$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0bb8f54c-a9db-3f18-b509-943041573b1a.roa File: 0bb8f54c-a9db-3f18-b509-943041573b1a.roa (raw, json) Hash identifier: o6xxPcbPm5eW/vuYPL45MoclS5k+T14NQpd/At/Lhl4= Subject key identifier: 34:EE:04:C0:C6:7E:FA:84:BA:89:55:36:87:D8:F9:40:D7:74:9D:56 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2CA0715021A57F5B3A2B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0bb8f54c-a9db-3f18-b509-943041573b1a.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 69.40.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:a0:71:50:21:a5:7f:5b:3a:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=ebd9855c-fa14-4444-99db-71eead0d2eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d4:76:a2:f3:25:f3:b0:3d:f9:23:0a:a1:fc: e4:54:78:63:f8:a7:0a:3b:7a:63:eb:7f:7c:c4:8e: 19:52:de:55:f4:0b:41:17:db:58:ce:32:d6:20:1a: 9d:4c:b3:23:98:b0:cb:bc:2d:f6:1f:5f:27:ea:71: 36:a1:ac:20:fa:d8:05:c1:15:b7:24:af:b2:4d:0e: 8b:fa:51:c9:de:f2:48:7a:9e:0f:d5:e8:18:c2:89: 08:c8:cd:13:43:97:3d:8d:3a:d5:fc:ac:c6:66:a9: bc:63:d3:80:51:a5:af:89:41:62:14:6b:0a:c0:ff: 02:ac:10:2a:93:12:a5:29:3b:0d:e7:d9:b0:43:13: 22:65:f3:b6:2a:2f:4a:c7:f4:1d:59:74:7b:72:d1: 53:9f:b2:49:0d:28:7d:ce:dd:32:51:11:0c:01:59: 15:8c:13:88:91:59:c6:8f:4f:d2:35:67:ad:b6:b1: e7:bc:6f:38:69:71:05:07:ca:51:56:e5:17:2d:cb: 66:16:9a:60:e7:b5:b1:36:af:93:6c:a0:b2:d2:53: e0:b8:d3:e5:b2:f7:50:8e:24:da:8f:ce:8e:9f:7b: 6c:45:41:d1:f6:fa:c0:70:67:da:45:70:84:e2:a9: 98:fd:0f:8e:34:e6:01:85:dc:a0:66:02:2e:4d:f7: aa:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:EE:04:C0:C6:7E:FA:84:BA:89:55:36:87:D8:F9:40:D7:74:9D:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0bb8f54c-a9db-3f18-b509-943041573b1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:7c:14:e9:92:49:10:4c:e3:1e:d0:61:a8:f2:fb:92:f6:3d: 17:de:55:bc:69:17:72:ef:89:a2:09:52:77:a5:29:0c:f7:68: b8:66:fd:c7:ff:81:87:ec:55:21:7c:06:a4:3a:8c:2b:e0:52: ff:0f:c4:90:53:9f:a9:d3:0c:c3:db:6a:3a:de:a8:8d:7e:0c: 59:50:d7:1e:3d:9a:88:e0:09:cc:06:68:0d:ce:d5:c1:14:4b: 07:9c:f5:d5:69:cd:21:46:c0:99:23:fe:c8:55:03:32:d3:b7: 81:82:50:ce:0b:61:cb:c5:66:48:37:e4:43:fd:84:6f:0a:63: d8:a4:6d:0c:3f:3e:50:30:36:ac:9c:62:1c:95:38:df:3c:a1: fd:0b:fc:88:4b:36:2c:45:b9:8a:86:d2:a9:5b:ba:5b:31:1b: 98:2d:3e:f7:4b:c7:31:8e:80:27:fc:f2:55:ca:29:ac:4f:cf: fa:8c:62:f3:fa:88:c6:de:57:c6:50:82:2f:00:65:fc:85:13: 61:ee:37:8d:3c:0c:54:1e:c7:ad:72:ff:c4:d3:92:45:91:25: 0b:de:6b:75:c2:16:12:a2:40:eb:31:33:9f:1d:f0:41:88:1e: a2:08:4d:04:7e:57:34:4a:65:8c:e7:83:38:b1:fe:96:6c:58: 74:e2:2f:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLKBxUCGlf1s6K4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZWJkOTg1NWMtZmExNC00NDQ0LTk5ZGItNzFlZWFkMGQyZWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNR2ovMl87A9+SMKofzkVHhj+KcKO3pj6398 xI4ZUt5V9AtBF9tYzjLWIBqdTLMjmLDLvC32H18n6nE2oawg+tgFwRW3JK+yTQ6L +lHJ3vJIep4P1egYwokIyM0TQ5c9jTrV/KzGZqm8Y9OAUaWviUFiFGsKwP8CrBAq kxKlKTsN59mwQxMiZfO2Ki9Kx/QdWXR7ctFTn7JJDSh9zt0yUREMAVkVjBOIkVnG j0/SNWettrHnvG84aXEFB8pRVuUXLctmFppg57WxNq+TbKCy0lPguNPlsvdQjiTa j86On3tsRUHR9vrAcGfaRXCE4qmY/Q+ONOYBhdygZgIuTfeqZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTuBMDGfvqEuolVNofY+UDXdJ1WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGJiOGY1NGMtYTlkYi0z ZjE4LWI1MDktOTQzMDQxNTczYjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERSiwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAId8FOmSSRBM4x7QYajy+5L2PRfeVbxpF3LviaIJUnelKQz3aLhm/cf/ gYfsVSF8BqQ6jCvgUv8PxJBTn6nTDMPbajreqI1+DFlQ1x49mojgCcwGaA3O1cEU Swec9dVpzSFGwJkj/shVAzLTt4GCUM4LYcvFZkg35EP9hG8KY9ikbQw/PlAwNqyc YhyVON88of0L/IhLNixFuYqG0qlbulsxG5gtPvdLxzGOgCf88lXKKaxPz/qMYvP6 iMbeV8ZQgi8AZfyFE2HuN408DFQex61y/8TTkkWRJQvea3XCFhKiQOsxM58d8EGI HqIITQR+VzRKZYzngzix/pZsWHTiL1I= -----END CERTIFICATE-----Generated at Fri Oct 10 19:56:02 2025 by rpki-client