$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ab4aa8-25bc-3a21-b234-327defea1e21.roa File: 08ab4aa8-25bc-3a21-b234-327defea1e21.roa (raw, json) Hash identifier: ZjVDefh2KpU9hbTCKFufZBQOVFH6XH5N5zq8UN0Xkb0= Subject key identifier: A1:96:00:95:D1:35:BD:95:F5:F4:9F:20:E6:24:56:F9:BA:4C:E3:43 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B79BCC31531D7240F014E0F40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ab4aa8-25bc-3a21-b234-327defea1e21.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 67.141.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:c3:15:31:d7:24:0f:01:4e:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=944564ad-31a0-4d7f-bbf1-bab7cd7cf0d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c0:31:2f:68:50:3c:98:ee:81:21:0b:e2:f4: 41:83:1a:e1:b7:7b:61:64:d0:b1:9c:ca:e6:66:6a: 8d:07:e1:87:ea:fe:78:e9:37:4c:5e:be:71:f7:8e: 6f:99:19:65:c4:49:fd:3d:fb:71:5d:9c:dd:d9:2c: 41:6e:88:d9:d3:c9:92:08:bb:61:88:2f:84:35:56: 23:1d:98:0f:bf:a4:d3:59:cd:ae:4c:66:96:3b:22: 0a:8e:36:ef:5b:b6:91:9f:bc:93:38:20:24:a8:c6: c0:9c:4d:68:dc:c2:4f:4b:e0:f8:a5:06:e2:4e:a8: 36:1c:37:26:88:41:d2:6f:7a:63:38:8c:5f:9e:18: e9:d6:b8:a0:c7:c7:67:ad:67:3b:cb:ee:f3:38:45: 31:e0:db:96:f0:54:d8:ca:82:29:8e:98:51:f4:4c: d5:d2:fb:de:51:7d:44:a6:0f:35:d8:b0:e6:b1:b9: 22:94:60:0e:ce:43:47:92:cf:cb:d5:23:f8:98:c7: 84:ea:92:74:9a:b2:c4:81:af:25:32:17:c1:9e:ef: cb:61:17:f5:b8:64:e1:dd:17:12:2a:ef:08:0d:c3: 2d:9c:ec:4b:f7:0e:18:b7:be:5d:81:4f:df:60:39: 69:01:7e:ca:f7:52:be:41:99:3d:97:f2:d4:83:18: 54:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:96:00:95:D1:35:BD:95:F5:F4:9F:20:E6:24:56:F9:BA:4C:E3:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ab4aa8-25bc-3a21-b234-327defea1e21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f0:0a:71:3f:e7:b7:68:e4:ab:59:0f:f5:75:72:21:37:e3: d4:64:2a:83:a5:b1:05:30:06:de:2b:80:69:47:26:1b:cb:64: 62:31:f5:55:37:03:27:45:c6:ec:41:60:cc:ff:04:fa:07:49: b4:7e:c9:bb:cd:c1:28:59:38:2c:81:cd:3e:5a:ea:d4:ef:fc: 9f:f0:4d:73:00:90:98:ef:54:2e:9e:bc:70:bd:e5:ae:1b:86: cb:6b:2e:95:87:4d:65:5c:a0:c8:b6:d3:a2:f1:e8:c7:02:20: cf:3c:e7:1b:9c:e2:15:10:10:81:6f:c1:e3:10:f3:c3:a8:e9: 82:b5:68:0e:94:68:76:1f:d4:10:fb:05:34:89:d4:5a:98:30: 95:5c:00:72:13:61:7a:87:a3:f5:8b:2a:84:54:3c:8c:84:72: 70:c4:da:e2:65:f6:e7:c7:01:78:63:ee:49:ff:75:b5:f3:6a: 88:3b:7b:58:87:5f:b2:55:17:c5:c0:39:8f:de:c7:c9:cd:a2: f7:3a:93:67:7e:d3:67:8f:07:54:1d:90:fe:84:bb:ef:19:a8: 67:da:89:46:25:06:05:d6:74:cd:a6:e1:8e:ab:79:36:75:99: d5:6c:12:d9:54:e1:a1:39:22:3d:32:dd:e6:14:ce:a9:a0:32: b1:cf:be:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vMMVMdckDwFOD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk OTQ0NTY0YWQtMzFhMC00ZDdmLWJiZjEtYmFiN2NkN2NmMGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8AxL2hQPJjugSEL4vRBgxrht3thZNCxnMrm ZmqNB+GH6v546TdMXr5x945vmRllxEn9PftxXZzd2SxBbojZ08mSCLthiC+ENVYj HZgPv6TTWc2uTGaWOyIKjjbvW7aRn7yTOCAkqMbAnE1o3MJPS+D4pQbiTqg2HDcm iEHSb3pjOIxfnhjp1rigx8dnrWc7y+7zOEUx4NuW8FTYyoIpjphR9EzV0vveUX1E pg812LDmsbkilGAOzkNHks/L1SP4mMeE6pJ0mrLEga8lMhfBnu/LYRf1uGTh3RcS Ku8IDcMtnOxL9w4Yt75dgU/fYDlpAX7K91K+QZk9l/LUgxhUIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGWAJXRNb2V9fSfIOYkVvm6TONDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDhhYjRhYTgtMjViYy0z YTIxLWIyMzQtMzI3ZGVmZWExZTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ41YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXwCnE/57do5KtZD/V1ciE349RkKoOlsQUwBt4rgGlHJhvLZGIx9VU3 AydFxuxBYMz/BPoHSbR+ybvNwShZOCyBzT5a6tTv/J/wTXMAkJjvVC6evHC95a4b hstrLpWHTWVcoMi206Lx6McCIM885xuc4hUQEIFvweMQ88Oo6YK1aA6UaHYf1BD7 BTSJ1FqYMJVcAHITYXqHo/WLKoRUPIyEcnDE2uJl9ufHAXhj7kn/dbXzaog7e1iH X7JVF8XAOY/ex8nNovc6k2d+02ePB1QdkP6Eu+8ZqGfaiUYlBgXWdM2m4Y6reTZ1 mdVsEtlU4aE5Ij0y3eYUzqmgMrHPvnM= -----END CERTIFICATE-----Generated at Sat Oct 11 00:24:26 2025 by rpki-client