$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/25f25e2d-2b7b-3f7e-9f68-5053d1a7fd48.roa File: 25f25e2d-2b7b-3f7e-9f68-5053d1a7fd48.roa (raw, json) Hash identifier: rFXPzgn9PN78sHAtEtDpfnqECzaaOWvHkPeptdF5kkQ= Subject key identifier: D0:F9:93:FD:4C:8A:71:87:49:31:CE:7A:61:62:3E:32:1E:59:B5:0F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2A2C43C307B4CA271AA43912 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/25f25e2d-2b7b-3f7e-9f68-5053d1a7fd48.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 173.191.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:43:c3:07:b4:ca:27:1a:a4:39:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=cd22a1d1-09a6-4159-a533-98305ed6996b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ff:ba:fa:56:4e:ed:52:cc:c7:89:f1:16:ea: 43:d8:1d:48:18:fc:98:62:22:34:41:9b:ea:5b:f4: e1:7f:0d:de:1f:34:b3:54:24:d6:9e:46:79:07:f6: da:b9:f1:64:11:01:59:cf:78:03:cd:4c:8b:8c:a5: d0:c3:ae:4c:b1:6c:2b:99:0c:dd:59:02:77:f2:0b: f9:de:15:dc:d4:32:7b:f6:77:4c:0b:cf:cc:2a:fd: 25:8c:81:3c:1d:b3:ca:6b:7e:63:70:fa:99:ba:a4: 14:a4:f5:29:02:24:49:bf:e8:70:77:e7:68:09:87: 8e:08:ca:94:72:86:01:ca:ff:ee:1a:ec:a1:fe:aa: e3:0c:10:03:e5:ca:c4:16:38:7b:0f:e5:08:4b:02: 1b:1f:d3:6c:2d:0f:d4:1d:df:60:a7:7c:83:66:d7: 36:8a:f3:cb:a8:65:8a:83:57:1f:16:34:a3:54:9e: a0:21:ab:38:da:6f:4c:a0:bc:97:ac:6e:c0:e5:c8: b0:7c:d2:be:7a:52:89:82:be:ec:e1:37:fe:63:86: 37:69:6d:cf:c9:d7:f6:3e:b7:84:ac:26:76:17:52: d0:5b:f8:8a:8a:6b:1d:d0:a7:ed:75:73:19:d4:d9: ac:b2:d9:97:aa:97:66:e8:bf:0b:59:aa:f1:98:d8: 2a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F9:93:FD:4C:8A:71:87:49:31:CE:7A:61:62:3E:32:1E:59:B5:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/25f25e2d-2b7b-3f7e-9f68-5053d1a7fd48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:e4:03:60:49:e6:51:c3:b7:2d:cb:e4:27:ac:bb:b1:47:0b: 4a:fe:38:14:6a:29:ba:74:a2:08:23:54:fe:e2:e1:10:46:76: e5:a8:60:8e:22:34:19:7d:1c:70:7c:22:e3:15:3a:0d:70:e2: 01:83:ef:75:a7:b1:03:95:60:39:6f:dc:df:fc:8c:7f:cb:38: 33:36:e6:77:a8:b6:a5:79:e5:f5:4e:80:dd:bd:5b:8c:0e:87: 6a:83:7c:a4:58:2e:d4:50:5a:3b:51:9c:37:28:49:4d:ce:2e: 7a:7e:fd:e9:f0:c1:e2:be:fd:43:35:49:97:0b:a5:de:58:73: d8:11:2f:36:f5:82:2e:86:8c:e4:68:fa:00:78:d8:86:3f:99: a3:bb:3e:e7:a7:c1:99:61:3e:95:de:6e:70:cd:f5:79:04:80: 69:a0:c6:fc:0b:4a:b4:49:bd:8d:71:3a:7d:4e:3e:e0:2a:40: ed:84:c5:6b:b0:c7:1e:90:5a:d1:1c:a6:b8:68:e2:1d:62:26: 27:cf:b4:fe:5c:9a:6e:95:bb:4c:c0:5d:95:fd:b7:ab:25:54: 7c:64:66:df:2d:be:6e:1c:0c:0e:8d:b0:4b:50:96:e8:1c:58: 09:2f:70:ec:90:48:96:ff:34:9d:6a:e4:86:ae:a0:43:83:7c: a2:38:ff:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEPDB7TKJxqkORIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk Y2QyMmExZDEtMDlhNi00MTU5LWE1MzMtOTgzMDVlZDY5OTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf+6+lZO7VLMx4nxFupD2B1IGPyYYiI0QZvq W/Thfw3eHzSzVCTWnkZ5B/baufFkEQFZz3gDzUyLjKXQw65MsWwrmQzdWQJ38gv5 3hXc1DJ79ndMC8/MKv0ljIE8HbPKa35jcPqZuqQUpPUpAiRJv+hwd+doCYeOCMqU coYByv/uGuyh/qrjDBAD5crEFjh7D+UISwIbH9NsLQ/UHd9gp3yDZtc2ivPLqGWK g1cfFjSjVJ6gIas42m9MoLyXrG7A5ciwfNK+elKJgr7s4Tf+Y4Y3aW3Pydf2PreE rCZ2F1LQW/iKimsd0KftdXMZ1NmsstmXqpdm6L8LWarxmNgqOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFND5k/1MinGHSTHOemFiPjIeWbUPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjVmMjVlMmQtMmI3Yi0z ZjdlLTlmNjgtNTA1M2QxYTdmZDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/kA2BJ5lHDty3L5Cesu7FHC0r+OBRqKbp0oggjVP7i4RBGduWoYI4i NBl9HHB8IuMVOg1w4gGD73WnsQOVYDlv3N/8jH/LODM25neotqV55fVOgN29W4wO h2qDfKRYLtRQWjtRnDcoSU3OLnp+/enwweK+/UM1SZcLpd5Yc9gRLzb1gi6GjORo +gB42IY/maO7PuenwZlhPpXebnDN9XkEgGmgxvwLSrRJvY1xOn1OPuAqQO2ExWuw xx6QWtEcprho4h1iJifPtP5cmm6Vu0zAXZX9t6slVHxkZt8tvm4cDA6NsEtQlugc WAkvcOyQSJb/NJ1q5IauoEODfKI4/0g= -----END CERTIFICATE-----Generated at Fri Oct 10 22:19:53 2025 by rpki-client