$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21ef65b0-89b3-3b33-8192-e464535e916c.roa File: 21ef65b0-89b3-3b33-8192-e464535e916c.roa (raw, json) Hash identifier: HU4BfPmFkdMSG4JBnm0A1Fizt5bfAHFKbW2ihSqG8/s= Subject key identifier: 9F:A7:18:2A:8A:41:77:E5:90:95:03:BE:7B:74:21:BA:CD:7F:71:9D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC8BFBD4188DCB3E66700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21ef65b0-89b3-3b33-8192-e464535e916c.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 207.222.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c8:bf:bd:41:88:dc:b3:e6:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=a91af8ba-54ef-4886-b95f-ba71f67d5ace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ae:1d:0c:f3:b9:d5:41:52:65:4d:9a:44:37: a8:a6:94:4c:5d:f3:5f:89:b3:a7:df:49:6d:d0:50: e0:48:31:95:06:c0:d7:fb:d7:f8:d6:7b:75:e1:ac: c4:b8:b5:da:70:51:8b:fd:4a:28:07:cf:6f:de:bf: 0e:32:c0:d0:b7:90:21:c4:cf:9e:a3:00:91:ab:ce: 38:81:cf:10:8d:25:7a:f1:5a:ff:b4:f5:31:92:d1: 45:0f:cd:ba:77:73:46:03:dc:a2:4c:76:4b:9d:5e: 16:06:81:3f:41:7f:ed:76:f7:57:ea:c6:77:92:5c: 13:a8:a3:7d:72:c4:af:a4:99:cf:3e:86:9e:21:bf: ce:4f:66:39:00:3f:ac:57:58:aa:b0:b5:ae:99:11: 86:92:70:b0:56:b6:02:d0:4f:28:14:11:ba:b3:18: 0a:3c:35:c2:8a:fa:c6:d3:93:af:7d:a6:9c:86:40: 20:b0:3c:4c:e6:9c:72:8b:af:3b:61:e9:bd:5a:5d: c4:e7:49:86:44:eb:6c:01:f9:7b:b3:30:3b:5e:85: dc:af:ef:ce:86:b8:65:61:3d:8c:54:d9:02:47:6a: 1c:af:5c:a3:4d:b5:e7:16:63:37:bc:95:7a:a7:43: af:89:4c:bd:d8:f0:6b:8b:13:c6:e9:c5:0c:aa:5c: a8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A7:18:2A:8A:41:77:E5:90:95:03:BE:7B:74:21:BA:CD:7F:71:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21ef65b0-89b3-3b33-8192-e464535e916c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.222.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:c5:13:de:e4:2a:63:e6:c1:15:ba:03:de:7c:7f:a7:6f:d9: 78:8b:5f:73:ae:8a:81:50:25:18:3a:99:54:47:10:57:dd:a5: f3:81:72:df:6d:7a:da:9c:a6:2f:10:dc:b9:4d:f2:f0:3f:e3: d3:b8:93:7d:d6:2c:6f:62:98:e5:44:a7:94:b8:42:7d:26:35: 8b:82:66:69:51:bb:9a:59:e4:bc:92:b7:d3:0d:1e:1a:ed:2a: f1:63:6c:ce:1b:2c:cc:79:41:ba:79:d4:36:bb:f4:c7:1e:60: a6:89:f2:59:5a:f5:f5:46:be:47:32:d9:85:fe:68:63:40:f3: 4b:1f:9c:fc:d5:f2:c2:01:5e:65:0b:0d:62:bc:57:71:2d:1e: a4:93:95:94:17:35:61:52:ac:af:20:b9:8d:dd:3d:fd:26:1a: b6:46:8f:c2:b6:4e:fe:cc:b0:95:a0:77:93:80:2a:44:24:38: 75:11:36:64:f1:21:17:5a:79:63:e7:34:ac:12:cf:8a:70:4d: 41:b9:5b:71:3f:65:bf:b9:54:85:d1:6a:8d:8f:c4:4d:a5:08: 03:c5:41:5c:84:01:c4:32:34:2a:3c:b5:fc:4e:6c:e9:81:8e: 67:43:73:da:2d:83:3f:6d:8b:e1:a6:10:58:ae:cb:0a:d6:f2: 1c:26:a3:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMi/vUGI3LPmZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YTkxYWY4YmEtNTRlZi00ODg2LWI5NWYtYmE3MWY2N2Q1YWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq64dDPO51UFSZU2aRDeoppRMXfNfibOn30lt 0FDgSDGVBsDX+9f41nt14azEuLXacFGL/UooB89v3r8OMsDQt5AhxM+eowCRq844 gc8QjSV68Vr/tPUxktFFD826d3NGA9yiTHZLnV4WBoE/QX/tdvdX6sZ3klwTqKN9 csSvpJnPPoaeIb/OT2Y5AD+sV1iqsLWumRGGknCwVrYC0E8oFBG6sxgKPDXCivrG 05OvfaachkAgsDxM5pxyi687Yem9Wl3E50mGROtsAfl7szA7XoXcr+/OhrhlYT2M VNkCR2ocr1yjTbXnFmM3vJV6p0OviUy92PBrixPG6cUMqlyoLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+nGCqKQXflkJUDvnt0IbrNf3GdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjFlZjY1YjAtODliMy0z YjMzLTgxOTItZTQ2NDUzNWU5MTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz94DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrFE97kKmPmwRW6A958f6dv2XiLX3OuioFQJRg6mVRHEFfdpfOBct9t etqcpi8Q3LlN8vA/49O4k33WLG9imOVEp5S4Qn0mNYuCZmlRu5pZ5LySt9MNHhrt KvFjbM4bLMx5Qbp51Da79MceYKaJ8lla9fVGvkcy2YX+aGNA80sfnPzV8sIBXmUL DWK8V3EtHqSTlZQXNWFSrK8guY3dPf0mGrZGj8K2Tv7MsJWgd5OAKkQkOHURNmTx IRdaeWPnNKwSz4pwTUG5W3E/Zb+5VIXRao2PxE2lCAPFQVyEAcQyNCo8tfxObOmB jmdDc9otgz9ti+GmEFiuywrW8hwmo/o= -----END CERTIFICATE-----Generated at Fri Oct 10 22:06:20 2025 by rpki-client