$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d479b6e-d7de-33d9-b5b4-757ee73cb84a.roa File: 3d479b6e-d7de-33d9-b5b4-757ee73cb84a.roa (raw, json) Hash identifier: XWidLyUcBsPdvAPa574dUT9DvevSwS0bxQ0emToXL7w= Subject key identifier: AF:32:F3:9E:99:5C:AF:7A:33:71:6C:5A:C1:6A:56:83:A1:F9:B2:89 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B01B14C82ED75F83448495BC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d479b6e-d7de-33d9-b5b4-757ee73cb84a.roa Signing time: Thu 28 Aug 2025 13:00:41 +0000 ROA not before: Thu 28 Aug 2025 13:00:41 +0000 ROA not after: Wed 26 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 162.39.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:01:b1:4c:82:ed:75:f8:34:48:49:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 28 13:00:41 2025 GMT Not After : Nov 26 14:00:41 2025 GMT Subject: CN=90e08b33-e17b-45f1-acd0-4e5b515b6c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:03:be:2d:15:1a:5e:82:9e:26:8a:78:8b:8d: 58:c3:20:b5:fd:66:a6:0a:ca:0f:0a:a1:ab:9e:7b: 49:20:a3:21:22:92:dc:e5:72:63:9f:7b:a4:1f:1f: 37:8a:ad:36:92:7f:30:7b:94:e3:9b:67:9e:16:b7: 6c:3d:aa:26:8c:7c:a6:58:0d:de:e1:23:fe:cf:5d: 94:1c:fa:46:72:a0:fe:cc:65:13:dc:db:74:a9:95: 88:6d:b7:3b:d2:ab:75:54:64:c6:f5:b9:c1:fb:83: 9d:3a:d7:11:28:b2:5e:e3:b3:51:7e:53:cb:61:43: 42:62:28:ed:e3:45:a4:1c:64:16:a9:6a:32:68:f5: 5f:e2:39:33:9c:6c:39:c3:85:d3:6a:92:f4:49:92: 59:03:fd:f8:b3:72:51:86:28:b9:f1:e3:e6:c0:b0: 51:34:02:b4:e5:f8:74:e4:29:71:64:7a:16:6f:f8: ef:77:61:38:09:82:96:80:a2:e5:03:bd:37:2a:fd: 1f:7b:49:f3:d7:18:82:86:83:c8:10:90:ef:e0:6b: a8:e8:c8:64:f5:2a:15:78:b1:14:c3:d0:b2:f9:45: c3:37:57:b6:44:c0:42:7b:a6:8d:bb:d7:50:dd:d0: 1f:90:20:80:3e:a1:5d:76:d4:c6:58:98:ad:45:ac: e0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:32:F3:9E:99:5C:AF:7A:33:71:6C:5A:C1:6A:56:83:A1:F9:B2:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d479b6e-d7de-33d9-b5b4-757ee73cb84a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.39.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:96:52:fe:84:b0:53:f6:51:0c:40:6b:ac:20:ff:d1:08:2c: ba:8e:b1:07:ac:1c:a2:01:9b:0e:0b:b7:7d:9a:7b:99:5b:c0: 51:60:55:06:e5:28:79:7e:7e:34:5c:e4:69:a0:ff:82:71:d7: d0:2e:14:9e:16:79:25:ad:62:f8:74:f6:6e:a7:4e:a4:76:11: f1:9e:ab:ec:41:52:36:34:8e:a6:35:b0:7b:6c:33:25:cd:00: c5:78:db:61:96:74:4c:d1:ca:dd:49:b0:57:16:ca:fe:28:f7: 27:54:73:69:3b:74:88:43:5b:a4:ef:09:19:b4:40:a4:65:fc: c8:5a:d0:51:18:48:fd:b9:8b:a9:aa:8e:86:32:78:d4:01:b6: 3c:12:3f:13:6a:3c:a5:76:2e:29:28:af:2e:b1:06:ed:aa:cc: 38:d4:2a:72:94:a0:a6:9d:ac:54:b8:01:43:c6:f5:06:1c:a3: b5:a3:b7:90:a7:cb:b8:40:07:98:4d:1a:56:5b:f4:51:7f:7a: cd:16:89:ec:fb:7b:0c:92:7e:cc:e3:1e:cf:09:f9:e3:1d:00: 50:22:5e:0e:60:b6:69:5e:6f:19:25:f7:50:7a:e2:93:e0:5e: 74:e5:97:d7:1c:86:ee:f1:2e:83:8b:2e:8a:09:67:47:05:f9: f6:ac:59:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsBsUyC7XX4NEhJW8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgyODEzMDA0MVoXDTI1MTEyNjE0MDA0MVowLzEtMCsGA1UEAxMk OTBlMDhiMzMtZTE3Yi00NWYxLWFjZDAtNGU1YjUxNWI2YzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgO+LRUaXoKeJop4i41YwyC1/WamCsoPCqGr nntJIKMhIpLc5XJjn3ukHx83iq02kn8we5Tjm2eeFrdsPaomjHymWA3e4SP+z12U HPpGcqD+zGUT3Nt0qZWIbbc70qt1VGTG9bnB+4OdOtcRKLJe47NRflPLYUNCYijt 40WkHGQWqWoyaPVf4jkznGw5w4XTapL0SZJZA/34s3JRhii58ePmwLBRNAK05fh0 5ClxZHoWb/jvd2E4CYKWgKLlA703Kv0fe0nz1xiChoPIEJDv4Guo6Mhk9SoVeLEU w9Cy+UXDN1e2RMBCe6aNu9dQ3dAfkCCAPqFddtTGWJitRazgxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8y856ZXK96M3FsWsFqVoOh+bKJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2Q0NzliNmUtZDdkZS0z M2Q5LWI1YjQtNzU3ZWU3M2NiODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoifcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyWUv6EsFP2UQxAa6wg/9EILLqOsQesHKIBmw4Lt32ae5lbwFFgVQbl KHl+fjRc5Gmg/4Jx19AuFJ4WeSWtYvh09m6nTqR2EfGeq+xBUjY0jqY1sHtsMyXN AMV422GWdEzRyt1JsFcWyv4o9ydUc2k7dIhDW6TvCRm0QKRl/Mha0FEYSP25i6mq joYyeNQBtjwSPxNqPKV2Likory6xBu2qzDjUKnKUoKadrFS4AUPG9QYco7Wjt5Cn y7hAB5hNGlZb9FF/es0Wiez7ewySfszjHs8J+eMdAFAiXg5gtmlebxkl91B64pPg XnTll9cchu7xLoOLLooJZ0cF+fasWSs= -----END CERTIFICATE-----Generated at Fri Oct 10 22:03:34 2025 by rpki-client