$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32366493-a9e8-3a70-86e9-3dbb2976f003.roa File: 32366493-a9e8-3a70-86e9-3dbb2976f003.roa (raw, json) Hash identifier: iIyinfBMDhz2r+aqz9XiWJ16UkzJxODrJ/KdMHFHBSM= Subject key identifier: E5:E4:9F:E5:56:FC:C1:F1:0B:09:2B:48:04:B6:38:04:29:21:18:37 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3821B05603C552C97D18A280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32366493-a9e8-3a70-86e9-3dbb2976f003.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 173.184.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:b0:56:03:c5:52:c9:7d:18:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=7be078b3-3c17-4ede-8656-0ccf284981fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:96:7b:ab:a6:e6:3f:d6:18:04:da:a1:e3:92: 73:3c:49:f2:18:e0:e2:56:20:26:c9:99:e7:a5:9f: f4:c1:35:fe:b2:14:36:c0:87:1b:27:b2:4d:ab:91: b3:81:76:74:ff:87:13:00:8e:be:60:d3:43:24:30: 1f:36:9a:df:a8:50:04:0e:b9:2f:56:f2:5e:27:e0: b9:a1:4d:fa:c5:60:0d:ee:8c:e7:92:c8:7c:ec:2d: ad:ac:72:be:94:a8:b3:9c:4c:30:17:52:b2:71:ff: 5f:16:8f:2e:30:81:33:33:8c:a7:22:1c:cb:88:d8: 84:7c:33:66:a2:76:cb:69:f4:75:18:0d:50:fd:c9: 43:f4:80:ff:22:dd:5e:d5:2c:e9:38:45:a5:30:19: fc:96:0b:20:d6:ba:99:80:f4:3c:5e:bd:39:d0:61: 1f:20:35:2d:0d:68:0b:e5:60:db:d3:00:c4:d7:19: 79:5e:0a:63:fe:50:85:4d:3d:1b:6a:a6:c5:d9:db: 0b:c3:74:c5:ab:10:66:5b:01:0c:e1:67:dd:d0:03: 2c:31:db:bd:dd:81:5d:57:78:91:ab:3c:a2:0d:ba: 04:3b:04:c1:27:64:10:1d:91:3d:d5:6d:2e:1f:9f: d9:19:eb:4a:b2:b0:20:e9:81:3c:35:a0:8a:dd:80: 4e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E4:9F:E5:56:FC:C1:F1:0B:09:2B:48:04:B6:38:04:29:21:18:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32366493-a9e8-3a70-86e9-3dbb2976f003.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.184.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:2c:36:63:34:47:48:b6:0d:a9:81:6d:85:0a:4a:6e:d1:5e: cd:08:6b:4f:6c:b9:bd:1a:2f:40:3c:a2:b4:71:77:95:27:e2: db:77:bf:aa:36:15:59:28:a8:75:21:ae:37:a3:ea:63:5d:2b: 44:83:f8:41:43:b8:df:49:ba:2c:87:05:53:52:19:f4:01:86: 42:2e:00:20:29:83:59:8e:e6:10:ca:e9:f3:5b:26:a1:26:10: a0:e0:66:94:1d:ba:8e:53:3c:c6:7c:76:20:07:cd:c3:1f:94: 88:09:0f:c8:2b:69:01:11:a0:6c:cc:01:3c:d6:f0:41:90:57: ce:05:91:c2:02:93:51:60:00:67:ac:d9:b5:b0:72:9d:18:36: 2b:3d:21:37:48:55:d8:6f:12:fe:61:87:f5:9c:bc:fb:f7:1f: 1e:e9:fd:2d:72:6f:8c:8f:74:ae:59:7e:f1:87:ed:a3:e3:b1: 2c:e3:8f:6a:d0:fc:d8:a1:05:c7:52:1f:d6:b5:0b:af:38:2b: dd:ff:46:c4:59:bc:fa:47:f6:6d:30:c2:bf:23:22:ae:67:b3: 2d:9d:22:33:67:63:f1:4b:a1:00:78:8b:f8:51:56:a1:b4:b0: 29:91:2a:e8:24:d1:0c:99:b0:6c:e9:08:3d:97:f2:85:60:79: 3e:28:d6:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IbBWA8VSyX0YooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk N2JlMDc4YjMtM2MxNy00ZWRlLTg2NTYtMGNjZjI4NDk4MWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZZ7q6bmP9YYBNqh45JzPEnyGODiViAmyZnn pZ/0wTX+shQ2wIcbJ7JNq5GzgXZ0/4cTAI6+YNNDJDAfNprfqFAEDrkvVvJeJ+C5 oU36xWAN7oznksh87C2trHK+lKiznEwwF1Kycf9fFo8uMIEzM4ynIhzLiNiEfDNm onbLafR1GA1Q/clD9ID/It1e1SzpOEWlMBn8lgsg1rqZgPQ8Xr050GEfIDUtDWgL 5WDb0wDE1xl5Xgpj/lCFTT0baqbF2dsLw3TFqxBmWwEM4Wfd0AMsMdu93YFdV3iR qzyiDboEOwTBJ2QQHZE91W0uH5/ZGetKsrAg6YE8NaCK3YBOrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXkn+VW/MHxCwkrSAS2OAQpIRg3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzIzNjY0OTMtYTllOC0z YTcwLTg2ZTktM2RiYjI5NzZmMDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbiQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUsNmM0R0i2DamBbYUKSm7RXs0Ia09sub0aL0A8orRxd5Un4tt3v6o2 FVkoqHUhrjej6mNdK0SD+EFDuN9JuiyHBVNSGfQBhkIuACApg1mO5hDK6fNbJqEm EKDgZpQduo5TPMZ8diAHzcMflIgJD8graQERoGzMATzW8EGQV84FkcICk1FgAGes 2bWwcp0YNis9ITdIVdhvEv5hh/WcvPv3Hx7p/S1yb4yPdK5ZfvGH7aPjsSzjj2rQ /NihBcdSH9a1C684K93/RsRZvPpH9m0wwr8jIq5nsy2dIjNnY/FLoQB4i/hRVqG0 sCmRKugk0QyZsGzpCD2X8oVgeT4o1vY= -----END CERTIFICATE-----Generated at Fri Oct 10 17:57:07 2025 by rpki-client