$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1045ba58-5830-3ed1-a2b0-0f3fde4efdd8.roa File: 1045ba58-5830-3ed1-a2b0-0f3fde4efdd8.roa (raw, json) Hash identifier: SwurrVR1WVkBWg7t6cvBmH0rByj82LCNR7pt3J8FOF4= Subject key identifier: A7:A8:0A:9D:AA:D8:2B:1B:12:80:F8:28:6F:99:33:1E:73:C6:FC:B6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF4213020913B46238CD0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1045ba58-5830-3ed1-a2b0-0f3fde4efdd8.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 67.217.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f4:21:30:20:91:3b:46:23:8c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=18d73735-5dc0-4455-8308-fd32baafab4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:07:f5:71:70:74:06:8b:5c:f3:92:f6:8f:f8: 46:1b:50:ed:5e:2b:71:ba:53:35:4c:51:e5:78:a9: 73:59:cb:10:ad:7b:55:eb:7e:28:c5:71:c3:4d:8a: b7:12:bd:10:e7:1f:43:94:71:32:d4:a9:e8:24:25: de:4c:c9:24:56:6a:d1:ab:e3:b3:35:99:5e:a9:9a: 4d:58:40:84:57:cd:ab:61:19:19:19:8d:51:18:a3: e8:da:cf:51:7f:44:80:e7:56:93:07:10:55:85:68: f7:bc:bb:c4:66:87:b4:8c:69:ee:02:18:d5:de:70: 82:e0:a2:45:8e:94:0d:0e:5f:18:86:7b:14:46:b1: f6:46:1b:05:f1:92:0e:82:76:36:46:22:1a:75:0d: d4:16:ee:aa:12:cf:d5:ab:86:81:d0:49:9b:7e:88: a5:82:b7:1d:ff:37:c0:82:88:2c:9c:eb:b1:99:ca: 33:1a:28:42:3e:25:55:af:46:d0:af:e2:47:0a:5a: 6a:6e:92:7d:3c:cf:af:61:71:ea:89:03:7a:16:bc: 06:09:90:3a:cf:a8:90:d3:93:43:ed:0b:2a:9b:7c: b3:47:75:50:53:b4:22:25:f6:78:0b:42:ad:cb:71: 7c:a9:3e:0f:d1:ad:89:0e:1e:13:5a:7c:5e:67:d3: 03:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A8:0A:9D:AA:D8:2B:1B:12:80:F8:28:6F:99:33:1E:73:C6:FC:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1045ba58-5830-3ed1-a2b0-0f3fde4efdd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.217.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:34:50:20:cb:69:05:d2:b6:6e:be:53:06:45:7d:dd:9d:9a: 0b:d7:04:38:d8:2a:57:89:a6:dd:5b:91:1d:89:fe:00:45:28: 34:02:cd:15:3e:f0:99:f9:7a:bf:c7:3a:76:b9:ef:cf:76:3b: 49:b2:cd:ad:a2:21:cf:40:a1:04:33:6d:a8:5e:89:a4:38:42: 8d:03:4f:15:40:ea:80:0c:0b:4a:f1:92:14:77:0e:fd:97:fb: 46:f3:e4:9b:3d:77:10:22:c2:8c:b0:38:1d:1f:60:f7:fa:ab: 41:ef:3f:8a:03:a8:8d:5c:69:0a:11:19:4e:aa:3e:f7:81:af: 37:6d:50:4f:6c:00:ce:ad:59:42:17:24:c2:52:25:63:e4:63: be:69:61:81:9e:ba:a8:bd:47:e8:ba:d8:44:38:46:3c:e1:af: 48:ee:79:df:3b:17:64:9a:48:6e:e5:da:8a:13:10:21:2c:4c: 56:3b:23:f1:7d:fa:39:03:93:9e:d9:89:77:78:a9:ae:6f:fe: 8e:73:81:23:91:d6:ee:0d:82:de:b0:fd:3e:41:d8:58:61:85: 1a:a9:a4:77:cf:2f:cf:30:04:3d:a2:74:29:fd:4f:ae:6d:94: 9b:1a:2e:e0:93:4d:fb:1b:82:ce:76:c9:c9:f9:ba:8c:bd:7d: 9e:78:38:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPQhMCCRO0YjjNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MThkNzM3MzUtNWRjMC00NDU1LTgzMDgtZmQzMmJhYWZhYjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAf1cXB0Botc85L2j/hGG1DtXitxulM1TFHl eKlzWcsQrXtV634oxXHDTYq3Er0Q5x9DlHEy1KnoJCXeTMkkVmrRq+OzNZleqZpN WECEV82rYRkZGY1RGKPo2s9Rf0SA51aTBxBVhWj3vLvEZoe0jGnuAhjV3nCC4KJF jpQNDl8YhnsURrH2RhsF8ZIOgnY2RiIadQ3UFu6qEs/Vq4aB0Embfoilgrcd/zfA gogsnOuxmcozGihCPiVVr0bQr+JHClpqbpJ9PM+vYXHqiQN6FrwGCZA6z6iQ05ND 7Qsqm3yzR3VQU7QiJfZ4C0Kty3F8qT4P0a2JDh4TWnxeZ9MDtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKeoCp2q2CsbEoD4KG+ZMx5zxvy2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTA0NWJhNTgtNTgzMC0z ZWQxLWEyYjAtMGYzZmRlNGVmZGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9mAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF00UCDLaQXStm6+UwZFfd2dmgvXBDjYKleJpt1bkR2J/gBFKDQCzRU+ 8Jn5er/HOna57892O0myza2iIc9AoQQzbaheiaQ4Qo0DTxVA6oAMC0rxkhR3Dv2X +0bz5Js9dxAiwoywOB0fYPf6q0HvP4oDqI1caQoRGU6qPveBrzdtUE9sAM6tWUIX JMJSJWPkY75pYYGeuqi9R+i62EQ4Rjzhr0jued87F2SaSG7l2ooTECEsTFY7I/F9 +jkDk57ZiXd4qa5v/o5zgSOR1u4Ngt6w/T5B2FhhhRqppHfPL88wBD2idCn9T65t lJsaLuCTTfsbgs52ycn5uoy9fZ54OLQ= -----END CERTIFICATE-----Generated at Fri Oct 10 17:51:30 2025 by rpki-client