$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d8f4f9a-6ab5-3642-8534-d7ad5c45d15f.roa File: 2d8f4f9a-6ab5-3642-8534-d7ad5c45d15f.roa (raw, json) Hash identifier: gl9imONxszbPwZXBkiFz9dZEk21PHMGsjqn3K4GXFLI= Subject key identifier: 8A:79:BA:86:5A:A2:36:DD:81:B6:AC:2B:9F:D5:A6:F8:F9:93:2F:65 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF96C7B5B68D4D801F800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d8f4f9a-6ab5-3642-8534-d7ad5c45d15f.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 174.130.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f9:6c:7b:5b:68:d4:d8:01:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=5a0ec604-cb9e-4657-848c-6c71eae07468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:93:14:08:09:74:05:37:d9:7a:1a:fc:45:8f: 2c:26:42:0e:4a:fc:5b:a4:72:a8:9e:52:ee:ca:8c: ac:41:cc:72:77:5f:db:51:52:6a:3d:6f:b3:4a:e1: 87:b0:d5:0b:2a:8d:62:35:ca:56:04:76:ca:ce:75: 46:db:d9:d2:01:eb:77:b7:a0:c4:1e:ca:e8:66:1c: 13:e9:4a:f1:02:48:ec:0e:1b:1e:3a:a0:c5:10:99: 5e:00:94:00:ef:87:5d:ed:2b:7f:32:d8:af:9f:2e: 7a:c4:1e:e3:75:1d:75:ec:84:fa:76:ac:20:5e:42: 67:29:81:bf:ca:90:96:df:c3:5c:f5:46:8d:f6:4d: dd:d7:51:2f:c7:ac:c4:ba:9b:6a:68:42:9d:57:8e: c7:bf:80:71:2f:71:f8:a4:d2:82:eb:db:3a:4d:10: 45:95:a9:29:0c:1d:c9:f9:ea:f6:7b:c1:a8:1b:53: 42:f6:64:af:b9:89:19:e8:e3:58:5a:10:41:65:3f: 9e:91:5c:50:da:c1:f9:4d:08:45:cf:ef:dc:07:9c: cb:35:93:5a:45:ff:2a:04:fe:47:33:ec:ca:3a:d9: d5:06:b8:1f:e4:57:8d:2c:a1:78:31:f3:34:89:e9: 1b:20:6f:28:f1:5e:53:af:ee:84:6a:8d:78:37:53: 84:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:79:BA:86:5A:A2:36:DD:81:B6:AC:2B:9F:D5:A6:F8:F9:93:2F:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d8f4f9a-6ab5-3642-8534-d7ad5c45d15f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:4a:c3:b2:11:be:57:2f:4c:47:f6:80:f0:cb:fc:cb:6b:1c: 5b:53:15:fa:16:1b:de:e8:42:32:b2:69:66:7b:c6:a8:ba:c0: 19:a5:e7:b8:88:35:40:8d:82:55:81:50:aa:bf:bc:e3:cc:79: 6a:7b:de:d5:1f:97:40:0a:ec:35:8a:68:4e:b3:bf:8b:22:38: 49:3c:e9:f3:dd:a9:d9:6a:89:3b:75:b4:20:4d:4e:f4:ed:b8: a9:96:fb:a3:d5:fe:00:ed:17:33:33:1f:fe:30:12:05:3e:76: c9:1b:b0:a1:ca:ed:3c:78:d5:69:1b:2e:53:40:29:8b:2e:55: d5:51:ff:ec:0d:b6:76:b0:27:16:30:c7:94:b3:fe:72:12:63: 89:e9:0a:d7:61:a1:0e:58:54:ba:b0:b3:ad:d6:61:38:49:bb: f8:72:14:8f:cb:03:b5:0e:d6:74:5a:69:ea:d3:e5:5a:52:7b: 3b:ef:d4:32:a6:17:f0:aa:a0:db:6a:1b:62:1f:9f:47:3e:18: 14:2f:b0:21:1a:62:ef:b0:0b:14:d3:64:a4:4c:72:b3:b1:65: 18:50:d1:29:e8:ed:5d:88:cb:4c:0e:bd:f7:af:19:87:d9:aa: e0:3b:0a:ca:e9:bb:f1:d0:7c:66:cb:45:b8:c7:2c:1f:13:67: 5e:13:12:87 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtxXPlse1to1NgB+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NWEwZWM2MDQtY2I5ZS00NjU3LTg0OGMtNmM3MWVhZTA3NDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pMUCAl0BTfZehr8RY8sJkIOSvxbpHKonlLu yoysQcxyd1/bUVJqPW+zSuGHsNULKo1iNcpWBHbKznVG29nSAet3t6DEHsroZhwT 6UrxAkjsDhseOqDFEJleAJQA74dd7St/Mtivny56xB7jdR117IT6dqwgXkJnKYG/ ypCW38Nc9UaN9k3d11Evx6zEuptqaEKdV47Hv4BxL3H4pNKC69s6TRBFlakpDB3J +er2e8GoG1NC9mSvuYkZ6ONYWhBBZT+ekVxQ2sH5TQhFz+/cB5zLNZNaRf8qBP5H M+zKOtnVBrgf5FeNLKF4MfM0iekbIG8o8V5Tr+6Eao14N1OEHwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIp5uoZaojbdgbasK5/Vpvj5ky9lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmQ4ZjRmOWEtNmFiNS0z NjQyLTg1MzQtZDdhZDVjNDVkMTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBroIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAlkrDshG+Vy9MR/aA8Mv8y2scW1MV+hYb3uhCMrJpZnvGqLrAGaXnuIg1 QI2CVYFQqr+848x5anve1R+XQArsNYpoTrO/iyI4STzp892p2WqJO3W0IE1O9O24 qZb7o9X+AO0XMzMf/jASBT52yRuwocrtPHjVaRsuU0Apiy5V1VH/7A22drAnFjDH lLP+chJjiekK12GhDlhUurCzrdZhOEm7+HIUj8sDtQ7WdFpp6tPlWlJ7O+/UMqYX 8Kqg22obYh+fRz4YFC+wIRpi77ALFNNkpExys7FlGFDRKejtXYjLTA69968Zh9mq 4DsKyum78dB8ZstFuMcsHxNnXhMShw== -----END CERTIFICATE-----Generated at Fri Oct 10 19:57:35 2025 by rpki-client