$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/133c0ed9-b70d-391c-9d63-850464bf7a66.roa File: 133c0ed9-b70d-391c-9d63-850464bf7a66.roa (raw, json) Hash identifier: ow7W1r27Or0cMvVZAG83SxcIjLi10aH33uQY0dD3F3A= Subject key identifier: BE:B4:79:6E:C2:E1:8C:59:57:1F:9E:9F:1A:BB:A3:2D:8C:A8:53:D1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CEFFBCBF2EA40AE1F2000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/133c0ed9-b70d-391c-9d63-850464bf7a66.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 24.41.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ef:fb:cb:f2:ea:40:ae:1f:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=5ec49db7-2806-4f38-a1f2-550b2f04982d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7a:e5:e6:7c:f3:92:62:db:73:5c:2a:58:11: ea:52:c4:49:33:05:02:ce:f8:eb:05:13:87:6e:10: 2e:df:5c:9c:26:a1:09:8e:60:0a:0c:53:c2:31:31: 38:c2:f8:b3:17:af:ee:0e:93:9e:91:7c:af:bf:98: a8:06:aa:26:94:9c:14:88:6a:44:6c:da:bc:cf:94: 98:f1:8e:0d:89:f6:8f:14:4f:f4:c0:12:47:15:bc: 89:8f:2f:d1:86:68:bd:53:4c:49:e1:11:15:44:65: 1c:e7:0d:69:15:30:d9:d5:56:3d:0b:c9:7c:97:a0: 6b:fa:77:cd:35:ba:8d:01:75:2e:96:23:25:e9:be: 79:aa:46:8e:7f:4a:08:3e:63:96:e3:7c:72:5e:43: 7b:5a:3d:4c:92:fb:33:30:8b:da:68:27:63:8f:51: 93:bf:14:82:ce:44:08:2e:c8:c1:ec:8a:a3:2e:13: 08:bb:72:97:a5:d7:b4:f0:a8:0d:22:fd:8b:37:a9: 0c:06:f3:f8:55:aa:5d:a4:8c:7b:cf:84:ba:36:90: f1:9d:71:96:61:3f:ba:51:b0:41:f5:ba:af:b5:8a: a9:f1:41:96:e6:95:90:52:cb:42:66:c4:77:c0:d2: 19:1a:62:42:68:45:e5:4a:db:7e:01:54:1d:63:1b: eb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B4:79:6E:C2:E1:8C:59:57:1F:9E:9F:1A:BB:A3:2D:8C:A8:53:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/133c0ed9-b70d-391c-9d63-850464bf7a66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 24.41.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e1:59:ab:32:dd:d7:a6:38:8e:df:00:b3:8c:53:2e:5c:2a: b5:ee:90:94:eb:c8:e2:98:0a:04:c4:5d:c5:d1:8c:11:96:f2: 21:db:87:9a:15:be:2e:2c:61:35:2c:0e:f4:a0:11:0e:ec:4d: 13:2f:05:8f:72:6a:a1:ff:33:e4:10:52:5f:e1:ba:7a:fb:c8: 5d:bb:0f:89:70:2b:18:b7:30:cc:6a:37:26:78:c8:ec:b2:fb: f5:40:df:12:2e:58:5f:d6:b8:e6:ab:93:6d:7c:41:26:e2:82: e3:f4:4c:61:d6:2d:b2:05:79:21:79:cc:e8:19:9b:78:ff:db: 88:e9:23:8f:cb:57:83:68:c7:6f:ce:75:ca:db:0a:2d:c9:59: 12:69:cc:d5:5b:4e:61:73:72:c2:e5:0b:4c:42:66:5a:d9:88: 81:3e:7e:87:af:cd:a7:fd:4b:43:9f:db:c8:eb:17:0d:2e:15: f8:43:2c:eb:42:34:b7:9c:38:46:c4:73:9f:c9:b4:53:a3:c0: 0c:92:3d:9a:41:93:04:48:bd:26:9d:30:9a:b8:d8:fd:8a:0d: 06:01:cb:b1:ef:b5:6e:1a:c0:6a:8a:62:f8:6c:7e:1f:bb:61: 7f:2c:c1:77:c3:e7:9d:fa:17:d6:48:61:ab:30:ba:25:4e:f9: e5:14:28:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXO/7y/LqQK4fIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NWVjNDlkYjctMjgwNi00ZjM4LWExZjItNTUwYjJmMDQ5ODJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinrl5nzzkmLbc1wqWBHqUsRJMwUCzvjrBROH bhAu31ycJqEJjmAKDFPCMTE4wvizF6/uDpOekXyvv5ioBqomlJwUiGpEbNq8z5SY 8Y4NifaPFE/0wBJHFbyJjy/Rhmi9U0xJ4REVRGUc5w1pFTDZ1VY9C8l8l6Br+nfN NbqNAXUuliMl6b55qkaOf0oIPmOW43xyXkN7Wj1MkvszMIvaaCdjj1GTvxSCzkQI LsjB7IqjLhMIu3KXpde08KgNIv2LN6kMBvP4VapdpIx7z4S6NpDxnXGWYT+6UbBB 9bqvtYqp8UGW5pWQUstCZsR3wNIZGmJCaEXlStt+AVQdYxvrlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL60eW7C4YxZVx+enxq7oy2MqFPRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTMzYzBlZDktYjcwZC0z OTFjLTlkNjMtODUwNDY0YmY3YTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGCkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbhWasy3demOI7fALOMUy5cKrXukJTryOKYCgTEXcXRjBGW8iHbh5oV vi4sYTUsDvSgEQ7sTRMvBY9yaqH/M+QQUl/hunr7yF27D4lwKxi3MMxqNyZ4yOyy +/VA3xIuWF/WuOark218QSbiguP0TGHWLbIFeSF5zOgZm3j/24jpI4/LV4Nox2/O dcrbCi3JWRJpzNVbTmFzcsLlC0xCZlrZiIE+foevzaf9S0Of28jrFw0uFfhDLOtC NLecOEbEc5/JtFOjwAySPZpBkwRIvSadMJq42P2KDQYBy7HvtW4awGqKYvhsfh+7 YX8swXfD5536F9ZIYaswuiVO+eUUKPI= -----END CERTIFICATE-----Generated at Fri Oct 10 17:50:57 2025 by rpki-client