$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a224cec-745f-335a-bdb0-1812db5a8b1c.roa File: 1a224cec-745f-335a-bdb0-1812db5a8b1c.roa (raw, json) Hash identifier: NUPFSuPG9oaxJHaBp3MzJzu6cxt+1zUlX+9+1i0V6zI= Subject key identifier: BA:45:BA:21:76:AF:44:10:56:AE:D9:C0:25:78:C3:EF:92:65:A9:CF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6BC744D5DDB42AD20D9C0960 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a224cec-745f-335a-bdb0-1812db5a8b1c.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 7029 IP address blocks: 72.16.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:44:d5:dd:b4:2a:d2:0d:9c:09:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=0bb3f394-8cbc-4733-b142-cf0eb014da16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:51:43:a6:db:e2:72:08:ce:59:5f:85:67:fa: ae:a5:3d:a7:a7:2f:77:5d:fd:29:83:a8:5b:3b:75: 9a:80:fe:16:fe:0a:79:43:36:40:3f:70:9d:9b:88: 54:cc:36:5b:02:95:c0:c3:8c:2d:be:14:46:ff:e6: 40:3b:d5:c5:5a:9c:dd:cb:01:04:3f:f3:eb:d9:6c: b7:9d:cb:5b:78:82:30:6b:b8:a0:01:fc:33:fc:a0: 34:05:b1:fb:38:3a:dd:b5:79:bc:28:13:85:47:f2: 04:a2:74:83:5a:5f:5e:77:1c:05:42:a3:db:7e:d5: 58:38:c1:2c:a5:ed:7d:a7:d3:dd:4e:5b:03:b4:5e: 7c:1b:95:f6:6d:88:00:30:86:ed:dc:46:02:e4:93: df:4f:d2:b8:14:ed:8c:e2:02:04:c9:ba:9e:96:72: 6d:14:98:8d:ad:29:ea:0b:89:c5:f0:cb:c1:44:f8: f2:32:69:8c:a4:77:8c:d2:d0:42:fb:97:10:5c:af: 89:5e:a6:83:3f:8e:32:99:e9:1f:a4:f5:42:33:92: ca:11:e0:9a:14:f2:df:b7:17:ef:44:7a:24:fa:1c: cc:62:90:69:ff:0c:d3:fb:1a:60:cc:7c:72:51:3c: 32:fd:74:67:b7:c0:b9:16:29:be:23:55:a3:5c:9a: a8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:45:BA:21:76:AF:44:10:56:AE:D9:C0:25:78:C3:EF:92:65:A9:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a224cec-745f-335a-bdb0-1812db5a8b1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:a6:b3:3b:ff:71:cd:83:47:21:f1:bc:9d:63:b8:43:b7:b1: 65:c7:8c:ac:19:92:33:07:02:db:88:85:00:ac:51:76:c9:1f: 9e:85:7e:24:3b:4a:29:77:5e:eb:33:a6:5e:1f:0f:89:0b:6a: af:5b:43:db:4f:db:da:7d:b4:ea:be:a4:15:cb:11:68:30:1d: c5:f2:c4:98:18:3e:51:39:2b:36:72:02:a7:a6:03:83:e6:3f: ed:2c:09:98:37:39:69:b0:7c:7c:2a:3b:2a:6d:dd:8e:2b:ca: bb:5c:55:ab:48:d9:f0:68:b3:ed:15:d8:7f:73:a4:95:90:8b: 82:cb:f1:71:88:ae:00:b8:0f:25:86:e5:50:29:10:4c:93:64: 1d:ce:61:71:00:55:84:0b:19:2c:27:c9:43:f9:fa:ee:63:4f: 6a:df:63:10:75:96:c1:d3:8c:16:ae:12:ba:5f:b3:94:ff:e9: cd:38:98:42:aa:76:43:57:d2:3d:5d:f8:36:2a:01:ce:61:7c: 8c:0f:ed:6a:23:a7:f1:b4:fa:3d:97:89:19:0b:ec:84:1e:d8: 08:45:a9:d6:15:3d:8f:e4:21:71:7f:d3:f6:81:71:fa:4f:00: 30:b1:cd:c7:2d:f5:60:58:c1:3d:ef:01:0a:31:73:60:ef:8d: e1:ee:c2:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx0TV3bQq0g2cCWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MGJiM2YzOTQtOGNiYy00NzMzLWIxNDItY2YwZWIwMTRkYTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVFDptvicgjOWV+FZ/qupT2npy93Xf0pg6hb O3WagP4W/gp5QzZAP3Cdm4hUzDZbApXAw4wtvhRG/+ZAO9XFWpzdywEEP/Pr2Wy3 nctbeIIwa7igAfwz/KA0BbH7ODrdtXm8KBOFR/IEonSDWl9edxwFQqPbftVYOMEs pe19p9PdTlsDtF58G5X2bYgAMIbt3EYC5JPfT9K4FO2M4gIEybqelnJtFJiNrSnq C4nF8MvBRPjyMmmMpHeM0tBC+5cQXK+JXqaDP44ymekfpPVCM5LKEeCaFPLftxfv RHok+hzMYpBp/wzT+xpgzHxyUTwy/XRnt8C5Fim+I1WjXJqohQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpFuiF2r0QQVq7ZwCV4w++SZanPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWEyMjRjZWMtNzQ1Zi0z MzVhLWJkYjAtMTgxMmRiNWE4YjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSBAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCmszv/cc2DRyHxvJ1juEO3sWXHjKwZkjMHAtuIhQCsUXbJH56FfiQ7 Sil3Xuszpl4fD4kLaq9bQ9tP29p9tOq+pBXLEWgwHcXyxJgYPlE5KzZyAqemA4Pm P+0sCZg3OWmwfHwqOypt3Y4ryrtcVatI2fBos+0V2H9zpJWQi4LL8XGIrgC4DyWG 5VApEEyTZB3OYXEAVYQLGSwnyUP5+u5jT2rfYxB1lsHTjBauErpfs5T/6c04mEKq dkNX0j1d+DYqAc5hfIwP7Wojp/G0+j2XiRkL7IQe2AhFqdYVPY/kIXF/0/aBcfpP ADCxzcct9WBYwT3vAQoxc2DvjeHuwmg= -----END CERTIFICATE-----Generated at Sat Oct 11 00:04:24 2025 by rpki-client