$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27012e10-9931-3aab-89fb-6ee316fd86e0.roa File: 27012e10-9931-3aab-89fb-6ee316fd86e0.roa (raw, json) Hash identifier: PnrJTl88lYfToB/KTj6Bpmp6VZS5QdwPpi5zRmYcc/s= Subject key identifier: 93:F5:1F:89:64:AB:DC:BA:3C:FE:E9:9E:47:AC:A9:E7:82:E3:A3:75 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CD34FB87F88AB55D21CC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27012e10-9931-3aab-89fb-6ee316fd86e0.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 30363 IP address blocks: 209.156.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:d3:4f:b8:7f:88:ab:55:d2:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=163a1bc2-fc9f-498d-a636-9d3998add696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:74:18:e0:10:ab:e2:bc:1c:66:15:ff:c1:fb: 83:4d:d6:27:03:06:04:09:36:15:42:f0:14:cb:ba: de:58:fc:17:ff:c2:2a:6e:e4:49:7e:eb:7d:ca:93: 6f:41:a6:cd:a9:f0:f8:27:21:13:93:5e:72:50:04: 82:80:08:2a:cb:b0:48:b9:59:71:01:a9:49:fc:4b: a3:4a:24:43:cd:44:cd:17:57:74:00:54:05:90:48: b2:e1:42:df:dd:e3:3e:48:b7:7f:73:9e:f9:d5:11: af:66:25:eb:76:85:ca:c7:55:38:75:fd:93:fb:56: cd:54:c4:a6:50:23:93:f2:a3:77:e0:27:a2:94:01: 66:dc:f4:04:b9:02:35:e5:fc:62:70:0f:9e:29:70: 7c:f6:9c:12:f4:10:99:16:86:fb:15:14:bf:73:c8: 72:5d:31:d4:9b:3d:03:8d:6e:a8:47:7c:50:66:4c: 8d:ee:89:12:fa:98:15:52:d5:6c:63:61:cd:4e:16: f1:a2:b2:45:52:95:52:64:70:12:1d:22:56:c2:5d: 81:f5:3b:87:3c:00:aa:51:cd:45:fa:65:c4:a5:2d: 8e:9c:95:58:74:ad:3e:a6:cb:85:eb:7d:c8:63:4d: c9:5e:fb:2f:e8:40:6a:57:ac:18:34:72:1a:b4:a2: f8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F5:1F:89:64:AB:DC:BA:3C:FE:E9:9E:47:AC:A9:E7:82:E3:A3:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27012e10-9931-3aab-89fb-6ee316fd86e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.156.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:a2:eb:f8:02:e8:5f:a4:21:bf:6f:19:02:5b:2b:4a:f0:1a: 14:f6:58:23:19:3f:ae:ce:cb:99:d0:9d:14:f3:26:6f:4e:65: 97:a9:24:6b:79:fe:88:09:a2:82:10:29:25:b4:a4:8c:8e:3d: 14:b6:85:d6:75:21:03:6d:ec:0b:b4:f1:f7:d9:aa:57:c6:38: 04:e3:d1:55:3f:89:d7:06:50:9f:ea:72:27:04:bd:af:9a:5b: 78:e5:a4:a9:94:07:16:8f:90:cc:ac:0f:b2:87:12:16:d5:61: ea:90:50:0e:20:f7:96:31:2e:2c:d6:c5:b2:ce:23:52:95:8a: c5:61:1d:51:c4:77:94:08:30:a0:3e:4c:54:10:47:eb:a8:f9: f9:ba:d4:96:45:b3:ee:aa:0c:65:64:19:bc:db:9b:4d:e7:ff: b9:1a:cd:41:6f:25:cd:3f:75:56:10:6f:5d:37:af:86:c4:c2: 79:9e:1a:b2:18:c4:a2:ed:ae:72:34:92:54:9e:51:43:bf:ee: 10:d5:40:31:76:bd:43:e6:e3:28:96:52:ca:e8:8b:9f:cd:ae: 9d:92:89:6d:ad:53:22:28:2e:8e:e0:53:57:9f:03:3d:b3:ab: 1d:45:90:63:d1:8f:16:1a:7e:67:af:b1:25:84:65:60:68:ce: aa:ee:4f:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXNNPuH+Iq1XSHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MTYzYTFiYzItZmM5Zi00OThkLWE2MzYtOWQzOTk4YWRkNjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXQY4BCr4rwcZhX/wfuDTdYnAwYECTYVQvAU y7reWPwX/8IqbuRJfut9ypNvQabNqfD4JyETk15yUASCgAgqy7BIuVlxAalJ/Euj SiRDzUTNF1d0AFQFkEiy4ULf3eM+SLd/c5751RGvZiXrdoXKx1U4df2T+1bNVMSm UCOT8qN34CeilAFm3PQEuQI15fxicA+eKXB89pwS9BCZFob7FRS/c8hyXTHUmz0D jW6oR3xQZkyN7okS+pgVUtVsY2HNThbxorJFUpVSZHASHSJWwl2B9TuHPACqUc1F +mXEpS2OnJVYdK0+psuF633IY03JXvsv6EBqV6wYNHIatKL48QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJP1H4lkq9y6PP7pnkesqeeC46N1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjcwMTJlMTAtOTkzMS0z YWFiLTg5ZmItNmVlMzE2ZmQ4NmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZzbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyi6/gC6F+kIb9vGQJbK0rwGhT2WCMZP67Oy5nQnRTzJm9OZZepJGt5 /ogJooIQKSW0pIyOPRS2hdZ1IQNt7Au08ffZqlfGOATj0VU/idcGUJ/qcicEva+a W3jlpKmUBxaPkMysD7KHEhbVYeqQUA4g95YxLizWxbLOI1KVisVhHVHEd5QIMKA+ TFQQR+uo+fm61JZFs+6qDGVkGbzbm03n/7kazUFvJc0/dVYQb103r4bEwnmeGrIY xKLtrnI0klSeUUO/7hDVQDF2vUPm4yiWUsroi5/Nrp2SiW2tUyIoLo7gU1efAz2z qx1FkGPRjxYafmevsSWEZWBozqruT/w= -----END CERTIFICATE-----Generated at Sat Oct 11 00:07:43 2025 by rpki-client