$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f4ab6ed-df8d-353a-ab51-fbeb61ce130a.roa File: 2f4ab6ed-df8d-353a-ab51-fbeb61ce130a.roa (raw, json) Hash identifier: vRYLcUrcs9BvP1bjtc/fg3u1RRp7BvMsbhXW25djaT8= Subject key identifier: 33:F5:4C:BD:77:83:12:A2:D8:F9:46:EC:7A:F8:6D:66:A9:7C:B8:94 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CFD0352D25833B4CD8C40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f4ab6ed-df8d-353a-ab51-fbeb61ce130a.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 216.119.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:fd:03:52:d2:58:33:b4:cd:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=6049ce9d-b9b4-4d72-9614-78c24f9109d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b0:bb:e3:cd:c8:2f:72:d9:e6:85:38:5f:0c: 36:7b:6b:58:06:a5:89:40:94:bf:0f:bf:30:0c:3d: dd:78:c4:52:c9:d7:cd:77:43:5c:94:3c:86:f2:8f: 99:db:18:e4:a5:0a:d7:9f:77:66:bb:b1:43:3b:59: 2e:be:07:ff:bf:1a:65:61:4a:7f:b8:e2:4b:5a:8d: da:52:6b:fd:5a:e0:84:66:9a:79:90:da:99:a8:5c: 63:d2:11:97:a8:fd:ab:97:d1:cc:cd:d6:77:a9:ce: 2a:7a:91:58:47:44:d3:e7:fd:99:dd:cb:91:bf:cf: 38:41:1e:13:7c:ed:b7:7a:25:aa:11:c5:72:35:fb: f9:0f:e9:ac:73:9d:a6:9a:fa:35:8e:25:2d:71:3a: 82:b8:12:5f:e9:f9:a0:19:ab:14:ea:44:a6:44:f0: e0:b3:70:fe:76:42:ee:bd:89:42:86:75:4f:14:fe: f6:e9:4f:b3:d2:41:aa:d7:49:c3:c4:f9:d9:42:56: 10:73:4d:13:c7:09:18:a6:c1:f9:3c:e7:e2:e9:0a: 8f:a7:93:58:52:88:11:6c:f6:53:7d:57:14:31:36: 47:d6:c4:4f:9d:ec:87:f1:a8:7d:ca:25:23:33:ff: a6:88:b2:5b:02:dc:27:6c:c4:70:74:62:5d:88:b6: 5a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F5:4C:BD:77:83:12:A2:D8:F9:46:EC:7A:F8:6D:66:A9:7C:B8:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f4ab6ed-df8d-353a-ab51-fbeb61ce130a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.119.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:9f:04:80:2b:a0:bb:18:62:07:76:8a:f8:6c:d8:49:8b:cf: 2b:e2:bc:4d:7a:ba:b8:16:2a:69:9b:ee:64:63:1d:37:11:8c: 8b:50:f2:39:4f:a9:93:c8:3f:bb:5e:4b:5a:cf:09:63:74:e8: 67:7c:18:2e:c9:6d:8e:bb:39:a1:99:1b:e8:00:e4:a4:c4:ae: 1b:83:9d:f6:2c:92:14:bf:39:5f:1e:d7:6c:18:34:4a:8a:33: 82:e0:2d:81:27:b9:be:d1:89:1d:0a:f9:2c:84:81:ba:b1:83: 08:9a:54:66:40:ef:bc:ce:86:61:7e:4e:1e:88:a0:5f:94:9f: fe:2c:c7:df:1b:e7:18:80:f9:79:24:35:84:40:72:2e:12:04: 11:de:d1:a9:6f:87:08:49:21:e1:79:00:2f:8e:01:07:97:d1: 06:2c:ca:38:3f:7f:30:19:5e:59:d8:f3:fa:cd:8f:55:e7:11: ba:c8:42:dd:55:00:11:fe:e2:4b:a4:7e:f1:7b:9d:88:75:b2: b6:f1:9e:03:24:79:a9:a7:1a:98:6d:b9:ba:ab:c8:a2:17:a2: fd:9e:dd:fa:88:b1:52:bb:ba:28:b8:11:88:ef:4f:9e:d1:a5: 2b:3f:a3:ac:67:ce:d5:07:e6:73:f9:84:47:b0:c3:2f:38:d1: 80:4b:eb:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXP0DUtJYM7TNjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NjA0OWNlOWQtYjliNC00ZDcyLTk2MTQtNzhjMjRmOTEwOWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrC7483IL3LZ5oU4Xww2e2tYBqWJQJS/D78w DD3deMRSydfNd0NclDyG8o+Z2xjkpQrXn3dmu7FDO1kuvgf/vxplYUp/uOJLWo3a Umv9WuCEZpp5kNqZqFxj0hGXqP2rl9HMzdZ3qc4qepFYR0TT5/2Z3cuRv884QR4T fO23eiWqEcVyNfv5D+msc52mmvo1jiUtcTqCuBJf6fmgGasU6kSmRPDgs3D+dkLu vYlChnVPFP726U+z0kGq10nDxPnZQlYQc00TxwkYpsH5POfi6QqPp5NYUogRbPZT fVcUMTZH1sRPneyH8ah9yiUjM/+miLJbAtwnbMRwdGJdiLZaawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDP1TL13gxKi2PlG7Hr4bWapfLiUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmY0YWI2ZWQtZGY4ZC0z NTNhLWFiNTEtZmJlYjYxY2UxMzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2HfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWfBIAroLsYYgd2ivhs2EmLzyvivE16urgWKmmb7mRjHTcRjItQ8jlP qZPIP7teS1rPCWN06Gd8GC7JbY67OaGZG+gA5KTErhuDnfYskhS/OV8e12wYNEqK M4LgLYEnub7RiR0K+SyEgbqxgwiaVGZA77zOhmF+Th6IoF+Un/4sx98b5xiA+Xkk NYRAci4SBBHe0alvhwhJIeF5AC+OAQeX0QYsyjg/fzAZXlnY8/rNj1XnEbrIQt1V ABH+4kukfvF7nYh1srbxngMkeamnGphtubqryKIXov2e3fqIsVK7uii4EYjvT57R pSs/o6xnztUH5nP5hEewwy840YBL66o= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:53 2025 by rpki-client