$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28390f6e-6385-388a-b481-b230f11acf5f.roa File: 28390f6e-6385-388a-b481-b230f11acf5f.roa (raw, json) Hash identifier: 5H4vSh/vNawynYuHGgjuoY4HYW2Q34PkLUQw1/jsQ4o= Subject key identifier: B2:A6:74:60:25:50:65:6F:44:0F:0F:F6:AA:84:08:5C:8B:A4:98:97 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCA0F4CD200F45C2AE680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28390f6e-6385-388a-b481-b230f11acf5f.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 209.253.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ca:0f:4c:d2:00:f4:5c:2a:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=63c46df5-fcad-44ec-ae7b-21907f1b3f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:10:d0:7e:de:71:a5:e5:23:30:a4:dd:9b:ce: 7c:3c:bc:68:d9:c1:db:82:58:28:da:69:d5:a0:29: d0:c2:4b:48:b6:d9:61:34:cc:d2:fa:dc:83:3c:9e: c5:3f:25:95:c8:af:fc:f6:f0:dc:4a:9a:29:90:b1: 4c:7e:df:db:2b:33:da:20:10:fb:38:97:63:55:b1: 01:72:ef:8b:c6:87:ab:88:08:eb:73:70:dd:16:11: 24:8b:75:c0:e0:08:6b:d3:0f:b5:63:aa:78:f0:08: 26:34:c3:e6:c7:4e:d0:87:7d:75:2e:1e:26:e1:76: 58:8a:c4:67:61:a7:a7:b6:42:93:7a:3d:0c:f3:54: 65:27:91:76:7d:58:08:ae:12:5e:2d:8b:c8:84:bb: 3c:f0:9f:73:57:c1:0d:7a:1d:51:63:7b:46:2d:39: 32:93:ed:66:da:44:4d:47:d8:be:03:7b:8e:71:f3: 26:59:34:38:98:f6:a8:95:84:22:6e:59:b2:f7:a5: db:d7:34:8d:ee:7f:f6:2f:c6:95:6d:86:67:2f:19: 7c:fd:f8:b6:aa:73:0b:ca:85:03:ef:b7:f1:5c:18: 26:d0:d5:f0:5f:e8:e5:17:14:4a:6f:fa:b5:38:f4: 5f:41:7c:7e:0a:30:02:58:b5:5e:79:66:da:07:ca: 5d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A6:74:60:25:50:65:6F:44:0F:0F:F6:AA:84:08:5C:8B:A4:98:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28390f6e-6385-388a-b481-b230f11acf5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.253.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:9c:45:b2:b5:f8:8b:0e:a3:0d:22:a8:8e:c7:69:85:fe:1f: 80:f7:bd:d7:e4:e8:ff:8c:5b:03:25:ce:44:22:c2:37:9d:5d: b1:10:ed:31:c1:d6:61:0a:b1:79:e2:17:cc:ff:1a:24:ae:9f: bd:a6:95:25:c8:b3:9b:8a:60:61:c0:8d:79:17:2c:d5:7b:e2: 0b:75:23:35:73:70:0f:d7:69:9c:ee:09:fc:20:3e:80:ec:38: 13:b5:1c:13:7a:39:2f:a9:70:42:38:5a:7a:a7:a1:7b:01:57: b5:16:25:13:6f:04:54:51:52:a1:fa:18:fc:5c:98:52:ce:be: 5a:d5:47:65:93:74:fb:a6:62:af:6a:a8:c6:9e:c5:6f:d8:63: c3:47:fb:e4:38:74:b7:b8:74:cb:6d:68:61:c6:b8:03:e1:f8: 6e:98:3a:fc:f6:6e:af:97:48:f1:04:60:5f:e1:fd:5a:4e:08: d8:4b:e2:97:ca:2c:cd:69:14:fa:84:02:32:9d:1d:23:71:89: ee:02:eb:ee:d9:2b:96:24:72:3a:35:86:97:fe:81:e2:5b:ef: 9a:c2:7e:a4:92:c3:5d:27:71:07:72:1d:ec:b0:1b:f5:00:f6: ae:83:d5:06:b2:24:3f:63:39:9e:58:d6:8f:75:83:f7:81:70: d6:00:77:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMoPTNIA9Fwq5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NjNjNDZkZjUtZmNhZC00NGVjLWFlN2ItMjE5MDdmMWIzZjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRDQft5xpeUjMKTdm858PLxo2cHbglgo2mnV oCnQwktIttlhNMzS+tyDPJ7FPyWVyK/89vDcSpopkLFMft/bKzPaIBD7OJdjVbEB cu+LxoeriAjrc3DdFhEki3XA4Ahr0w+1Y6p48AgmNMPmx07Qh311Lh4m4XZYisRn YaentkKTej0M81RlJ5F2fVgIrhJeLYvIhLs88J9zV8ENeh1RY3tGLTkyk+1m2kRN R9i+A3uOcfMmWTQ4mPaolYQiblmy96Xb1zSN7n/2L8aVbYZnLxl8/fi2qnMLyoUD 77fxXBgm0NXwX+jlFxRKb/q1OPRfQXx+CjACWLVeeWbaB8pd0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKmdGAlUGVvRA8P9qqECFyLpJiXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjgzOTBmNmUtNjM4NS0z ODhhLWI0ODEtYjIzMGYxMWFjZjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f2SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABicRbK1+IsOow0iqI7HaYX+H4D3vdfk6P+MWwMlzkQiwjedXbEQ7THB 1mEKsXniF8z/GiSun72mlSXIs5uKYGHAjXkXLNV74gt1IzVzcA/XaZzuCfwgPoDs OBO1HBN6OS+pcEI4WnqnoXsBV7UWJRNvBFRRUqH6GPxcmFLOvlrVR2WTdPumYq9q qMaexW/YY8NH++Q4dLe4dMttaGHGuAPh+G6YOvz2bq+XSPEEYF/h/VpOCNhL4pfK LM1pFPqEAjKdHSNxie4C6+7ZK5Ykcjo1hpf+geJb75rCfqSSw10ncQdyHeywG/UA 9q6D1QayJD9jOZ5Y1o91g/eBcNYAd3E= -----END CERTIFICATE-----Generated at Fri Oct 10 17:53:54 2025 by rpki-client