$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/422bd644-0dc9-389f-aca4-f88aec64e25a.roa File: 422bd644-0dc9-389f-aca4-f88aec64e25a.roa (raw, json) Hash identifier: LB2x/HcMO43K0kYYhZQPKd3+/B23FWXdCHmVNk5zqa4= Subject key identifier: AB:60:44:F1:F7:FC:FF:37:AB:27:7D:A2:17:DF:40:BF:6B:F4:DB:5E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D048628639B063DBEEF80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/422bd644-0dc9-389f-aca4-f88aec64e25a.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 31759 IP address blocks: 199.195.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:04:86:28:63:9b:06:3d:be:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=ba0390da-7cd2-4f5a-99b0-8be6fab95f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a9:3d:69:e1:fa:eb:12:50:c9:6b:0d:82:80: 3b:c0:27:94:95:d2:84:53:84:6a:b8:b4:56:31:5e: ae:49:15:13:fe:ef:93:1b:cd:d3:7c:e0:06:31:c0: 91:be:99:b1:ca:ce:ca:09:f1:03:07:bc:29:8e:90: 94:58:2e:f0:28:95:b8:8e:0c:94:54:93:85:ee:02: 15:f1:64:b0:ca:94:89:23:0e:a5:b4:7b:85:67:21: cf:d0:6d:15:3b:3f:4c:f6:54:01:2c:fc:08:ab:f3: d0:81:9a:40:04:e9:b1:c7:9f:09:b7:33:0b:70:a2: 0d:68:38:cf:49:e7:b7:ae:d6:61:60:0d:98:d8:a4: 97:1c:63:74:b8:08:9e:e7:6a:01:69:76:e1:16:c2: 14:d3:6d:46:7c:e5:61:f7:9c:6e:f9:8e:55:54:9b: d0:89:57:b7:4d:5d:04:d6:d4:cc:ea:8c:5f:4d:21: a2:13:19:a1:fc:46:41:17:a0:1d:3a:ae:29:5e:6f: 69:12:22:6b:7f:c7:bb:a5:4d:3b:4f:f2:62:6f:80: 50:84:6b:94:28:cb:0e:26:43:c6:75:aa:a9:d6:eb: b8:db:dd:16:c9:15:22:f6:36:1c:a6:fe:78:06:78: 7b:bd:18:2b:8d:2c:75:98:0d:eb:cd:75:65:a6:4c: e8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:60:44:F1:F7:FC:FF:37:AB:27:7D:A2:17:DF:40:BF:6B:F4:DB:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/422bd644-0dc9-389f-aca4-f88aec64e25a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 199.195.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:4a:91:b6:af:4d:66:22:5f:90:2f:86:af:ce:15:86:1e:cd: f8:34:4c:c9:a1:6a:8b:4f:ae:2e:f7:e2:cb:ab:b2:53:64:5e: 64:35:80:bc:3b:d5:3f:03:e9:03:32:d2:64:a3:0c:58:c1:54: e6:da:cf:57:f5:a6:ea:fe:38:05:71:cc:48:55:10:6c:fd:00: e8:57:d2:3a:b4:0e:8b:6d:8a:e9:38:6e:58:b8:46:13:46:c6: 6d:70:1b:37:5a:30:fe:fb:7e:4d:d0:e3:bf:27:ed:4c:96:8a: ac:4b:78:e5:84:40:85:29:15:24:f1:ed:f8:78:a3:1f:5c:5a: 82:bc:1e:25:d4:07:a4:3d:e3:54:95:22:62:fe:74:a4:6b:60: da:2a:7c:f6:39:3d:e6:a9:f4:cf:e0:5d:87:f4:c7:65:ba:63: b0:44:b9:ef:0d:ee:f8:25:33:d0:ff:d6:a6:4d:14:21:1b:40: 0e:06:00:d0:b8:eb:36:32:d1:2c:3c:ca:b9:63:03:f1:bb:71: 6c:cd:46:7e:3d:41:51:2c:3a:6c:7e:41:3e:e8:c8:35:22:26: 84:62:fe:28:43:df:52:5e:01:c6:f4:cd:47:19:3d:7e:d9:fa: d8:01:92:15:a1:c4:4f:ba:a3:63:aa:d0:2d:3d:26:c2:a8:0e: 2b:f8:fd:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQSGKGObBj2+74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YmEwMzkwZGEtN2NkMi00ZjVhLTk5YjAtOGJlNmZhYjk1ZjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqk9aeH66xJQyWsNgoA7wCeUldKEU4RquLRW MV6uSRUT/u+TG83TfOAGMcCRvpmxys7KCfEDB7wpjpCUWC7wKJW4jgyUVJOF7gIV 8WSwypSJIw6ltHuFZyHP0G0VOz9M9lQBLPwIq/PQgZpABOmxx58JtzMLcKINaDjP See3rtZhYA2Y2KSXHGN0uAie52oBaXbhFsIU021GfOVh95xu+Y5VVJvQiVe3TV0E 1tTM6oxfTSGiExmh/EZBF6AdOq4pXm9pEiJrf8e7pU07T/Jib4BQhGuUKMsOJkPG daqp1uu4290WyRUi9jYcpv54Bnh7vRgrjSx1mA3rzXVlpkzoywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtgRPH3/P83qyd9ohffQL9r9NteMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDIyYmQ2NDQtMGRjOS0z ODlmLWFjYTQtZjg4YWVjNjRlMjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8PxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdKkbavTWYiX5Avhq/OFYYezfg0TMmhaotPri734surslNkXmQ1gLw7 1T8D6QMy0mSjDFjBVObaz1f1pur+OAVxzEhVEGz9AOhX0jq0Dottiuk4bli4RhNG xm1wGzdaMP77fk3Q478n7UyWiqxLeOWEQIUpFSTx7fh4ox9cWoK8HiXUB6Q941SV ImL+dKRrYNoqfPY5Peap9M/gXYf0x2W6Y7BEue8N7vglM9D/1qZNFCEbQA4GANC4 6zYy0Sw8yrljA/G7cWzNRn49QVEsOmx+QT7oyDUiJoRi/ihD31JeAcb0zUcZPX7Z +tgBkhWhxE+6o2Oq0C09JsKoDiv4/Uc= -----END CERTIFICATE-----Generated at Fri Oct 10 17:51:41 2025 by rpki-client