$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ca4ddfa-42d5-31f7-865d-3d0860393d8b.roa File: 0ca4ddfa-42d5-31f7-865d-3d0860393d8b.roa (raw, json) Hash identifier: wQC7olMBj8gEIuGr9sBzQx3cxb9ljoWWPbIJrM6CCzM= Subject key identifier: DC:61:B0:A2:57:5A:6E:16:B3:18:A8:2D:FB:E1:C6:18:FD:C6:33:7C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B79BCC7E67F2084241C908140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ca4ddfa-42d5-31f7-865d-3d0860393d8b.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 151.213.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:c7:e6:7f:20:84:24:1c:90:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=50cdc4ac-f848-4dfd-9e69-97f9aa67fd4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0b:08:0a:15:6b:a1:8a:6c:61:d5:2b:c4:b6: 47:87:29:d6:c8:6c:f8:50:48:6e:45:5b:11:d0:3f: 03:4a:b6:11:31:f1:84:d1:ca:76:1c:98:a9:bf:c8: 96:ca:ba:47:68:8a:f7:9f:19:16:cf:0b:35:ab:52: 9f:ef:1a:71:57:31:f1:f1:96:4b:45:e7:8f:1e:ef: e6:fd:c0:9d:6f:c8:81:b9:ef:a7:be:e0:41:31:77: 21:17:59:e5:5b:04:5d:91:88:d7:36:db:aa:72:37: 1a:e1:5d:5c:2c:88:6f:71:3b:90:6f:f5:43:b0:98: d2:08:f6:06:bf:56:c9:f2:ba:bf:1a:31:a4:9f:c2: c4:6a:a3:e5:91:1e:a3:11:3c:39:b0:bb:ac:e5:44: 85:8d:c1:2c:c6:52:7c:89:27:03:f3:65:bd:ea:72: e9:32:47:3b:0f:eb:43:b9:3d:90:c1:ef:e0:28:1b: 23:9b:5f:ed:24:3c:1a:c8:52:a2:f4:0d:27:85:91: 21:e1:de:4d:fd:5e:26:ef:4e:8f:ad:3d:9f:3c:8c: 92:5b:3d:a2:b6:10:56:30:26:c0:b0:cc:5e:75:f9: 74:78:de:db:01:5e:16:d4:61:8c:1c:9b:03:17:38: 95:ca:33:eb:ec:0c:bd:88:ad:60:a6:bf:d8:f0:3e: c2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:61:B0:A2:57:5A:6E:16:B3:18:A8:2D:FB:E1:C6:18:FD:C6:33:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ca4ddfa-42d5-31f7-865d-3d0860393d8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:cf:a8:52:f1:6a:8c:5c:93:b0:f0:27:0f:cd:58:e0:d3:da: a5:44:92:98:23:cf:48:8f:79:c3:95:a8:28:52:ad:f1:b6:4f: c1:b1:52:1f:18:7b:8e:fa:7b:bf:dc:b8:5a:09:ab:7a:51:b7: 53:ef:a7:dd:2c:c8:9d:b2:93:b0:fe:ab:2b:ee:de:91:5b:6a: 4a:79:be:c0:ad:17:9b:7b:6d:9b:cc:1e:dd:05:ac:ea:d9:ae: 66:bd:97:2e:e3:b5:7f:8d:b1:0d:25:01:49:24:60:43:69:c8: 60:d3:17:e6:2e:db:ad:47:b9:4c:7b:7e:03:b0:e9:50:d1:4e: 50:44:39:18:0e:0d:d4:71:2c:a1:db:57:68:28:99:7e:04:d3: 3f:9b:ff:8b:96:e9:18:63:0b:19:6f:26:4b:b5:8d:b5:fb:cb: 9b:d8:a4:f8:1c:30:ed:2d:09:60:ce:ca:4c:ae:83:1f:66:8e: 4b:90:72:88:93:1b:ce:35:38:ac:dc:2c:39:7c:06:2f:31:06: bb:00:b7:7b:7d:90:f5:a8:92:ff:3b:09:ee:47:11:8a:da:77: 89:0d:0b:86:99:f4:54:49:0b:44:8e:e9:13:ab:0a:a3:55:22: 7e:6f:c3:1a:12:f5:48:42:19:40:dc:03:76:7c:46:28:e0:c5: 55:23:41:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vMfmfyCEJByQgUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk NTBjZGM0YWMtZjg0OC00ZGZkLTllNjktOTdmOWFhNjdmZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgsIChVroYpsYdUrxLZHhynWyGz4UEhuRVsR 0D8DSrYRMfGE0cp2HJipv8iWyrpHaIr3nxkWzws1q1Kf7xpxVzHx8ZZLReePHu/m /cCdb8iBue+nvuBBMXchF1nlWwRdkYjXNtuqcjca4V1cLIhvcTuQb/VDsJjSCPYG v1bJ8rq/GjGkn8LEaqPlkR6jETw5sLus5USFjcEsxlJ8iScD82W96nLpMkc7D+tD uT2Qwe/gKBsjm1/tJDwayFKi9A0nhZEh4d5N/V4m706PrT2fPIySWz2ithBWMCbA sMxedfl0eN7bAV4W1GGMHJsDFziVyjPr7Ay9iK1gpr/Y8D7ClwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxhsKJXWm4WsxioLfvhxhj9xjN8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGNhNGRkZmEtNDJkNS0z MWY3LTg2NWQtM2QwODYwMzkzZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl9VwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPPqFLxaoxck7DwJw/NWODT2qVEkpgjz0iPecOVqChSrfG2T8GxUh8Y e476e7/cuFoJq3pRt1Pvp90syJ2yk7D+qyvu3pFbakp5vsCtF5t7bZvMHt0FrOrZ rma9ly7jtX+NsQ0lAUkkYENpyGDTF+Yu261HuUx7fgOw6VDRTlBEORgODdRxLKHb V2gomX4E0z+b/4uW6RhjCxlvJku1jbX7y5vYpPgcMO0tCWDOykyugx9mjkuQcoiT G841OKzcLDl8Bi8xBrsAt3t9kPWokv87Ce5HEYrad4kNC4aZ9FRJC0SO6ROrCqNV In5vwxoS9UhCGUDcA3Z8RijgxVUjQXY= -----END CERTIFICATE-----Generated at Fri Oct 10 22:19:16 2025 by rpki-client