$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1155578-fa9e-3582-a636-4fbedf01e3c9.roa File: f1155578-fa9e-3582-a636-4fbedf01e3c9.roa (raw, json) Hash identifier: WlFMmHQjvL1XNjnmeXoTouJAEmz5ZSbxoVVmeUJhXcE= Subject key identifier: 8E:47:21:3B:32:FD:7D:ED:EA:EE:E8:E5:43:74:BB:F8:E6:82:BC:07 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B92DD89BB9CBDEBD5E3DD0980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1155578-fa9e-3582-a636-4fbedf01e3c9.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 7029 IP address blocks: 173.189.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:89:bb:9c:bd:eb:d5:e3:dd:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=dd1e5eac-a51d-43d7-b9f7-6878fba5ce1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b4:99:4d:2b:d1:4c:14:ba:8c:a7:bd:37:04: 61:e6:03:17:cd:fb:a8:ae:92:2f:f3:60:c9:1e:ed: d3:11:22:07:aa:75:91:74:21:a5:77:14:9c:54:6a: 23:ea:40:29:e2:ba:42:97:ed:74:52:40:8f:7d:b3: f8:ff:d6:a4:2f:5a:77:39:7e:9d:57:41:9b:f0:89: df:54:36:47:2f:12:a5:59:4c:55:53:2a:f0:60:c1: 5f:e1:09:d0:35:2b:3f:d2:76:60:34:e5:5f:e9:ab: 16:69:58:c8:87:a3:ce:e9:40:e9:61:04:70:3f:86: 9d:ab:f0:e4:be:cd:49:4e:2b:9a:a5:ce:81:4b:fd: d9:2a:68:9a:00:5a:64:1a:bd:8d:9f:a9:3b:b9:8a: da:bd:a8:0c:94:41:6a:00:62:d7:e4:ab:f3:25:05: 26:3c:52:8c:af:c7:59:ea:ab:0b:4b:29:48:99:d4: 52:73:b7:b3:57:b7:81:73:57:42:88:7d:3f:cb:82: 68:85:57:ba:1e:b1:69:19:05:0c:b6:93:de:b7:ce: e2:ac:f5:7d:d7:f0:a2:74:4f:e3:f0:ba:81:ee:9b: 3e:86:ad:9b:79:1a:fd:13:5a:ba:02:9d:5c:fa:f0: 00:c0:29:73:cd:5e:bb:87:ed:49:8f:71:3b:29:cb: f7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:47:21:3B:32:FD:7D:ED:EA:EE:E8:E5:43:74:BB:F8:E6:82:BC:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1155578-fa9e-3582-a636-4fbedf01e3c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:7b:72:36:c9:b9:89:9a:97:20:32:a9:1f:25:e4:5a:2d:f8: 4b:a2:1f:8e:e0:77:91:db:e2:a3:b4:e7:57:3c:35:6f:49:f9: 44:94:72:b2:58:20:f1:21:2c:15:4b:63:f2:76:4f:b6:0f:b5: 49:f8:90:32:cd:65:58:e7:57:a1:85:e0:bd:cf:dc:22:84:9e: 2d:96:fe:bb:6f:b2:8c:e6:b9:5b:fb:13:1a:39:ec:fe:e2:67: 1d:ba:75:6e:f3:a7:21:ba:d4:9b:e5:61:84:d8:69:5b:d3:da: 87:87:d9:f3:1f:1e:36:f6:31:68:9f:0f:ea:63:c5:e5:97:0c: f7:4f:e1:6e:5d:6d:d1:37:fc:bf:01:dc:68:83:7c:21:6b:6b: 29:94:00:ea:e0:c7:3a:8c:40:84:ea:7b:b5:2a:7d:b5:06:a8: 13:61:d1:7e:d2:54:69:25:f8:ef:c6:52:bb:5b:0d:be:d0:2e: ac:51:33:fb:b3:68:68:32:1c:24:31:e5:b5:5f:42:04:0f:14: 2f:f6:4d:57:b1:6c:04:37:e1:5a:27:12:ad:aa:e1:e4:01:a9: 58:ff:02:c0:88:66:fc:89:dd:20:20:a7:72:49:d6:60:30:7d: ff:a9:9a:a5:22:2d:ac:77:b0:57:71:d4:03:a0:fe:15:cd:15: b3:6f:cb:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3Ym7nL3r1ePdCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk ZGQxZTVlYWMtYTUxZC00M2Q3LWI5ZjctNjg3OGZiYTVjZTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbSZTSvRTBS6jKe9NwRh5gMXzfuorpIv82DJ Hu3TESIHqnWRdCGldxScVGoj6kAp4rpCl+10UkCPfbP4/9akL1p3OX6dV0Gb8Inf VDZHLxKlWUxVUyrwYMFf4QnQNSs/0nZgNOVf6asWaVjIh6PO6UDpYQRwP4adq/Dk vs1JTiuapc6BS/3ZKmiaAFpkGr2Nn6k7uYravagMlEFqAGLX5KvzJQUmPFKMr8dZ 6qsLSylImdRSc7ezV7eBc1dCiH0/y4JohVe6HrFpGQUMtpPet87irPV91/CidE/j 8LqB7ps+hq2beRr9E1q6Ap1c+vAAwClzzV67h+1Jj3E7Kcv36wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5HITsy/X3t6u7o5UN0u/jmgrwHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjExNTU1NzgtZmE5ZS0z NTgyLWE2MzYtNGZiZWRmMDFlM2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA17cjbJuYmalyAyqR8l5Fot+EuiH47gd5Hb4qO051c8NW9J+USUcrJY IPEhLBVLY/J2T7YPtUn4kDLNZVjnV6GF4L3P3CKEni2W/rtvsozmuVv7Exo57P7i Zx26dW7zpyG61JvlYYTYaVvT2oeH2fMfHjb2MWifD+pjxeWXDPdP4W5dbdE3/L8B 3GiDfCFraymUAOrgxzqMQITqe7UqfbUGqBNh0X7SVGkl+O/GUrtbDb7QLqxRM/uz aGgyHCQx5bVfQgQPFC/2TVexbAQ34VonEq2q4eQBqVj/AsCIZvyJ3SAgp3JJ1mAw ff+pmqUiLax3sFdx1AOg/hXNFbNvyyo= -----END CERTIFICATE-----Generated at Mon Oct 20 03:41:07 2025 by rpki-client