$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a619793-f158-3d46-870c-e25dd34ec2c8.roa File: 0a619793-f158-3d46-870c-e25dd34ec2c8.roa (raw, json) Hash identifier: rfUMmwrrClqdBA7HmmsNlwxBBD851ooEOwa6DhbDHkc= Subject key identifier: 09:98:F4:A9:8D:B1:05:B1:AE:2B:87:06:67:21:E1:8B:ED:B0:3D:45 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF5B7429E29DE1DF75600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a619793-f158-3d46-870c-e25dd34ec2c8.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 74.10.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f5:b7:42:9e:29:de:1d:f7:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=ae959626-92f0-4b7d-8984-e7c0892ddf35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:66:07:11:3d:b0:b5:08:c1:c1:57:a3:d3:c1: 1e:ff:b3:f3:46:be:2d:17:61:72:2a:2d:24:25:b6: 05:9c:0b:90:92:f9:92:6c:21:45:d4:c7:19:4e:71: fa:10:9e:cc:6e:f7:06:39:46:c9:ab:25:ad:80:82: 3a:1b:8f:ae:49:a2:c6:b0:e3:45:58:80:c6:ca:73: fe:2c:b1:fc:53:96:c8:fd:e4:1f:ff:e5:56:d2:f6: 27:3e:5e:1c:d3:63:ff:d3:f1:d2:19:e3:94:42:9d: 82:5b:2f:e5:cb:7a:11:28:6b:24:70:2a:d1:6c:83: d5:df:9f:ad:db:92:46:5e:d1:5e:3c:14:77:a7:dd: c7:43:2b:ff:f6:89:4e:c0:49:0c:25:bb:0a:91:76: 57:38:f8:96:7a:ad:e1:1f:79:2b:2b:43:98:5b:29: 5e:2a:62:12:06:f3:47:0a:cf:40:8c:81:ac:53:9f: 37:8b:c9:5c:b5:2b:fc:f9:b4:5c:fd:83:a7:c1:5e: a9:4a:38:37:a5:2c:03:9d:23:8a:ed:5d:3c:86:9c: bd:5e:65:03:cc:3b:24:25:1c:df:96:43:a7:73:55: 68:08:cc:d7:47:12:8f:75:26:70:ec:77:ef:d1:9b: e8:7b:93:c4:1c:5f:92:13:0c:57:b7:c0:f4:24:7b: 14:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:98:F4:A9:8D:B1:05:B1:AE:2B:87:06:67:21:E1:8B:ED:B0:3D:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a619793-f158-3d46-870c-e25dd34ec2c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.10.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:56:b6:5f:a0:2c:0c:49:88:af:07:8e:03:b7:54:85:07:b3: 31:2a:a2:4f:10:86:aa:26:9b:76:ce:ed:1f:02:3b:e9:c7:ae: 55:1f:84:e1:88:e4:a2:27:fb:66:17:18:70:f9:11:50:d2:c1: 93:9f:50:d2:34:53:63:34:b0:09:6b:31:60:b1:00:09:88:8a: 3d:91:00:5e:40:4d:de:ee:d1:0d:60:28:41:a3:21:ab:3b:c4: 7f:92:4d:aa:e4:6f:c7:79:64:48:df:21:69:f6:b6:1b:ea:cb: a1:00:50:8a:7c:ec:ac:79:fe:49:be:69:b8:c7:47:11:92:76: b0:a6:e1:ff:ac:3b:70:df:19:4f:e1:18:c6:d9:23:1c:a4:0e: c7:fa:e9:19:3b:14:ce:23:85:f7:77:3e:2a:c1:d2:ac:e1:75: fa:21:8e:82:47:e9:62:ea:90:30:7c:e3:f3:6f:df:73:bc:58: 19:8a:9a:5b:f7:a2:84:2e:4e:81:c1:cb:85:a2:16:4f:c0:59: f7:04:6b:ec:ce:6b:e4:02:15:52:f5:0c:fb:63:a4:06:b2:e7: 09:42:85:3b:bc:a4:1a:95:d5:6e:a8:ba:06:ee:16:29:ee:5f: 47:64:aa:17:ca:56:5c:13:c2:29:4b:ee:16:75:d1:db:ff:93: 8f:72:8a:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPW3Qp4p3h33VgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YWU5NTk2MjYtOTJmMC00YjdkLTg5ODQtZTdjMDg5MmRkZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2YHET2wtQjBwVej08Ee/7PzRr4tF2FyKi0k JbYFnAuQkvmSbCFF1McZTnH6EJ7MbvcGOUbJqyWtgII6G4+uSaLGsONFWIDGynP+ LLH8U5bI/eQf/+VW0vYnPl4c02P/0/HSGeOUQp2CWy/ly3oRKGskcCrRbIPV35+t 25JGXtFePBR3p93HQyv/9olOwEkMJbsKkXZXOPiWeq3hH3krK0OYWyleKmISBvNH Cs9AjIGsU583i8lctSv8+bRc/YOnwV6pSjg3pSwDnSOK7V08hpy9XmUDzDskJRzf lkOnc1VoCMzXRxKPdSZw7Hfv0Zvoe5PEHF+SEwxXt8D0JHsUGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmY9KmNsQWxriuHBmch4YvtsD1FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGE2MTk3OTMtZjE1OC0z ZDQ2LTg3MGMtZTI1ZGQzNGVjMmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgoLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdWtl+gLAxJiK8HjgO3VIUHszEqok8Qhqomm3bO7R8CO+nHrlUfhOGI 5KIn+2YXGHD5EVDSwZOfUNI0U2M0sAlrMWCxAAmIij2RAF5ATd7u0Q1gKEGjIas7 xH+STarkb8d5ZEjfIWn2thvqy6EAUIp87Kx5/km+abjHRxGSdrCm4f+sO3DfGU/h GMbZIxykDsf66Rk7FM4jhfd3PirB0qzhdfohjoJH6WLqkDB84/Nv33O8WBmKmlv3 ooQuToHBy4WiFk/AWfcEa+zOa+QCFVL1DPtjpAay5wlChTu8pBqV1W6ougbuFinu X0dkqhfKVlwTwilL7hZ10dv/k49yihE= -----END CERTIFICATE-----Generated at Fri Oct 10 22:06:32 2025 by rpki-client