$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/230d53cc-fdcf-3da4-a7ce-3953e46b2f57.roa File: 230d53cc-fdcf-3da4-a7ce-3953e46b2f57.roa (raw, json) Hash identifier: JkYMFGhTfqtM/zWOdg+e1MhNNkXcyyGKeExzT3BxOZM= Subject key identifier: B2:2A:9A:01:54:A3:E5:AC:EE:6A:C9:63:03:DF:ED:D3:0A:D0:EF:54 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF565ED343D8A4F0301C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/230d53cc-fdcf-3da4-a7ce-3953e46b2f57.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 72.16.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f5:65:ed:34:3d:8a:4f:03:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=ba766e7a-8fb3-411e-8a3b-6083e1169982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:25:58:07:6e:7b:be:38:f2:6c:ef:87:8c:bc: e9:d5:8d:74:be:bf:94:39:ff:b1:c4:31:9c:be:c6: f8:56:49:85:c7:d4:74:5e:a5:49:02:b6:33:5a:27: ce:ee:59:10:fc:22:0c:1c:3b:e9:0b:ba:69:d0:90: 86:03:93:5d:83:24:79:10:2e:97:ee:c4:51:00:75: 9d:bc:5a:85:af:ee:b5:c1:b9:f3:1a:08:c3:39:2c: 7a:1d:50:11:28:ba:37:d0:8a:54:03:f3:ca:2c:1d: d8:32:3f:7e:c5:b9:42:56:82:65:bc:94:ec:36:90: f4:91:dd:84:8e:d3:8a:aa:d1:04:39:6d:cd:95:1a: cc:c7:1b:1e:e4:ce:14:ae:18:76:82:f0:19:92:94: 83:77:5e:6f:5f:10:b3:b2:bb:13:db:e3:f6:b7:72: 63:23:7b:4a:3b:46:fc:0f:79:45:e8:d3:e0:eb:8f: 37:81:55:b6:ef:e3:7f:6b:12:15:12:85:c5:99:6c: f2:22:cc:32:9e:d7:1e:f6:7a:55:14:b0:be:f2:0e: b5:89:f4:20:ee:23:fa:87:cf:d4:ca:24:d9:f2:89: 07:30:a4:8d:a1:a8:32:79:f1:87:b0:73:e3:92:8f: 14:40:fc:27:a8:f0:3b:aa:6f:c2:14:01:f9:b5:c1: 0b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2A:9A:01:54:A3:E5:AC:EE:6A:C9:63:03:DF:ED:D3:0A:D0:EF:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/230d53cc-fdcf-3da4-a7ce-3953e46b2f57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:83:20:3b:c9:c5:a2:d6:ec:af:83:9e:a6:14:4a:f2:e4:65: 55:ab:fa:c9:85:52:47:66:0b:1a:98:bc:48:41:12:e7:ff:bb: 1a:6f:54:46:c1:76:be:fa:ad:c1:4d:77:31:f6:fd:50:a5:e5: a7:68:73:c0:2b:3e:b2:42:da:73:d8:a0:19:5f:c4:e6:20:b5: 68:80:e7:33:a2:74:81:1b:11:b0:f1:4a:c5:a0:ef:5a:1e:20: 48:da:c5:6a:47:be:32:67:29:c6:2a:0e:20:68:51:0c:32:c0: 29:6a:4f:68:0e:0b:07:bb:92:c8:60:f6:0c:42:64:8b:a7:01: f8:c8:fa:f8:d3:63:20:c2:87:f0:a9:57:d5:fa:90:dd:4f:96: f6:e1:75:0e:75:27:05:a5:11:a8:65:92:75:d4:83:66:79:57: aa:86:fc:f7:17:ee:46:bc:00:16:60:78:4e:6b:0d:6d:42:1c: 6a:2b:70:6d:62:3f:c4:e3:42:b0:70:b6:7b:cd:d6:7d:07:3e: 7c:e2:96:6b:46:b2:28:e8:ae:65:69:3b:98:30:0d:b1:c8:33: b7:87:1d:69:d6:db:a4:27:46:27:55:06:68:95:6f:b6:74:c0: 10:4a:cb:dc:86:ad:a8:5c:83:25:ef:d6:8c:8b:86:42:e1:22: c9:fe:af:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPVl7TQ9ik8DAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YmE3NjZlN2EtOGZiMy00MTFlLThhM2ItNjA4M2UxMTY5OTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CVYB257vjjybO+HjLzp1Y10vr+UOf+xxDGc vsb4VkmFx9R0XqVJArYzWifO7lkQ/CIMHDvpC7pp0JCGA5NdgyR5EC6X7sRRAHWd vFqFr+61wbnzGgjDOSx6HVARKLo30IpUA/PKLB3YMj9+xblCVoJlvJTsNpD0kd2E jtOKqtEEOW3NlRrMxxse5M4Urhh2gvAZkpSDd15vXxCzsrsT2+P2t3JjI3tKO0b8 D3lF6NPg6483gVW27+N/axIVEoXFmWzyIswyntce9npVFLC+8g61ifQg7iP6h8/U yiTZ8okHMKSNoagyefGHsHPjko8UQPwnqPA7qm/CFAH5tcELPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIqmgFUo+Ws7mrJYwPf7dMK0O9UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjMwZDUzY2MtZmRjZi0z ZGE0LWE3Y2UtMzk1M2U0NmIyZjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSBAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuDIDvJxaLW7K+DnqYUSvLkZVWr+smFUkdmCxqYvEhBEuf/uxpvVEbB dr76rcFNdzH2/VCl5adoc8ArPrJC2nPYoBlfxOYgtWiA5zOidIEbEbDxSsWg71oe IEjaxWpHvjJnKcYqDiBoUQwywClqT2gOCwe7kshg9gxCZIunAfjI+vjTYyDCh/Cp V9X6kN1PlvbhdQ51JwWlEahlknXUg2Z5V6qG/PcX7ka8ABZgeE5rDW1CHGorcG1i P8TjQrBwtnvN1n0HPnzilmtGsijormVpO5gwDbHIM7eHHWnW26QnRidVBmiVb7Z0 wBBKy9yGrahcgyXv1oyLhkLhIsn+r2I= -----END CERTIFICATE-----Generated at Fri Oct 10 19:52:21 2025 by rpki-client