$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c1a9cfe-62ae-33c5-9512-caf264f0a3a0.roa File: 1c1a9cfe-62ae-33c5-9512-caf264f0a3a0.roa (raw, json) Hash identifier: 4SJDGM2QYfZwdsaEbxOKN/REU29R9zNPbPc6vWyjse8= Subject key identifier: 59:46:47:93:37:C6:E0:BC:82:BD:F9:86:2C:A5:C7:76:2E:0B:06:07 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC396A22E26E8E21D9380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c1a9cfe-62ae-33c5-9512-caf264f0a3a0.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 72.4.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c3:96:a2:2e:26:e8:e2:1d:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=a4b3adf3-41bf-4e9b-b5da-f2ade607c280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:24:35:ee:d2:9a:c8:b2:e5:30:02:a2:21:73: 23:b1:ab:6c:c7:e8:be:77:93:df:e5:c3:42:95:15: 0f:aa:e9:c3:82:f7:ff:1a:72:b3:b1:61:ae:9d:2c: 32:1b:3c:30:8b:e7:bb:f5:75:02:0b:b0:4e:60:85: ca:9b:6a:34:bc:a6:b2:d8:a4:ba:2d:34:8c:d5:d8: 98:99:3f:90:d8:d0:e0:df:70:47:01:fc:3f:44:c0: 8f:c7:ee:ed:a8:0f:b3:6c:12:17:8d:90:a6:91:79: 25:55:99:24:fe:f4:6a:49:1f:c3:4a:88:79:b0:08: 77:5d:a7:43:d0:75:9d:04:7c:ec:dc:27:60:3c:6b: bc:b2:48:f3:25:63:ee:e9:59:9b:22:d1:b0:84:41: 9f:e5:76:8d:68:79:4c:50:e0:56:be:b1:c0:83:32: b1:25:d8:43:68:19:fe:e7:c3:48:f1:38:1b:08:ae: c6:60:5c:74:c9:c1:88:3d:d5:95:7e:08:6b:de:e4: e5:a0:36:93:61:44:0f:c8:f5:1d:c5:67:4c:f9:74: e5:12:2f:e2:f5:ae:15:d4:9f:eb:d6:d5:a1:dd:2c: 1a:19:98:50:e9:d8:d1:fa:dc:b2:f9:8b:43:42:c4: 90:c0:a6:18:64:7e:f9:8f:20:67:64:eb:01:f5:7d: e8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:46:47:93:37:C6:E0:BC:82:BD:F9:86:2C:A5:C7:76:2E:0B:06:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c1a9cfe-62ae-33c5-9512-caf264f0a3a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.4.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:ee:ce:69:d8:a0:30:1d:6b:fb:d9:63:12:85:9b:12:ca:54: 8d:e0:1c:a8:73:65:4d:ff:3a:5c:13:c4:0a:96:a4:66:46:c7: 17:2b:41:28:56:49:ba:38:d7:77:9d:0a:25:93:23:78:39:1a: 3f:7b:e5:41:e0:73:e4:0d:13:2f:37:3a:69:82:3d:af:b2:cd: aa:27:77:7a:09:af:c1:3c:e7:ac:aa:9b:3b:bd:cb:69:c7:25: 96:2b:3a:67:04:12:5f:bb:ad:3f:54:8e:89:b5:62:9f:3f:c2: ad:17:fb:ee:02:4f:bc:8e:7b:88:b0:c4:c8:4a:0e:a9:fb:ae: ed:d9:9a:8a:90:4a:08:a6:d9:64:44:fc:35:06:fb:1f:96:23: 1e:b4:c3:b7:ad:5c:bb:3d:4e:82:45:4e:b2:51:68:7a:01:ba: b3:0f:81:35:23:ff:3a:81:52:c0:dd:06:de:9d:76:2d:04:e0: 7b:37:fc:06:26:9d:e2:ec:d0:9c:c7:44:a9:a7:89:80:6e:2b: 86:48:01:09:2a:bb:f3:e0:ab:87:d3:ae:f6:07:f2:d8:26:af: 06:f3:ed:f8:fd:b5:71:db:80:7f:1b:62:82:9e:1f:01:93:d9: 18:b8:51:ee:60:5c:cb:29:dc:d0:01:b1:08:b6:3d:8d:83:24: 2e:60:d4:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMOWoi4m6OIdk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YTRiM2FkZjMtNDFiZi00ZTliLWI1ZGEtZjJhZGU2MDdjMjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSQ17tKayLLlMAKiIXMjsatsx+i+d5Pf5cNC lRUPqunDgvf/GnKzsWGunSwyGzwwi+e79XUCC7BOYIXKm2o0vKay2KS6LTSM1diY mT+Q2NDg33BHAfw/RMCPx+7tqA+zbBIXjZCmkXklVZkk/vRqSR/DSoh5sAh3XadD 0HWdBHzs3CdgPGu8skjzJWPu6VmbItGwhEGf5XaNaHlMUOBWvrHAgzKxJdhDaBn+ 58NI8TgbCK7GYFx0ycGIPdWVfghr3uTloDaTYUQPyPUdxWdM+XTlEi/i9a4V1J/r 1tWh3SwaGZhQ6djR+tyy+YtDQsSQwKYYZH75jyBnZOsB9X3oQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlGR5M3xuC8gr35hiylx3YuCwYHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWMxYTljZmUtNjJhZS0z M2M1LTk1MTItY2FmMjY0ZjBhM2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSATAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/uzmnYoDAda/vZYxKFmxLKVI3gHKhzZU3/OlwTxAqWpGZGxxcrQShW Sbo413edCiWTI3g5Gj975UHgc+QNEy83OmmCPa+yzaond3oJr8E856yqmzu9y2nH JZYrOmcEEl+7rT9Ujom1Yp8/wq0X++4CT7yOe4iwxMhKDqn7ru3ZmoqQSgim2WRE /DUG+x+WIx60w7etXLs9ToJFTrJRaHoBurMPgTUj/zqBUsDdBt6ddi0E4Hs3/AYm neLs0JzHRKmniYBuK4ZIAQkqu/Pgq4fTrvYH8tgmrwbz7fj9tXHbgH8bYoKeHwGT 2Ri4Ue5gXMsp3NABsQi2PY2DJC5g1FE= -----END CERTIFICATE-----Generated at Fri Oct 10 17:57:13 2025 by rpki-client