A8:DC:A2:38:B7:0C:C4:81:12:92:4F:10:17:50:7B:EE:D8:36:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d75ba6fd-c2e9-38bd-b4d2-0aaf2c64e221.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:48:58:6f:ed:c6:3a:60:3d:1c:90:41:52:73:2a:d2:81:f5: 80:71:43:e4:42:a9:29:31:97:8b:2b:81:d4:a7:64:ff:f5:d8: e9:60:e0:c3:4c:52:23:c4:14:15:b0:ed:4c:a4:6a:fc:5d:68: 25:bd:fe:b9:bd:96:e5:a6:f2:f8:d3:e3:d2:e8:f1:3b:a6:96: cb:d2:a7:fd:89:58:15:6a:27:27:85:95:ba:52:97:d8:19:7f: c2:af:55:e1:51:4e:e4:81:22:38:41:75:8b:99:7c:dd:ea:bc: 0a:7f:6b:b0:67:e8:01:f6:31:94:ec:db:db:92:01:10:b9:ef: f0:d5:a5:88:07:1d:27:27:4f:a1:4b:03:1f:f7:e3:70:22:18: 49:51:98:3d:e2:e8:18:4f:a7:fe:8f:59:44:55:d4:df:ec:a6: 87:e6:d0:88:fc:f0:fc:69:32:d1:3f:6d:7d:b5:a5:37:55:3f: 98:21:91:03:73:26:e8:9b:8e:12:ba:26:44:03:b2:97:3e:20: 7f:90:09:56:03:5a:21:8e:c4:17:61:93:c2:0b:02:01:a9:52: 41:fa:c2:e5:0a:b8:5c:3f:a0:de:93:e7:1d:6b:95:c4:6c:41: a6:67:bd:aa:1f:65:41:0e:45:db:37:19:08:0c:44:e2:06:2b: 2d:cc:c8:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMfiDS0q/2aH0wYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk MGIyY2ZjZmItZWI4ZC00ZWJmLTk5OTktOGZiZTI4NDc3NmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuzPEis1zs5dOMscnT61zE6Jj4+HVpCpYy12 6YgSm4JVITyaj0Jjz8ejChsUiykpZ3R4uW2iusP9CJfTL7DC5Z0E+xE/CAStHu9D t2HTJ7LGH52vOyIqVkB2rf6NmXttkcIFL/QDRs7A0b1N1sy1mOV9YvbDlUfJaTxi fqzeFs602iBUs3zmMuEbKhWJHUKuUXWN7db3oY56a9IFRQZdWggKBnckztEOy3ta QSXntjvh5TWWj1T7q/COJAh+Mi/Irvqa5vxAJbeJrkHcJv+KH+C3gBpoBWhAn6o8 DN6AkvBahW0DV7bKEi2Wmw29bBnFXqorKTkc+vadUum+gpqCywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWo3KI4twzEgRKSTxAXUHvu2DaxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDc1YmE2ZmQtYzJlOS0z OGJkLWI0ZDItMGFhZjJjNjRlMjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl9VvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJIWG/txjpgPRyQQVJzKtKB9YBxQ+RCqSkxl4srgdSnZP/12Olg4MNM UiPEFBWw7UykavxdaCW9/rm9luWm8vjT49Lo8TumlsvSp/2JWBVqJyeFlbpSl9gZ f8KvVeFRTuSBIjhBdYuZfN3qvAp/a7Bn6AH2MZTs29uSARC57/DVpYgHHScnT6FL Ax/343AiGElRmD3i6BhPp/6PWURV1N/spofm0Ij88PxpMtE/bX21pTdVP5ghkQNz JuibjhK6JkQDspc+IH+QCVYDWiGOxBdhk8ILAgGpUkH6wuUKuFw/oN6T5x1rlcRs QaZnvaofZUEORds3GQgMROIGKy3MyDU= -----END CERTIFICATE-----Generated at Mon Oct 20 12:03:53 2025 by rpki-client