$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/148e42e6-9edb-3df7-add4-047df7bea50b.roa File: 148e42e6-9edb-3df7-add4-047df7bea50b.roa (raw, json) Hash identifier: IvVCxQv/RBJXCSixILzyvrWANfFZ9RST68Is57YaDDk= Subject key identifier: FA:22:1D:20:63:A8:A5:00:2B:F6:13:28:AB:B0:C3:9D:C4:55:D5:0D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC3CB35FCF1AFE8822400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/148e42e6-9edb-3df7-add4-047df7bea50b.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 72.172.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c3:cb:35:fc:f1:af:e8:82:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=2be4352e-bebd-4434-81c3-a4cb091a8e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:05:0c:65:5f:1a:08:3d:90:b7:f3:f2:bb:00: 71:8d:b0:eb:6e:36:4c:f5:09:3a:aa:e3:57:92:42: 9b:7c:ff:2c:a9:05:86:5e:3b:5e:04:2b:cc:9d:c4: 6f:3d:77:e0:2a:d2:91:95:80:85:3c:aa:55:ce:b4: 39:24:f0:69:62:3e:f9:7a:d2:20:5d:fc:54:37:91: dc:8b:d1:d2:a5:43:c2:af:c5:ba:15:4d:2a:36:2a: 24:6a:f6:5f:b2:d1:80:7b:d9:c8:29:08:17:65:20: be:af:66:b5:f6:84:5e:35:0a:ef:a1:eb:ad:f9:0a: 9e:8f:a5:d8:73:d6:78:96:2d:cc:62:23:bd:66:37: 50:31:71:e7:01:cb:50:59:5c:24:3a:a7:6a:f2:2a: 2b:04:dc:05:2f:c1:f1:fd:31:ea:73:c4:99:4d:19: 4b:0f:73:2f:e9:5f:5b:88:a0:a4:f4:04:c2:81:2f: 42:fe:61:f5:f3:2e:9e:64:9b:f3:a4:96:3e:15:e1: 98:60:c3:d3:94:69:31:53:a7:f2:aa:7b:14:f4:2e: b3:b3:76:d3:f8:ca:bf:ad:d7:81:8e:98:96:fd:d3: 62:ec:ff:72:fe:5d:6f:51:ee:9e:aa:56:3a:77:cb: 5b:5b:49:27:28:26:99:35:37:58:35:8e:3d:3c:b5: fb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:22:1D:20:63:A8:A5:00:2B:F6:13:28:AB:B0:C3:9D:C4:55:D5:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/148e42e6-9edb-3df7-add4-047df7bea50b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.172.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:35:5f:f5:57:2f:90:27:98:f9:10:b9:9e:5a:15:d5:3f:6a: cf:fb:a1:e3:4c:ad:f5:a8:06:7e:41:a7:ee:d8:60:53:0f:ad: 8f:d7:c6:5f:43:9a:61:86:c4:30:9a:6c:10:2d:df:4e:85:09: ba:3c:7f:af:50:28:f6:47:cb:b3:38:5e:a8:32:35:74:4c:9b: 41:0f:0d:f2:df:98:66:b6:e5:fd:97:60:4f:78:16:20:1f:82: 0f:c0:3e:57:5f:6e:8c:a1:d0:0a:32:1b:5d:a4:35:60:ae:00: c8:20:eb:12:1e:3b:ea:ce:39:22:fc:e7:72:a5:38:0e:3e:06: 66:05:a3:b7:91:87:50:37:35:36:5d:8c:0f:5a:f1:74:6b:29: 55:b2:16:91:ae:44:cd:0a:a5:e6:7f:a8:fa:60:f3:9b:44:b7: be:21:8a:77:33:fa:23:20:26:b9:09:7b:85:61:80:d6:0e:5d: 93:06:90:cf:c6:e9:d1:05:73:5f:2f:e2:96:e4:3e:a8:bc:b0: f0:95:75:e2:58:c5:07:aa:95:ce:10:86:6d:36:ab:72:52:3e: 65:a4:bc:22:0f:b3:12:b3:80:da:70:26:fb:9e:04:3d:a4:7a: a5:01:0a:d6:1c:59:5a:db:6c:b6:a0:d4:33:79:60:4d:be:16: c1:9b:48:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMPLNfzxr+iCJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MmJlNDM1MmUtYmViZC00NDM0LTgxYzMtYTRjYjA5MWE4ZTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAUMZV8aCD2Qt/PyuwBxjbDrbjZM9Qk6quNX kkKbfP8sqQWGXjteBCvMncRvPXfgKtKRlYCFPKpVzrQ5JPBpYj75etIgXfxUN5Hc i9HSpUPCr8W6FU0qNiokavZfstGAe9nIKQgXZSC+r2a19oReNQrvoeut+Qqej6XY c9Z4li3MYiO9ZjdQMXHnActQWVwkOqdq8iorBNwFL8Hx/THqc8SZTRlLD3Mv6V9b iKCk9ATCgS9C/mH18y6eZJvzpJY+FeGYYMPTlGkxU6fyqnsU9C6zs3bT+Mq/rdeB jpiW/dNi7P9y/l1vUe6eqlY6d8tbW0knKCaZNTdYNY49PLX79QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPoiHSBjqKUAK/YTKKuww53EVdUNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTQ4ZTQyZTYtOWVkYi0z ZGY3LWFkZDQtMDQ3ZGY3YmVhNTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSKw4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACs1X/VXL5AnmPkQuZ5aFdU/as/7oeNMrfWoBn5Bp+7YYFMPrY/Xxl9D mmGGxDCabBAt306FCbo8f69QKPZHy7M4XqgyNXRMm0EPDfLfmGa25f2XYE94FiAf gg/APldfboyh0AoyG12kNWCuAMgg6xIeO+rOOSL853KlOA4+BmYFo7eRh1A3NTZd jA9a8XRrKVWyFpGuRM0KpeZ/qPpg85tEt74hincz+iMgJrkJe4VhgNYOXZMGkM/G 6dEFc18v4pbkPqi8sPCVdeJYxQeqlc4Qhm02q3JSPmWkvCIPsxKzgNpwJvueBD2k eqUBCtYcWVrbbLag1DN5YE2+FsGbSLw= -----END CERTIFICATE-----Generated at Fri Oct 10 19:57:34 2025 by rpki-client