$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/feb0fb3a-3d9d-321a-bf3c-a0695488f539.roa File: feb0fb3a-3d9d-321a-bf3c-a0695488f539.roa (raw, json) Hash identifier: E8p+irZgtnZdujDxPGF5PoR0QF7dBrpxbw/cdlKEADc= Subject key identifier: E2:37:54:69:36:26:C2:78:77:88:CC:9C:58:FD:DB:94:4A:7F:6B:E9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2CAA4E6AACFBC01C1B0800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/feb0fb3a-3d9d-321a-bf3c-a0695488f539.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 173.190.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:aa:4e:6a:ac:fb:c0:1c:1b:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=8687156b-d8af-454d-9c93-b172cc0249e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d4:17:70:d2:ef:31:2c:83:6a:d0:91:a6:6e: 45:84:b2:33:e0:2d:d2:34:d6:bf:e6:d4:19:4a:3c: 30:a9:87:62:0a:05:ec:91:4c:ee:45:9e:4d:4b:f8: a9:a7:d4:8a:0c:ec:ef:d0:73:b0:6d:37:c9:01:14: 1b:ce:49:eb:d2:b2:33:ee:b2:03:33:88:dd:74:c3: 66:38:6f:bb:55:36:42:b2:ad:c3:b0:7f:df:8c:47: 13:9c:8a:80:a8:e8:db:7c:7a:67:d6:c5:2b:4d:8a: ec:8c:a8:ab:d7:15:77:de:b6:5b:a6:fc:ba:a4:d7: 46:7f:10:46:6c:f2:33:90:d4:7e:67:94:65:8c:29: db:d6:cd:ca:7b:0a:be:51:c2:06:ad:14:42:05:a6: 49:df:5f:b6:d9:fc:99:30:da:a0:5c:e6:1b:0a:be: d0:d2:6f:c2:f0:2e:12:9c:a9:af:88:46:e3:2e:06: 5f:d2:39:bc:18:b1:20:4a:06:63:2f:66:d6:ac:ae: df:c4:d5:d7:77:d1:97:66:3f:9f:98:31:c2:63:79: f1:c5:ac:5d:90:ea:20:16:30:81:25:84:88:71:05: e5:7b:4f:72:71:50:a4:41:76:38:08:09:79:c2:47: 2c:02:e3:d8:9d:3f:06:b1:8f:fe:10:d3:50:7f:08: a0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:37:54:69:36:26:C2:78:77:88:CC:9C:58:FD:DB:94:4A:7F:6B:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/feb0fb3a-3d9d-321a-bf3c-a0695488f539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:c9:13:17:c7:89:72:9d:eb:7d:87:02:d0:66:56:a7:0b:f6: 85:75:89:5f:5c:9f:b0:1f:38:9b:4a:2c:c9:d9:40:d5:65:63: 83:7b:5a:6c:31:97:9b:48:91:ed:02:32:a6:c1:f8:c7:a5:cc: a5:6e:fb:3a:0b:30:27:0e:41:50:0f:17:0d:89:fd:ca:e2:cd: 4d:98:b0:00:8f:d9:cc:2d:ec:30:62:75:5f:d0:86:51:5c:bd: 13:c7:04:62:bb:c1:d7:cb:3d:18:bc:c8:a3:20:e3:f3:9f:71: 0c:3d:00:4e:22:15:35:9e:40:e5:88:ad:72:fc:74:c3:7d:35: 89:31:3e:1f:38:b5:49:19:6a:20:54:4b:05:fb:cc:e5:8b:d3: 84:c4:fd:50:90:e4:fd:68:88:39:03:14:09:a5:0b:1f:32:d2: 4c:3c:24:6d:32:a6:e9:e9:77:ec:ef:5b:0d:de:e9:1b:fc:ec: f1:b3:5d:fa:57:d3:2a:b3:0e:e6:3d:00:f7:89:16:04:1d:ca: a7:ea:63:ec:94:bb:8d:e6:3d:d1:99:e6:b8:9d:dc:e9:d8:85: 1d:93:b2:ca:90:50:06:16:bb:12:15:54:2a:1e:cd:45:05:63: 75:ab:8a:c4:cb:59:f9:cc:30:04:9b:b1:f9:ea:f5:af:c8:0e: bf:86:83:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLKpOaqz7wBwbCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ODY4NzE1NmItZDhhZi00NTRkLTljOTMtYjE3MmNjMDI0OWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdQXcNLvMSyDatCRpm5FhLIz4C3SNNa/5tQZ SjwwqYdiCgXskUzuRZ5NS/ipp9SKDOzv0HOwbTfJARQbzknr0rIz7rIDM4jddMNm OG+7VTZCsq3DsH/fjEcTnIqAqOjbfHpn1sUrTYrsjKir1xV33rZbpvy6pNdGfxBG bPIzkNR+Z5RljCnb1s3Kewq+UcIGrRRCBaZJ31+22fyZMNqgXOYbCr7Q0m/C8C4S nKmviEbjLgZf0jm8GLEgSgZjL2bWrK7fxNXXd9GXZj+fmDHCY3nxxaxdkOogFjCB JYSIcQXle09ycVCkQXY4CAl5wkcsAuPYnT8GsY/+ENNQfwigLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOI3VGk2JsJ4d4jMnFj925RKf2vpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmViMGZiM2EtM2Q5ZC0z MjFhLWJmM2MtYTA2OTU0ODhmNTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbJExfHiXKd632HAtBmVqcL9oV1iV9cn7AfOJtKLMnZQNVlY4N7Wmwx l5tIke0CMqbB+MelzKVu+zoLMCcOQVAPFw2J/crizU2YsACP2cwt7DBidV/QhlFc vRPHBGK7wdfLPRi8yKMg4/OfcQw9AE4iFTWeQOWIrXL8dMN9NYkxPh84tUkZaiBU SwX7zOWL04TE/VCQ5P1oiDkDFAmlCx8y0kw8JG0ypunpd+zvWw3e6Rv87PGzXfpX 0yqzDuY9APeJFgQdyqfqY+yUu43mPdGZ5rid3OnYhR2TssqQUAYWuxIVVCoezUUF Y3WrisTLWfnMMASbsfnq9a/IDr+Gg0s= -----END CERTIFICATE-----Generated at Mon Oct 20 06:44:27 2025 by rpki-client