$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a90a390-d0a5-365f-9730-fddae514051e.roa File: 0a90a390-d0a5-365f-9730-fddae514051e.roa (raw, json) Hash identifier: 4OSv/c/QnawQu6xANLLPTnwdcPEdE1oFall706A3x8w= Subject key identifier: E4:96:37:0C:B6:79:C0:E7:34:06:BB:7A:A5:3F:82:12:7E:EE:04:84 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CFA336DF7E65CCF626500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a90a390-d0a5-365f-9730-fddae514051e.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 199.195.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:fa:33:6d:f7:e6:5c:cf:62:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=e97a05fe-3dd5-4eee-a2eb-3261e63cf6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e9:54:e2:04:0d:0b:75:a4:c1:8e:57:46:e9: 2a:a0:e5:20:98:f9:e3:51:42:45:12:cd:ab:2f:c8: e7:9c:06:1c:38:3a:66:e4:5a:58:68:4f:bc:f5:8c: 5a:2b:db:50:74:ba:22:a1:4f:b5:c8:a1:d7:81:0b: db:2f:f0:37:4d:d4:a6:c5:46:65:cf:b9:bb:e1:4d: f3:a7:ee:be:39:c9:fe:1c:dd:79:27:c2:f0:1d:4a: 0e:7e:d8:7c:14:82:ce:af:94:ca:03:40:83:ef:d9: a0:11:de:a9:07:6a:e5:bb:87:05:e2:e6:bf:76:66: 1e:6f:1a:c1:fc:67:a9:8d:15:2d:0d:9c:83:5c:28: 81:ae:cb:34:d9:b9:fb:2c:0f:dd:ef:49:23:c1:32: 2e:b1:72:b6:f3:ac:fb:f2:d7:9d:0c:fe:3d:c1:e6: ae:fa:e4:aa:e8:62:ce:eb:d0:53:c3:20:fc:17:1a: c4:64:b8:f9:9a:45:54:e5:71:a4:6f:8a:f0:11:3d: 30:1d:de:6e:e5:a7:c4:d5:e5:9a:a9:e9:4e:35:b3: ff:32:1d:27:a9:26:46:e3:41:60:98:82:f0:13:7c: 60:1b:54:1f:5f:a9:47:92:09:65:ff:b5:a0:39:2b: d2:49:f7:5e:39:9a:fc:fe:3a:b9:ec:bd:29:b3:dd: 8f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:96:37:0C:B6:79:C0:E7:34:06:BB:7A:A5:3F:82:12:7E:EE:04:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a90a390-d0a5-365f-9730-fddae514051e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 199.195.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:99:55:12:1f:6b:64:d4:1e:05:ec:35:af:90:14:44:4d:6a: 2a:2e:8e:a5:52:46:6a:d7:f5:e5:e9:43:a2:e2:7c:fd:2d:55: 7a:86:85:5c:e4:51:fa:49:ea:a2:74:40:9a:79:37:ce:52:ba: 8e:f6:0e:b6:2a:c4:8e:40:c4:2d:ba:62:48:28:4e:99:5e:80: 78:c8:3b:3b:bd:61:59:7f:aa:8f:f3:09:cc:7a:09:27:1e:b6: 98:36:cb:3a:3a:d5:9b:c6:82:04:34:e9:cf:d0:63:c0:fd:58: 88:8e:60:e4:ee:6b:5c:05:2d:3b:63:4b:fc:8e:f2:fe:26:6f: 80:9c:95:a6:b6:f9:06:0c:81:5c:d7:85:34:30:bc:86:5f:ca: 2d:fc:a7:23:a3:d6:4c:24:55:87:7b:4d:f5:a9:21:d9:71:aa: 2c:0e:2c:58:73:00:38:e1:34:70:ec:b0:e8:43:65:51:13:47: 95:d3:39:8c:5d:60:d2:19:98:c5:ca:19:03:ac:f8:73:c1:9b: 65:a5:a2:6d:cc:15:67:f5:7e:69:5c:7c:f9:8f:af:12:88:ec: 7e:bb:9b:bc:23:14:3b:b8:c2:8e:af:ce:0e:e6:22:6a:be:dd: e2:52:f3:9b:ea:9a:66:98:b6:bd:a3:25:2d:7e:76:df:d1:c0: 5a:04:05:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPozbffmXM9iZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZTk3YTA1ZmUtM2RkNS00ZWVlLWEyZWItMzI2MWU2M2NmNmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOlU4gQNC3WkwY5XRukqoOUgmPnjUUJFEs2r L8jnnAYcODpm5FpYaE+89YxaK9tQdLoioU+1yKHXgQvbL/A3TdSmxUZlz7m74U3z p+6+Ocn+HN15J8LwHUoOfth8FILOr5TKA0CD79mgEd6pB2rlu4cF4ua/dmYebxrB /GepjRUtDZyDXCiBrss02bn7LA/d70kjwTIusXK286z78tedDP49weau+uSq6GLO 69BTwyD8FxrEZLj5mkVU5XGkb4rwET0wHd5u5afE1eWaqelONbP/Mh0nqSZG40Fg mILwE3xgG1QfX6lHkgll/7WgOSvSSfdeOZr8/jq57L0ps92PGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSWNwy2ecDnNAa7eqU/ghJ+7gSEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGE5MGEzOTAtZDBhNS0z NjVmLTk3MzAtZmRkYWU1MTQwNTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8PwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSZVRIfa2TUHgXsNa+QFERNaioujqVSRmrX9eXpQ6LifP0tVXqGhVzk UfpJ6qJ0QJp5N85Suo72DrYqxI5AxC26YkgoTplegHjIOzu9YVl/qo/zCcx6CSce tpg2yzo61ZvGggQ06c/QY8D9WIiOYOTua1wFLTtjS/yO8v4mb4Cclaa2+QYMgVzX hTQwvIZfyi38pyOj1kwkVYd7TfWpIdlxqiwOLFhzADjhNHDssOhDZVETR5XTOYxd YNIZmMXKGQOs+HPBm2Wlom3MFWf1fmlcfPmPrxKI7H67m7wjFDu4wo6vzg7mImq+ 3eJS85vqmmaYtr2jJS1+dt/RwFoEBQY= -----END CERTIFICATE-----Generated at Fri Oct 10 22:07:52 2025 by rpki-client