$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da1142c8-83b1-35b5-ae76-32afb027fcd1.roa File: da1142c8-83b1-35b5-ae76-32afb027fcd1.roa (raw, json) Hash identifier: oUKikF2b/OGX9v/j5TtTlQN/eVHqp8GfvoZ2SdFey18= Subject key identifier: B5:A1:81:25:E0:4F:24:4A:18:68:CD:F2:8B:60:13:58:07:A7:F5:B2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B8EACBC49F633534F11B63BB0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da1142c8-83b1-35b5-ae76-32afb027fcd1.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 7029 IP address blocks: 216.96.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:bc:49:f6:33:53:4f:11:b6:3b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=72bddfb9-9c52-421d-ab8e-ba60bb13ee97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3e:08:40:20:a3:7c:9b:a5:18:0b:25:a9:da: 21:14:7c:a0:cf:05:af:52:71:4b:79:74:88:1f:dc: a4:df:b6:3b:91:49:31:ff:a2:dd:33:74:d1:d5:78: 28:74:1b:0a:8a:27:6c:0f:69:b6:f2:b2:72:16:62: 6b:df:af:6f:5a:43:52:8c:06:e7:8d:6b:52:9d:b5: e7:cc:93:10:f6:88:44:63:ab:7e:e5:b0:3f:85:dd: c7:f9:ae:58:bd:99:57:42:60:39:72:b2:a5:89:25: ff:1f:c2:bf:69:c2:d3:ca:93:6d:07:8b:fc:a7:ab: 04:f3:52:18:0c:95:93:31:e4:8b:95:18:4b:7b:82: a3:9a:f9:95:3d:6f:7c:b5:c1:64:71:0e:03:00:55: 25:6b:02:4b:05:94:5c:02:cc:5b:b6:aa:06:c2:e6: 1e:d2:a5:10:c1:29:c3:a1:6b:3b:a0:94:a7:36:e2: 6f:f9:60:09:e8:67:8e:ca:a2:03:af:41:3b:3c:04: 74:aa:70:80:d0:75:12:f7:2c:21:0e:0d:6c:eb:09: 0e:73:ff:2f:b7:2d:df:4f:81:e4:4b:9f:4c:f7:6a: ae:08:16:d5:fa:e6:eb:fe:33:00:d8:9d:a0:be:70: 38:6d:d4:49:94:22:c1:9a:3c:6a:ae:0f:1d:74:2d: 7b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A1:81:25:E0:4F:24:4A:18:68:CD:F2:8B:60:13:58:07:A7:F5:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da1142c8-83b1-35b5-ae76-32afb027fcd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:70:57:99:8a:90:52:2c:60:d9:1f:f5:6b:3b:2e:54:d8:6f: c4:9d:4c:e2:6c:1b:6a:ce:cb:99:bb:c4:85:8e:b7:97:f9:27: 58:e5:27:82:73:b5:17:42:1f:18:cb:d7:8d:39:69:f6:b9:69: 08:c5:f0:c0:72:f8:9b:6f:ba:c6:b5:57:0a:34:d7:a6:9f:7e: aa:f3:e3:ce:c7:f3:f8:68:bf:34:71:86:c0:71:1f:33:08:19: 3f:50:89:d8:39:7a:15:85:8e:30:b8:af:fe:4c:e6:d9:33:3f: c5:b7:72:37:29:61:ec:56:cd:8a:30:48:49:9d:a7:ae:34:6e: c8:ce:29:5a:a2:e0:27:94:38:ad:86:c5:22:65:19:6f:44:a5: 20:81:2b:4f:94:7f:cf:1c:64:90:eb:be:a2:37:e0:64:e6:37: fe:c2:39:19:56:fe:2e:39:e1:00:d3:21:51:28:a9:07:d5:c0: 47:cc:b5:e5:49:ec:9a:e6:6c:c3:43:69:96:dc:4e:39:25:b3: 19:2c:fc:d8:7d:86:bf:ef:21:2a:ee:1d:09:9c:02:a0:14:03: 25:e8:95:0f:1e:8a:51:9a:11:5a:44:a7:4d:10:ea:39:a1:8d: 01:ce:4e:33:c8:c1:33:6f:f6:b5:40:8b:42:d9:d9:b0:f1:4f: 1c:c8:e7:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrLxJ9jNTTxG2O7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NzJiZGRmYjktOWM1Mi00MjFkLWFiOGUtYmE2MGJiMTNlZTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz4IQCCjfJulGAslqdohFHygzwWvUnFLeXSI H9yk37Y7kUkx/6LdM3TR1XgodBsKiidsD2m28rJyFmJr369vWkNSjAbnjWtSnbXn zJMQ9ohEY6t+5bA/hd3H+a5YvZlXQmA5crKliSX/H8K/acLTypNtB4v8p6sE81IY DJWTMeSLlRhLe4KjmvmVPW98tcFkcQ4DAFUlawJLBZRcAsxbtqoGwuYe0qUQwSnD oWs7oJSnNuJv+WAJ6GeOyqIDr0E7PAR0qnCA0HUS9ywhDg1s6wkOc/8vty3fT4Hk S59M92quCBbV+ubr/jMA2J2gvnA4bdRJlCLBmjxqrg8ddC17HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWhgSXgTyRKGGjN8otgE1gHp/WyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGExMTQyYzgtODNiMS0z NWI1LWFlNzYtMzJhZmIwMjdmY2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2GA0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRwV5mKkFIsYNkf9Ws7LlTYb8SdTOJsG2rOy5m7xIWOt5f5J1jlJ4Jz tRdCHxjL1405afa5aQjF8MBy+Jtvusa1Vwo016affqrz487H8/hovzRxhsBxHzMI GT9Qidg5ehWFjjC4r/5M5tkzP8W3cjcpYexWzYowSEmdp640bsjOKVqi4CeUOK2G xSJlGW9EpSCBK0+Uf88cZJDrvqI34GTmN/7CORlW/i454QDTIVEoqQfVwEfMteVJ 7JrmbMNDaZbcTjklsxks/Nh9hr/vISruHQmcAqAUAyXolQ8eilGaEVpEp00Q6jmh jQHOTjPIwTNv9rVAi0LZ2bDxTxzI59Y= -----END CERTIFICATE-----Generated at Mon Oct 20 03:46:15 2025 by rpki-client