$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a77814a-3c28-3da2-ac94-b7c6e1e40527.roa File: 0a77814a-3c28-3da2-ac94-b7c6e1e40527.roa (raw, json) Hash identifier: aYABKQa3GFsNT35o8n8eDYST7UWUfGn5TMsdaR9NFmI= Subject key identifier: 2B:5C:42:C3:77:92:CF:60:54:1B:33:5F:A9:AD:DE:64:99:EF:CD:55 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CD41FE7D3FFB96D63BC80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a77814a-3c28-3da2-ac94-b7c6e1e40527.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 36471 IP address blocks: 209.255.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:d4:1f:e7:d3:ff:b9:6d:63:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=0f0edc11-c32c-4f4e-ae3a-d34b1c1f9cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7b:16:95:26:81:67:21:16:bf:cb:42:33:97: 3c:30:76:87:dd:7e:51:a2:02:30:58:29:d6:f2:b3: 61:bf:d4:29:98:8f:10:48:62:36:6f:a5:1c:2b:92: a1:b3:74:d0:a3:a0:87:56:f6:71:20:f0:a0:15:3c: 6c:ee:e8:19:bc:3a:9f:b9:72:0c:d2:27:35:89:4c: 9c:ee:14:b7:de:c4:db:bb:b7:80:6e:de:b0:17:44: d2:e9:ea:54:69:31:52:fd:50:fa:69:ec:50:c9:6b: c6:cc:8f:a9:bf:b8:81:46:62:a6:14:ab:a7:57:5b: 86:10:0e:52:9b:ee:4f:76:b7:0a:66:c7:79:ef:03: 72:6f:f6:7d:ad:1c:09:36:3a:fd:b9:68:82:41:64: d8:b5:66:42:cc:b1:2f:07:45:16:78:63:2e:e2:2b: 1d:b0:55:42:5b:44:56:86:24:ca:30:fa:7b:8d:8a: 4b:d9:ba:91:0a:99:22:22:25:09:ec:22:57:89:e8: b7:d8:6d:7f:d8:31:34:53:e0:fa:24:93:11:c6:c2: 7d:4b:40:bd:68:e5:fb:02:23:2a:1c:d5:e6:f2:64: 1b:41:e4:9d:f1:3c:5a:d8:06:4e:b1:a0:0a:f3:00: ef:da:1c:bd:db:b6:32:f3:3e:9f:41:b3:86:25:f3: 99:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:5C:42:C3:77:92:CF:60:54:1B:33:5F:A9:AD:DE:64:99:EF:CD:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a77814a-3c28-3da2-ac94-b7c6e1e40527.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.255.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:1c:4b:1a:1a:e6:92:cd:7b:26:3f:ee:21:8e:47:68:2e:d5: f3:f2:ec:03:5b:0f:84:89:2f:d4:1f:73:23:99:59:eb:cc:ed: 36:e4:70:2f:de:10:68:80:31:97:79:9b:da:2f:d4:b8:8f:ca: 85:96:6c:b1:de:7c:fa:b3:5c:3b:95:13:64:53:bf:3f:45:0a: 6a:af:42:6e:01:ac:01:ad:2c:f9:0b:65:32:9e:bc:b0:a2:df: e8:a3:f2:04:b6:52:1e:7e:88:11:46:7c:30:4e:07:54:95:2a: 95:2a:45:b7:c1:cd:36:fe:a6:68:a3:e0:58:77:1e:7c:07:d1: ef:3e:c1:aa:41:f1:8b:e9:93:b9:17:62:7b:bd:c8:e3:a9:75: 1d:7a:4d:46:53:79:fa:28:ab:8c:9a:1a:f7:98:81:da:54:3e: 12:e6:c7:8e:b4:76:c7:56:e3:e1:35:7d:f7:bb:70:99:a0:87: f1:3e:b9:cc:b4:35:81:83:3d:af:38:73:fa:5e:c2:37:43:c3: 7c:83:37:00:00:aa:f3:d5:b4:64:a1:6d:fe:c3:86:e5:ea:4e: bc:db:69:8d:d0:c2:91:1e:48:76:e0:5c:8e:e6:c1:2e:94:03: 49:1c:5a:20:64:33:c8:6b:f5:84:53:cb:1b:9c:72:7f:71:95: 08:f7:18:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXNQf59P/uW1jvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MGYwZWRjMTEtYzMyYy00ZjRlLWFlM2EtZDM0YjFjMWY5Y2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3sWlSaBZyEWv8tCM5c8MHaH3X5RogIwWCnW 8rNhv9QpmI8QSGI2b6UcK5Khs3TQo6CHVvZxIPCgFTxs7ugZvDqfuXIM0ic1iUyc 7hS33sTbu7eAbt6wF0TS6epUaTFS/VD6aexQyWvGzI+pv7iBRmKmFKunV1uGEA5S m+5PdrcKZsd57wNyb/Z9rRwJNjr9uWiCQWTYtWZCzLEvB0UWeGMu4isdsFVCW0RW hiTKMPp7jYpL2bqRCpkiIiUJ7CJXiei32G1/2DE0U+D6JJMRxsJ9S0C9aOX7AiMq HNXm8mQbQeSd8Txa2AZOsaAK8wDv2hy927Yy8z6fQbOGJfOZFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtcQsN3ks9gVBszX6mt3mSZ781VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGE3NzgxNGEtM2MyOC0z ZGEyLWFjOTQtYjdjNmUxZTQwNTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f/2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMcSxoa5pLNeyY/7iGOR2gu1fPy7ANbD4SJL9QfcyOZWevM7TbkcC/e EGiAMZd5m9ov1LiPyoWWbLHefPqzXDuVE2RTvz9FCmqvQm4BrAGtLPkLZTKevLCi 3+ij8gS2Uh5+iBFGfDBOB1SVKpUqRbfBzTb+pmij4Fh3HnwH0e8+wapB8Yvpk7kX Ynu9yOOpdR16TUZTefooq4yaGveYgdpUPhLmx460dsdW4+E1ffe7cJmgh/E+ucy0 NYGDPa84c/pewjdDw3yDNwAAqvPVtGShbf7DhuXqTrzbaY3QwpEeSHbgXI7mwS6U A0kcWiBkM8hr9YRTyxuccn9xlQj3GFQ= -----END CERTIFICATE-----Generated at Fri Oct 10 22:06:04 2025 by rpki-client