$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4efbffc-2324-3f3b-be0b-927acd18aae1.roa File: e4efbffc-2324-3f3b-be0b-927acd18aae1.roa (raw, json) Hash identifier: DF+masSnaKdzgm2w68cLliXO3K4IctTz22oR9rHGcOE= Subject key identifier: F5:FB:0D:8E:3A:E1:D2:6A:3D:5B:49:03:53:73:0B:8A:F6:49:7C:FD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D0814E67877F5D266D100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4efbffc-2324-3f3b-be0b-927acd18aae1.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 173.191.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:08:14:e6:78:77:f5:d2:66:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=c3acea8e-6610-495e-a702-cb1273dc9df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:01:9a:7f:b5:60:ad:cb:12:61:ca:88:e2:e0: 88:86:af:fe:6c:bd:84:58:76:16:b9:f1:18:05:4b: ff:d1:eb:a5:fb:d0:a2:e5:a1:6f:0c:0d:1a:9c:f0: 09:95:5e:0d:1d:99:28:c3:cb:95:b1:17:6d:5a:77: 4e:c1:ae:da:18:45:95:cd:5a:ff:7e:03:0d:c3:44: 0f:a8:54:a1:f4:cc:e7:7c:c9:1e:89:6f:93:7f:a0: ff:26:90:f3:ec:f0:86:35:9f:26:80:d6:8b:e5:9f: e4:29:6b:73:ad:25:72:ce:af:11:76:0b:85:98:70: 82:a0:99:c1:47:e0:90:0d:f4:f3:47:0e:c7:85:1a: d5:92:e2:5e:93:fc:22:f4:1c:8b:3f:4e:31:cc:44: dc:c8:68:ca:67:a4:b3:e8:6a:da:1d:f7:ce:73:bc: c6:18:ef:ba:45:59:ca:4f:8f:72:c5:41:15:ce:a0: 63:83:e4:3e:4c:64:34:fd:49:a1:5a:6a:19:af:da: 75:1f:57:b3:dd:6f:e9:2b:44:ac:30:df:8c:9e:e7: d1:fb:24:36:e9:72:f5:d1:23:4d:4a:a8:db:1c:16: b1:14:30:63:3e:11:b6:a6:14:e6:c8:80:70:45:58: a4:1b:6d:10:b9:92:05:25:06:f7:36:bb:f4:08:e6: 2a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FB:0D:8E:3A:E1:D2:6A:3D:5B:49:03:53:73:0B:8A:F6:49:7C:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4efbffc-2324-3f3b-be0b-927acd18aae1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:e5:32:c2:44:54:e2:07:c6:3c:9d:38:3b:cc:6e:28:99:28: 49:4f:ca:2a:69:75:37:dc:8b:6a:91:7d:5b:98:71:3a:49:e8: 21:14:da:3e:4f:2c:23:a4:97:ef:e5:b8:86:03:22:50:4d:54: da:69:c9:97:f5:a6:dc:f2:5f:b9:39:28:6c:d3:00:51:0b:12: 59:78:b6:bd:6d:c9:44:55:20:9a:6b:34:b5:13:14:53:2f:31: c1:c1:73:7d:71:aa:28:ad:6e:1f:4c:81:38:1b:74:cb:bb:91: 15:43:44:9f:ee:36:e1:57:cb:3c:02:d3:6a:db:42:b3:d5:80: ff:42:e8:a9:d7:e5:9e:ed:be:8c:58:c6:a9:a4:c9:1b:d4:62: f4:b7:3e:0c:49:53:08:9a:7e:0b:8e:c1:66:95:fb:1d:ca:c1: 11:ca:3e:c9:3a:a0:37:ac:09:1c:75:cb:9e:30:4a:5b:de:e9: b4:0a:64:bd:1c:03:ec:e7:db:b6:06:c6:68:1b:b2:88:67:97: b0:ff:f7:f1:6a:68:c0:5e:aa:5d:76:79:ed:c5:a3:54:fc:7c: 52:36:fe:3b:32:57:4d:cd:a2:1d:c1:b4:61:00:29:b7:5e:46: 5a:35:07:cc:b1:b7:82:13:be:c9:67:65:cd:38:0a:77:e4:f7: fc:9f:04:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQgU5nh39dJm0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YzNhY2VhOGUtNjYxMC00OTVlLWE3MDItY2IxMjczZGM5ZGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAGaf7VgrcsSYcqI4uCIhq/+bL2EWHYWufEY BUv/0eul+9Ci5aFvDA0anPAJlV4NHZkow8uVsRdtWndOwa7aGEWVzVr/fgMNw0QP qFSh9MznfMkeiW+Tf6D/JpDz7PCGNZ8mgNaL5Z/kKWtzrSVyzq8RdguFmHCCoJnB R+CQDfTzRw7HhRrVkuJek/wi9ByLP04xzETcyGjKZ6Sz6GraHffOc7zGGO+6RVnK T49yxUEVzqBjg+Q+TGQ0/UmhWmoZr9p1H1ez3W/pK0SsMN+MnufR+yQ26XL10SNN SqjbHBaxFDBjPhG2phTmyIBwRVikG20QuZIFJQb3Nrv0COYqGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPX7DY464dJqPVtJA1NzC4r2SXz9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTRlZmJmZmMtMjMyNC0z ZjNiLWJlMGItOTI3YWNkMThhYWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb/4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrlMsJEVOIHxjydODvMbiiZKElPyippdTfci2qRfVuYcTpJ6CEU2j5P LCOkl+/luIYDIlBNVNppyZf1ptzyX7k5KGzTAFELEll4tr1tyURVIJprNLUTFFMv McHBc31xqiitbh9MgTgbdMu7kRVDRJ/uNuFXyzwC02rbQrPVgP9C6KnX5Z7tvoxY xqmkyRvUYvS3PgxJUwiafguOwWaV+x3KwRHKPsk6oDesCRx1y54wSlve6bQKZL0c A+zn27YGxmgbsohnl7D/9/FqaMBeql12ee3Fo1T8fFI2/jsyV03Noh3BtGEAKbde Rlo1B8yxt4ITvslnZc04Cnfk9/yfBG4= -----END CERTIFICATE-----Generated at Mon Oct 20 14:40:18 2025 by rpki-client