$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f29689c8-51e8-333f-a82c-945ea0f294cd.roa File: f29689c8-51e8-333f-a82c-945ea0f294cd.roa (raw, json) Hash identifier: 9q2cJh3H6mcCZy0BDn7Y9glXHj+viyOc5TqigZL8vXc= Subject key identifier: 3D:2C:F1:4A:9A:82:57:5F:FB:85:4F:93:98:31:C3:C7:42:67:1D:A3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D05BBAE6C761802DFCFC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f29689c8-51e8-333f-a82c-945ea0f294cd.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 53435 IP address blocks: 72.4.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:05:bb:ae:6c:76:18:02:df:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=f5cf5193-2cc5-4896-a1e2-58b867ce10dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a4:ac:28:88:ce:0e:1d:c0:65:0e:9f:36:9a: a4:82:ea:39:ed:34:86:4f:63:ca:47:67:15:4b:34: b2:b0:5e:a6:c0:78:24:0f:c6:53:60:4d:14:e9:a2: 78:65:49:cc:d4:6c:5a:ed:3f:ef:df:05:a6:f4:6c: 1b:31:76:f6:09:6c:0c:93:8c:9c:d1:b8:e1:06:cd: 8e:9a:29:6b:bc:a7:3a:00:7c:b1:4a:00:6e:35:ba: 54:55:30:0d:58:7d:ba:36:ca:67:7c:8c:a1:51:8f: 2e:31:ef:9b:2b:a9:f8:48:f4:62:45:0e:0f:8b:d5: 4e:3b:ad:e0:4a:63:88:be:a1:0a:8f:f0:e3:b5:ef: 16:44:f6:5f:13:9c:36:48:55:90:31:88:ca:c0:4b: 9a:74:ab:e9:1c:18:f2:7b:43:66:25:65:7b:ee:b0: f2:91:e1:a9:74:aa:9a:1f:3b:ea:aa:35:6b:1d:3b: 90:98:c5:37:d9:5c:58:86:77:87:1f:2c:26:8d:07: dc:1a:f8:70:0c:ce:0b:74:d0:0d:50:c1:30:02:4a: 64:69:8e:22:03:bb:8a:96:6b:50:66:42:08:2f:6c: 96:ae:3c:8f:67:01:bb:c7:f7:fd:9a:73:42:f0:70: 6c:c4:5c:d3:54:a0:2e:25:c4:a3:ad:29:b4:31:59: fe:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2C:F1:4A:9A:82:57:5F:FB:85:4F:93:98:31:C3:C7:42:67:1D:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f29689c8-51e8-333f-a82c-945ea0f294cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.4.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:ec:f0:87:5e:71:51:ef:08:31:85:a7:3a:54:ca:61:a8:c0: 46:cb:f2:4e:98:fe:0b:fe:e1:45:85:ee:70:74:bd:1c:42:69: d2:52:0f:01:16:44:5f:b7:66:c9:87:77:91:cc:c8:9c:2a:76: 0f:d5:54:f4:59:db:98:2c:c7:72:bb:86:26:0f:2d:f1:7a:0c: 5e:15:34:3e:24:8c:d3:26:04:9e:5a:5e:32:21:24:9e:88:74: 3d:ef:87:24:72:ad:e2:bf:ce:a5:51:f7:87:d6:fc:6c:39:45: 9c:62:31:b0:6b:08:63:b8:14:8d:42:c0:05:81:b7:d8:00:c3: 48:24:a7:93:dd:6e:3c:80:90:64:40:a5:61:d7:c6:ec:6b:3b: 7f:af:e8:af:50:1a:a0:e0:b6:aa:1f:e4:dd:49:18:06:f2:6e: 61:df:0c:17:e4:a9:f1:9b:0f:c5:b6:e8:4a:d2:3a:ca:db:8c: 4a:aa:b1:f6:f4:04:46:8a:51:97:24:eb:e0:15:8c:58:b3:d6: ca:a4:36:43:5f:90:da:a4:80:b1:e8:32:74:37:67:6d:b8:01: e0:84:93:a1:89:c8:e5:1f:24:69:f1:53:c5:fb:dc:d6:b7:f2: ac:10:1d:4e:2f:2c:bc:6b:6c:49:30:f8:98:c6:54:9f:2e:d1: 0c:1d:9a:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQW7rmx2GALfz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZjVjZjUxOTMtMmNjNS00ODk2LWExZTItNThiODY3Y2UxMGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6SsKIjODh3AZQ6fNpqkguo57TSGT2PKR2cV SzSysF6mwHgkD8ZTYE0U6aJ4ZUnM1Gxa7T/v3wWm9GwbMXb2CWwMk4yc0bjhBs2O milrvKc6AHyxSgBuNbpUVTANWH26NspnfIyhUY8uMe+bK6n4SPRiRQ4Pi9VOO63g SmOIvqEKj/Djte8WRPZfE5w2SFWQMYjKwEuadKvpHBjye0NmJWV77rDykeGpdKqa HzvqqjVrHTuQmMU32VxYhneHHywmjQfcGvhwDM4LdNANUMEwAkpkaY4iA7uKlmtQ ZkIIL2yWrjyPZwG7x/f9mnNC8HBsxFzTVKAuJcSjrSm0MVn+LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0s8Uqagldf+4VPk5gxw8dCZx2jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjI5Njg5YzgtNTFlOC0z MzNmLWE4MmMtOTQ1ZWEwZjI5NGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/s8IdecVHvCDGFpzpUymGowEbL8k6Y/gv+4UWF7nB0vRxCadJSDwEW RF+3ZsmHd5HMyJwqdg/VVPRZ25gsx3K7hiYPLfF6DF4VND4kjNMmBJ5aXjIhJJ6I dD3vhyRyreK/zqVR94fW/Gw5RZxiMbBrCGO4FI1CwAWBt9gAw0gkp5PdbjyAkGRA pWHXxuxrO3+v6K9QGqDgtqof5N1JGAbybmHfDBfkqfGbD8W26ErSOsrbjEqqsfb0 BEaKUZck6+AVjFiz1sqkNkNfkNqkgLHoMnQ3Z224AeCEk6GJyOUfJGnxU8X73Na3 8qwQHU4vLLxrbEkw+JjGVJ8u0QwdmtI= -----END CERTIFICATE-----Generated at Mon Oct 20 06:44:48 2025 by rpki-client