$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ef01a4-f6bc-372e-94e6-7036094f5449.roa File: 08ef01a4-f6bc-372e-94e6-7036094f5449.roa (raw, json) Hash identifier: wPX6IhfEVsJ6BIoBaDhRHOM+Yurn4mmDB0P+fqAu+6I= Subject key identifier: 7D:9D:62:78:3A:B9:54:50:7A:53:2F:09:48:25:8D:20:6A:64:CB:2A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF597D02F394D984C2380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ef01a4-f6bc-372e-94e6-7036094f5449.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 72.248.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f5:97:d0:2f:39:4d:98:4c:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=7a0ed796-8447-44f7-bf24-af14d0009494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bd:ea:c2:c1:8d:53:2b:9e:5d:bb:f4:b3:68: 48:1a:ed:45:be:20:96:ee:82:d5:01:7f:ca:51:ad: e8:f0:80:fc:eb:73:fd:c0:86:36:ca:8b:33:61:e6: 60:77:c5:50:2a:72:e8:d9:d8:0f:dc:45:2c:40:ad: cc:5b:56:11:7d:9a:3f:fd:2d:25:8c:9e:81:00:fc: 8e:7a:16:bb:68:c3:2a:e5:8e:97:6e:4e:88:19:2a: 81:83:37:34:74:8e:e5:a7:5d:66:66:65:d5:88:74: e9:62:e0:6b:1b:fc:9e:52:9d:c7:7c:17:b8:f6:5a: 0d:a4:88:fe:66:b7:5a:e6:26:d6:be:00:de:82:5f: 07:52:2b:c3:f7:59:8d:b5:0e:80:8e:2e:cd:83:7f: 34:fe:44:0e:33:3a:bd:d1:e0:c6:90:e0:00:e3:bb: 99:55:e5:ac:eb:52:35:b1:8a:27:e5:79:23:63:11: 55:b8:19:37:86:21:a3:f8:5c:aa:c2:e8:b3:6f:76: dd:7e:2a:f7:f9:9f:98:66:d3:32:87:02:98:0f:00: 68:11:c3:00:0b:79:c0:ef:ad:ed:2d:75:f8:4d:65: cb:8a:28:93:ea:b5:36:60:30:48:55:1f:af:20:86: 39:47:10:82:97:b4:d5:c7:5e:cf:b2:da:e8:b0:08: fa:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9D:62:78:3A:B9:54:50:7A:53:2F:09:48:25:8D:20:6A:64:CB:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ef01a4-f6bc-372e-94e6-7036094f5449.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.248.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:23:c3:99:44:f8:da:52:c7:c0:3e:8e:0c:cc:57:f2:87:05: aa:08:69:e6:35:f6:25:cc:86:d2:3b:34:5e:fa:11:e6:e7:ac: b5:99:47:7c:e7:0c:19:3c:8f:8a:e3:32:d2:16:97:1a:77:cb: 17:68:01:74:cf:45:89:46:2a:61:04:c6:60:72:b7:7d:e2:ae: 97:0b:20:40:05:a7:9f:6c:9f:51:b2:c7:56:e5:8e:9b:48:40: f6:48:15:be:57:f7:c9:49:aa:33:ea:1a:30:2d:5f:49:00:22: b7:9a:44:65:ba:14:0c:f3:e1:ca:70:ed:f0:17:92:0d:c9:fb: 35:31:43:22:b8:8d:f3:d6:7f:26:d3:dc:1f:74:e3:25:e5:42: fc:a3:47:e7:59:48:ed:3a:9a:7e:50:ca:36:84:95:2d:18:1e: 17:d1:b2:54:5d:79:c2:82:f9:e2:b4:69:65:72:b6:53:29:8c: 5a:8b:ce:5a:17:75:23:f3:5b:de:b0:c3:f0:ef:4a:cc:14:d1: a7:a3:60:80:fd:05:25:cf:26:43:7f:d0:45:6a:94:1c:b4:cc: 29:d3:56:a0:5c:f8:c8:fa:50:ac:f6:33:c8:4c:36:3c:36:a2: a2:41:dc:0b:f6:60:ea:83:4d:32:bb:4a:01:19:28:67:cc:e8: e0:53:36:9a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtxXPWX0C85TZhMI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk N2EwZWQ3OTYtODQ0Ny00NGY3LWJmMjQtYWYxNGQwMDA5NDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL3qwsGNUyueXbv0s2hIGu1FviCW7oLVAX/K Ua3o8ID863P9wIY2yoszYeZgd8VQKnLo2dgP3EUsQK3MW1YRfZo//S0ljJ6BAPyO eha7aMMq5Y6Xbk6IGSqBgzc0dI7lp11mZmXViHTpYuBrG/yeUp3HfBe49loNpIj+ Zrda5ibWvgDegl8HUivD91mNtQ6Aji7Ng380/kQOMzq90eDGkOAA47uZVeWs61I1 sYon5XkjYxFVuBk3hiGj+Fyqwuizb3bdfir3+Z+YZtMyhwKYDwBoEcMAC3nA763t LXX4TWXLiiiT6rU2YDBIVR+vIIY5RxCCl7TVx17PstrosAj6xQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFH2dYng6uVRQelMvCUgljSBqZMsqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDhlZjAxYTQtZjZiYy0z NzJlLTk0ZTYtNzAzNjA5NGY1NDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMASPgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAPiPDmUT42lLHwD6ODMxX8ocFqghp5jX2JcyG0js0XvoR5uestZlHfOcM GTyPiuMy0haXGnfLF2gBdM9FiUYqYQTGYHK3feKulwsgQAWnn2yfUbLHVuWOm0hA 9kgVvlf3yUmqM+oaMC1fSQAit5pEZboUDPPhynDt8BeSDcn7NTFDIriN89Z/JtPc H3TjJeVC/KNH51lI7TqaflDKNoSVLRgeF9GyVF15woL54rRpZXK2UymMWovOWhd1 I/Nb3rDD8O9KzBTRp6NggP0FJc8mQ3/QRWqUHLTMKdNWoFz4yPpQrPYzyEw2PDai okHcC/Zg6oNNMrtKARkoZ8zo4FM2mg== -----END CERTIFICATE-----Generated at Fri Oct 10 17:57:26 2025 by rpki-client