$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb8e1633-4433-3491-af4f-78a96b3a9ef4.roa File: fb8e1633-4433-3491-af4f-78a96b3a9ef4.roa (raw, json) Hash identifier: 8n2TlmATz+gVfOZcLL/HzzFwO4jiaduDCOoxCOOYYL0= Subject key identifier: EF:9D:5F:17:22:78:68:60:25:96:56:BC:3C:50:60:64:97:46:9B:26 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B7B21F0DBF636CC9B4D0A7600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb8e1633-4433-3491-af4f-78a96b3a9ef4.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 7029 IP address blocks: 151.213.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:f0:db:f6:36:cc:9b:4d:0a:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=3bfafd20-3e35-4b8c-9908-852bc8e71be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ca:5a:79:c6:11:db:68:eb:74:f9:51:c0:8b: 71:80:32:03:91:4b:7c:e9:7d:ed:6d:ce:ca:7d:f2: 0d:97:dc:98:cd:72:5f:0b:dd:a5:18:d5:30:48:c9: fd:34:b4:a2:fb:17:b4:9d:47:c8:e4:2b:fb:a9:9a: 5c:d6:2f:61:b4:4c:94:e8:ed:ba:54:23:c0:0c:15: a2:e6:24:df:c1:55:88:2c:1f:10:7e:20:2a:8a:60: b8:31:3a:72:e1:2d:fc:ce:56:0f:6f:fc:42:2a:f8: 29:af:d8:0e:c0:c1:dc:63:42:4e:5d:d5:2d:8e:3f: 3b:a0:23:c1:b6:76:ef:b0:7f:ae:e2:de:aa:bc:6a: f8:2a:05:39:de:aa:73:c4:0b:41:2c:ef:9b:27:f9: d8:ac:2e:e1:30:6d:53:99:b4:f2:74:9d:06:be:21: 6a:3c:34:ee:0d:0f:8b:df:45:45:9d:a7:d1:5e:50: 5b:88:ef:be:06:52:e4:7a:38:de:e5:2b:b9:cd:1c: e1:3b:64:67:e7:6c:5e:38:af:34:18:e4:b7:02:c3: 2a:8b:ac:71:4c:60:4d:95:35:ea:e2:82:63:35:f6: 13:50:99:3f:9b:a3:cc:0f:95:a7:25:53:8e:ed:73: 49:95:cd:af:72:ff:4c:11:1a:90:b1:e8:31:74:e2: 17:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:9D:5F:17:22:78:68:60:25:96:56:BC:3C:50:60:64:97:46:9B:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb8e1633-4433-3491-af4f-78a96b3a9ef4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:b1:89:d1:32:81:2e:05:09:43:02:64:49:ff:46:4f:b1:93: 8e:a2:ab:22:81:fa:cc:4d:03:e9:51:c3:f6:54:6e:3b:8e:19: 6d:88:b2:16:55:11:9d:e6:6c:81:29:84:22:b9:f2:0a:bf:12: 32:14:9f:6c:d3:41:3d:10:6f:dc:42:58:41:57:7a:74:e4:2f: e1:8f:b9:18:d2:95:9e:b7:89:28:e5:54:5b:f2:04:6b:a5:17: f9:94:17:81:65:4d:1e:c6:b0:93:cb:5b:82:31:04:bc:8d:30: 76:c9:32:35:43:1e:4a:29:8d:ee:9c:df:62:60:ee:ed:91:3f: c7:14:6c:13:c7:8c:b1:2a:2a:3d:96:03:de:f2:bf:b5:50:e1: 38:19:47:6a:8c:d5:f4:31:d4:c1:35:b9:16:8c:11:1c:90:24: cc:aa:03:88:35:39:05:1f:48:8a:e2:fe:90:2d:8c:e7:5b:34: c1:c2:94:ce:08:39:78:dd:41:15:c7:d9:31:5f:d1:de:24:d3: 41:34:c3:05:80:95:22:03:b8:ca:b1:78:f4:94:69:55:db:32: 54:7a:d6:61:b7:79:ed:53:ac:99:3e:bb:38:cb:db:24:ec:c6: b6:df:88:27:9f:42:67:14:02:40:47:f1:aa:12:88:6d:28:99: c4:1a:61:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7IfDb9jbMm00KdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk M2JmYWZkMjAtM2UzNS00YjhjLTk5MDgtODUyYmM4ZTcxYmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgspaecYR22jrdPlRwItxgDIDkUt86X3tbc7K ffINl9yYzXJfC92lGNUwSMn9NLSi+xe0nUfI5Cv7qZpc1i9htEyU6O26VCPADBWi 5iTfwVWILB8QfiAqimC4MTpy4S38zlYPb/xCKvgpr9gOwMHcY0JOXdUtjj87oCPB tnbvsH+u4t6qvGr4KgU53qpzxAtBLO+bJ/nYrC7hMG1TmbTydJ0GviFqPDTuDQ+L 30VFnafRXlBbiO++BlLkejje5Su5zRzhO2Rn52xeOK80GOS3AsMqi6xxTGBNlTXq 4oJjNfYTUJk/m6PMD5WnJVOO7XNJlc2vcv9MERqQsegxdOIXFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+dXxcieGhgJZZWvDxQYGSXRpsmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmI4ZTE2MzMtNDQzMy0z NDkxLWFmNGYtNzhhOTZiM2E5ZWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl9WKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCxidEygS4FCUMCZEn/Rk+xk46iqyKB+sxNA+lRw/ZUbjuOGW2IshZV EZ3mbIEphCK58gq/EjIUn2zTQT0Qb9xCWEFXenTkL+GPuRjSlZ63iSjlVFvyBGul F/mUF4FlTR7GsJPLW4IxBLyNMHbJMjVDHkopje6c32Jg7u2RP8cUbBPHjLEqKj2W A97yv7VQ4TgZR2qM1fQx1ME1uRaMERyQJMyqA4g1OQUfSIri/pAtjOdbNMHClM4I OXjdQRXH2TFf0d4k00E0wwWAlSIDuMqxePSUaVXbMlR61mG3ee1TrJk+uzjL2yTs xrbfiCefQmcUAkBH8aoSiG0omcQaYX0= -----END CERTIFICATE-----Generated at Mon Oct 20 03:31:04 2025 by rpki-client