$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4815f4ff-e242-37c3-88b6-0a9137f15998.roa File: 4815f4ff-e242-37c3-88b6-0a9137f15998.roa (raw, json) Hash identifier: vTiS1xLdMeW+l2t2m9v+E2eRlK6Pc7rNX5H+7/hMTqk= Subject key identifier: EE:7F:A0:3A:B4:8E:88:05:20:70:5E:96:99:64:59:5D:F0:81:E2:20 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CD1FCEE0F9AA6A6427380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4815f4ff-e242-37c3-88b6-0a9137f15998.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 27338 IP address blocks: 97.67.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:d1:fc:ee:0f:9a:a6:a6:42:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=1ed8c32b-96ca-4204-938c-94131f9fd502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a4:2c:8b:88:19:09:87:7e:99:7e:1d:a2:0f: 1e:f8:bd:10:97:f8:28:53:fe:a0:4e:8f:10:60:c2: bf:89:bb:a1:14:4e:fe:5e:0f:e3:8d:af:c4:e3:48: 03:a4:36:48:67:d0:5a:f3:a4:d2:61:5a:34:4a:de: 44:42:69:17:14:09:d2:4e:cb:b8:d9:fb:5a:3a:d9: f5:86:70:04:e9:59:f5:f9:3b:49:1d:8a:40:bf:1e: ea:94:82:e5:14:d5:cb:38:70:39:0b:2e:d4:2f:15: e2:2b:da:29:5c:47:da:a3:9d:58:38:ce:00:df:c0: 8c:16:12:d8:1a:44:4e:a1:fa:c8:ce:53:26:32:c6: 01:46:50:92:7f:9f:3e:bb:e0:93:45:92:76:55:49: 7a:01:da:9e:c9:4b:eb:a2:c4:97:dd:c0:08:03:87: f3:80:ab:ef:c7:72:c8:0a:e7:8a:a8:49:98:17:76: 92:23:26:2f:9e:cc:6c:4e:86:37:81:8d:2a:27:20: c8:50:7c:07:e4:54:25:98:1c:ce:88:86:5d:52:08: 37:9f:37:61:e4:46:ab:54:7a:6f:50:3f:fc:64:e3: 12:e1:30:e9:92:6c:ee:66:9c:eb:b6:32:47:c5:4a: 31:6b:95:11:1d:16:eb:fa:ed:1c:9d:68:cb:26:47: 71:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7F:A0:3A:B4:8E:88:05:20:70:5E:96:99:64:59:5D:F0:81:E2:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4815f4ff-e242-37c3-88b6-0a9137f15998.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 97.67.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:75:9a:2e:1b:d5:61:f9:e8:0d:75:43:a3:8e:3a:e9:1f:c7: 50:e8:9c:69:7d:84:ca:93:be:68:3d:c8:0f:bc:70:2d:30:f5: da:2a:d2:11:bc:b1:f5:c9:d9:7c:a7:c2:e5:38:3a:12:6c:c8: 9e:4c:12:2f:9c:fa:9c:c5:7e:b4:6a:fc:f2:a8:a1:16:4d:7b: 9e:d7:a8:29:95:ee:e3:13:12:77:7c:2d:e2:e0:93:ba:da:fd: 36:33:4f:f2:77:3d:f2:8e:35:bc:ca:a3:32:b3:b0:55:9f:e5: f9:8b:fd:fa:50:37:db:a7:c6:c2:ca:b0:00:5f:2a:2c:35:7b: d5:e7:7d:3e:64:5b:6c:02:64:56:70:a5:11:02:22:a9:0a:c8: e9:9f:08:2a:8a:22:53:d5:eb:98:88:de:6a:32:bb:23:64:85: 0b:37:b8:e6:04:a0:df:51:db:a2:79:7f:b2:2b:49:92:a7:cc: 5a:9e:34:4f:14:97:a1:b4:03:72:07:4f:1a:f4:79:8c:5f:c9: fe:79:33:0f:c5:f7:b4:13:2e:0a:ea:07:81:4e:36:c3:dd:d7: 83:e7:fe:45:cb:cc:f1:e2:e4:63:31:60:69:57:20:dd:c9:69: 25:df:b8:f9:a8:1d:44:fc:9f:23:aa:6a:67:11:80:d4:ae:a8: c0:94:ff:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXNH87g+apqZCc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MWVkOGMzMmItOTZjYS00MjA0LTkzOGMtOTQxMzFmOWZkNTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqQsi4gZCYd+mX4dog8e+L0Ql/goU/6gTo8Q YMK/ibuhFE7+Xg/jja/E40gDpDZIZ9Ba86TSYVo0St5EQmkXFAnSTsu42ftaOtn1 hnAE6Vn1+TtJHYpAvx7qlILlFNXLOHA5Cy7ULxXiK9opXEfao51YOM4A38CMFhLY GkROofrIzlMmMsYBRlCSf58+u+CTRZJ2VUl6AdqeyUvrosSX3cAIA4fzgKvvx3LI CueKqEmYF3aSIyYvnsxsToY3gY0qJyDIUHwH5FQlmBzOiIZdUgg3nzdh5EarVHpv UD/8ZOMS4TDpkmzuZpzrtjJHxUoxa5URHRbr+u0cnWjLJkdxvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5/oDq0jogFIHBelplkWV3wgeIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDgxNWY0ZmYtZTI0Mi0z N2MzLTg4YjYtMGE5MTM3ZjE1OTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYUPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHd1mi4b1WH56A11Q6OOOukfx1DonGl9hMqTvmg9yA+8cC0w9doq0hG8 sfXJ2XynwuU4OhJsyJ5MEi+c+pzFfrRq/PKooRZNe57XqCmV7uMTEnd8LeLgk7ra /TYzT/J3PfKONbzKozKzsFWf5fmL/fpQN9unxsLKsABfKiw1e9XnfT5kW2wCZFZw pRECIqkKyOmfCCqKIlPV65iI3moyuyNkhQs3uOYEoN9R26J5f7IrSZKnzFqeNE8U l6G0A3IHTxr0eYxfyf55Mw/F97QTLgrqB4FONsPd14Pn/kXLzPHi5GMxYGlXIN3J aSXfuPmoHUT8nyOqamcRgNSuqMCU/9A= -----END CERTIFICATE-----Generated at Fri Oct 10 22:06:39 2025 by rpki-client