$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4592e4ee-3426-35e4-bcde-4f61fdb2f000.roa File: 4592e4ee-3426-35e4-bcde-4f61fdb2f000.roa (raw, json) Hash identifier: rAXm0UhjEpCkjjusMb4k9GJi1tUZDz4ORrF4x2NgqZY= Subject key identifier: F6:AF:2E:34:A8:75:27:CB:7C:4B:02:6C:8C:AA:2C:41:8D:78:0D:12 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2B9197FEE464D98C6932EA80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4592e4ee-3426-35e4-bcde-4f61fdb2f000.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 27338 IP address blocks: 74.9.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:97:fe:e4:64:d9:8c:69:32:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=23834f3c-0bb0-4b71-bab8-01832d208aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d6:02:79:88:e8:24:15:c1:5c:c1:65:98:e2: 2f:a9:32:63:93:13:ab:9f:12:9d:13:43:f3:3d:17: 28:32:f5:3f:47:7f:58:91:ae:d2:3e:28:35:59:e0: 1b:bf:65:49:5e:42:b4:cf:31:ea:a0:8d:e0:3e:bf: f6:13:16:dd:aa:b9:72:76:3b:d5:46:ad:39:46:b8: c9:1c:65:23:30:45:92:d7:4a:ac:46:c4:ce:58:ec: b4:49:20:6d:a2:9b:8d:3d:09:94:84:be:63:1c:9f: 10:5d:71:56:3c:8a:03:9c:93:82:a2:41:11:96:fc: 1c:70:04:d9:7f:ef:f7:5d:08:94:26:e0:6d:e4:05: 28:80:d6:8f:cf:db:35:75:f6:cf:65:01:5a:49:9b: 80:50:8d:08:22:af:50:5b:3a:f2:38:28:14:57:5b: a7:32:d1:da:13:4e:1a:3b:56:c6:85:e4:c5:44:77: 5a:56:c3:7b:f6:49:eb:52:4c:2d:6f:6a:49:5d:65: ed:72:a1:78:9c:3a:c1:6a:89:c6:ed:aa:01:c4:6e: e6:ae:19:b6:91:be:2c:cf:6c:6d:09:b1:5f:2d:2d: b3:1a:c8:2d:07:31:33:4b:79:fe:67:6a:42:11:d7: 05:d7:91:2f:5a:95:0e:9e:79:08:42:b3:dc:d6:84: 95:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:AF:2E:34:A8:75:27:CB:7C:4B:02:6C:8C:AA:2C:41:8D:78:0D:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4592e4ee-3426-35e4-bcde-4f61fdb2f000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.9.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:23:e5:4c:ad:d9:e1:a9:e3:04:c6:08:e6:d8:12:1d:59:0c: c6:e6:aa:b6:dd:f1:cd:81:4d:0e:f4:f3:aa:58:a1:be:99:f6: 30:18:be:57:df:b5:b2:ef:23:f8:a4:13:00:6e:8c:4b:20:bf: bd:eb:00:c8:cb:40:d1:c7:ee:c4:2e:a7:43:f0:1f:30:8a:76: 02:c6:34:67:94:e3:4a:97:e8:64:6e:29:33:07:3d:63:f5:40: ff:c7:b1:e2:11:78:67:a5:a2:6a:f6:fd:ac:31:52:ce:7d:42: 48:77:d4:4b:f8:f0:a8:60:4f:0c:d2:0e:0b:23:12:49:ec:e0: 85:d3:93:3f:5f:cf:8e:d4:65:7b:2a:7e:99:58:be:48:fa:b3: f1:9c:21:f2:19:22:65:57:4c:cd:32:23:b7:29:52:11:b7:7a: c8:af:d9:45:0e:fc:41:c4:68:08:12:9e:a3:13:0a:51:2b:c4: 22:70:f2:e9:e1:72:ab:4e:0e:b8:01:29:5d:8c:68:8a:62:8d: 19:46:db:1b:b2:f6:11:f2:15:40:eb:77:e0:5d:87:da:02:9b: 53:a0:4b:f4:63:4a:b6:ad:07:a1:cc:53:26:55:6f:28:16:2e: 5c:65:70:00:a4:4a:d1:2f:ad:8f:fb:b9:2e:67:37:7f:5b:58: f0:98:1a:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkZf+5GTZjGky6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk MjM4MzRmM2MtMGJiMC00YjcxLWJhYjgtMDE4MzJkMjA4YWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitYCeYjoJBXBXMFlmOIvqTJjkxOrnxKdE0Pz PRcoMvU/R39Yka7SPig1WeAbv2VJXkK0zzHqoI3gPr/2ExbdqrlydjvVRq05RrjJ HGUjMEWS10qsRsTOWOy0SSBtopuNPQmUhL5jHJ8QXXFWPIoDnJOCokERlvwccATZ f+/3XQiUJuBt5AUogNaPz9s1dfbPZQFaSZuAUI0IIq9QWzryOCgUV1unMtHaE04a O1bGheTFRHdaVsN79knrUkwtb2pJXWXtcqF4nDrBaonG7aoBxG7mrhm2kb4sz2xt CbFfLS2zGsgtBzEzS3n+Z2pCEdcF15EvWpUOnnkIQrPc1oSVXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPavLjSodSfLfEsCbIyqLEGNeA0SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDU5MmU0ZWUtMzQyNi0z NWU0LWJjZGUtNGY2MWZkYjJmMDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSgkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUj5Uyt2eGp4wTGCObYEh1ZDMbmqrbd8c2BTQ7086pYob6Z9jAYvlff tbLvI/ikEwBujEsgv73rAMjLQNHH7sQup0PwHzCKdgLGNGeU40qX6GRuKTMHPWP1 QP/HseIReGelomr2/awxUs59Qkh31Ev48KhgTwzSDgsjEkns4IXTkz9fz47UZXsq fplYvkj6s/GcIfIZImVXTM0yI7cpUhG3esiv2UUO/EHEaAgSnqMTClErxCJw8unh cqtODrgBKV2MaIpijRlG2xuy9hHyFUDrd+Bdh9oCm1OgS/RjSratB6HMUyZVbygW LlxlcACkStEvrY/7uS5nN39bWPCYGrw= -----END CERTIFICATE-----Generated at Fri Oct 10 17:57:13 2025 by rpki-client