$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11f857dc-bce1-38cb-b820-e98761640147.roa File: 11f857dc-bce1-38cb-b820-e98761640147.roa (raw, json) Hash identifier: AslcHRfhvJFryaBrjAguMA8nkU7haYG9vM//pZJ2E0I= Subject key identifier: AF:E8:92:CA:03:19:67:C1:2A:D8:44:91:66:BB:F8:04:5F:E4:4D:ED Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3821AFDE33A385190DB0D000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11f857dc-bce1-38cb-b820-e98761640147.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 67.140.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:af:de:33:a3:85:19:0d:b0:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=6aa4bdcb-14d8-49ec-a4ca-2290f2c65dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5f:13:ca:a2:ab:cf:42:f7:45:cc:31:52:ec: 67:6f:2c:68:f8:1f:8c:d7:c3:89:81:07:b6:54:a2: 98:b5:3f:78:bb:0a:46:30:a6:5b:a3:ad:71:2e:92: f2:18:72:13:a6:c3:1b:3e:cb:9d:53:a2:92:4c:c4: 37:96:33:28:d3:8a:9e:75:1b:d3:c0:87:f9:30:03: 30:53:a8:ab:1d:4b:ec:cb:e6:d7:c4:7f:38:0e:39: db:db:33:8f:a2:ad:2d:a1:2f:9a:e5:0d:38:5f:c4: 76:c4:89:b5:a2:39:93:8f:c5:ed:53:d7:2a:fc:b2: d8:e4:84:e1:cb:3f:ea:5f:a0:61:4b:00:12:7d:fc: 9b:1a:fb:ed:9c:02:9a:d3:8f:3b:3b:ec:6f:3f:58: a0:a8:b2:e3:d3:46:b2:fd:35:7c:f0:12:24:0f:1b: 9c:b0:3f:e0:22:12:6c:99:b1:7c:2f:68:9b:f3:57: db:f8:10:20:c3:bc:6f:5d:20:3c:4f:63:43:c5:ec: ad:c0:ee:9a:eb:29:d2:8c:a0:19:7d:79:42:72:7b: 7b:5d:87:d6:c8:3c:c1:45:22:c5:9b:3c:a2:80:75: ff:7f:9b:ec:9f:d0:af:71:14:47:69:90:f3:ed:1d: d5:e7:12:8f:8c:eb:0c:e5:52:3e:63:e4:ce:29:7f: c5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E8:92:CA:03:19:67:C1:2A:D8:44:91:66:BB:F8:04:5F:E4:4D:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11f857dc-bce1-38cb-b820-e98761640147.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:c3:22:02:0b:84:d3:fa:77:8c:2f:ac:fe:cc:25:f6:91:32: 95:46:da:73:d4:f0:bd:c7:79:ca:e2:d3:d1:67:67:b8:5e:ac: 8d:7b:b3:40:81:7a:aa:43:d8:79:46:2a:91:2c:5b:35:97:46: f3:ea:b5:49:2f:cd:0a:bc:0f:65:21:fd:0e:1d:07:cb:a1:3c: 23:c4:c5:3c:70:a0:98:fc:cd:4d:64:38:14:78:08:f9:04:56: fc:10:e6:ae:82:75:1b:be:b2:95:50:f0:d2:f1:b6:cb:9b:47: 51:b6:e3:c9:73:f6:e8:b2:11:8d:7a:22:a5:f3:5e:30:a4:1e: 02:98:0c:08:d5:5b:dc:ef:53:13:89:59:eb:ce:c6:52:23:16: 83:98:60:48:b0:a4:79:bd:c6:41:02:5d:07:50:b7:ba:93:aa: 93:6e:9f:0d:20:1d:86:12:7e:61:8e:a1:85:59:e4:83:77:8f: f1:c3:ae:02:b4:0b:59:c8:d0:26:af:ef:4c:37:4e:df:da:a4: dc:74:ac:85:df:44:70:f5:bd:23:3b:5f:0d:35:06:e4:08:3a: d3:3f:02:6f:76:26:22:73:bf:14:25:e5:be:24:33:a9:26:96: d8:69:73:d5:7b:02:8e:de:16:e8:cb:19:7c:da:bd:b8:06:2c: 66:50:24:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4Ia/eM6OFGQ2w0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk NmFhNGJkY2ItMTRkOC00OWVjLWE0Y2EtMjI5MGYyYzY1ZGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgl8TyqKrz0L3RcwxUuxnbyxo+B+M18OJgQe2 VKKYtT94uwpGMKZbo61xLpLyGHITpsMbPsudU6KSTMQ3ljMo04qedRvTwIf5MAMw U6irHUvsy+bXxH84Djnb2zOPoq0toS+a5Q04X8R2xIm1ojmTj8XtU9cq/LLY5ITh yz/qX6BhSwASffybGvvtnAKa0487O+xvP1igqLLj00ay/TV88BIkDxucsD/gIhJs mbF8L2ib81fb+BAgw7xvXSA8T2NDxeytwO6a6ynSjKAZfXlCcnt7XYfWyDzBRSLF mzyigHX/f5vsn9CvcRRHaZDz7R3V5xKPjOsM5VI+Y+TOKX/FrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/oksoDGWfBKthEkWa7+ARf5E3tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTFmODU3ZGMtYmNlMS0z OGNiLWI4MjAtZTk4NzYxNjQwMTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ4wAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTDIgILhNP6d4wvrP7MJfaRMpVG2nPU8L3Hecri09FnZ7herI17s0CB eqpD2HlGKpEsWzWXRvPqtUkvzQq8D2Uh/Q4dB8uhPCPExTxwoJj8zU1kOBR4CPkE VvwQ5q6CdRu+spVQ8NLxtsubR1G248lz9uiyEY16IqXzXjCkHgKYDAjVW9zvUxOJ WevOxlIjFoOYYEiwpHm9xkECXQdQt7qTqpNunw0gHYYSfmGOoYVZ5IN3j/HDrgK0 C1nI0Cav70w3Tt/apNx0rIXfRHD1vSM7Xw01BuQIOtM/Am92JiJzvxQl5b4kM6km lthpc9V7Ao7eFujLGXzavbgGLGZQJGk= -----END CERTIFICATE-----Generated at Fri Oct 10 20:01:19 2025 by rpki-client