$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/488d7a87-5ecd-3b50-9364-606749816097.roa File: 488d7a87-5ecd-3b50-9364-606749816097.roa (raw, json) Hash identifier: CFVafuuHxtmLk2CleNkD2SNipSeb8WQPb501v0AaJ3o= Subject key identifier: 3F:DE:1E:AD:82:27:EB:24:9E:EA:E6:C2:39:CA:B0:84:A1:F6:A3:69 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF2BD0F575797D5CCD580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/488d7a87-5ecd-3b50-9364-606749816097.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 64.206.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f2:bd:0f:57:57:97:d5:cc:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=a714f0fd-1f14-4473-ae74-f9a0cb4bddf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b5:4d:82:a6:85:97:57:f0:56:a1:98:40:e8: 7e:4b:24:71:d7:81:a7:c4:eb:4c:fb:47:d2:be:37: ef:57:1a:f0:cc:bf:f5:43:cd:9b:be:ea:d6:61:b6: 79:45:5b:50:fb:27:f5:d1:94:69:a6:34:d9:d5:3c: 23:2b:ed:54:a1:f4:ac:a4:7a:e5:76:7b:ee:e6:6f: b1:69:24:15:42:a2:5e:42:18:8b:fa:54:29:e5:fe: 0f:75:b9:35:7b:30:b0:ab:aa:0e:79:be:3a:dc:ab: 13:5e:54:c2:33:00:16:6b:88:d4:84:56:23:44:ad: ee:48:81:35:e0:81:d0:45:4b:4a:64:0e:90:b4:38: 22:6f:ec:d6:ed:4a:85:c7:8b:c4:bb:1b:8a:a4:23: 8b:b8:4d:4f:61:97:86:b3:30:8e:21:aa:ad:1c:56: 16:20:15:5a:46:f9:8d:13:1c:3d:b8:ce:d7:7d:e5: 08:a5:a1:61:ef:88:f5:24:ca:5a:b6:59:26:71:20: e6:35:3c:2a:63:69:0e:96:a0:20:f6:09:8c:04:0b: 56:f2:ee:39:3a:cf:e1:57:ec:88:52:86:a2:31:72: f8:43:b1:97:b8:92:60:bd:fd:a8:a3:4d:2a:d1:6c: 73:61:0c:c3:95:60:5c:b3:c5:5d:72:d9:ef:7d:b2: 0e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DE:1E:AD:82:27:EB:24:9E:EA:E6:C2:39:CA:B0:84:A1:F6:A3:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/488d7a87-5ecd-3b50-9364-606749816097.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.206.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:13:70:1c:ef:cb:d9:69:a7:6d:16:ff:70:6a:cf:04:d0:76: d4:9b:e9:46:8f:65:10:b6:3e:06:5c:a2:5d:3c:18:a2:e9:5c: 7b:f2:f3:09:0e:49:65:5c:9f:00:f6:9c:17:80:84:dc:5e:3c: 44:e3:5c:00:06:4b:5c:02:37:bf:4e:5e:32:0c:05:e4:c3:8a: 90:32:84:3f:5c:04:86:48:e6:6b:f6:8a:4b:2f:c5:41:3b:fc: a4:c5:9b:a6:3c:dd:0f:5b:1b:9d:48:dc:a7:91:fe:dd:fc:85: e7:94:58:1a:0d:ee:6d:67:aa:2c:aa:b2:a3:c7:4f:e1:44:77: 7a:9e:e1:d5:02:5c:fd:61:6f:f8:ec:3d:25:7a:58:24:f2:60: ab:63:26:9a:23:01:8f:40:b0:96:51:63:80:71:71:e3:96:85: e4:52:0d:65:5d:79:c4:03:f9:39:42:ee:0e:78:bb:24:8e:69: 83:ec:79:ae:f8:a5:bf:63:73:81:79:6f:65:8b:64:ac:8d:96: 2f:f2:30:78:b6:ae:47:61:31:71:9c:10:57:4a:66:ec:6f:a2: e4:64:e7:7d:1e:ab:31:43:d6:2c:88:d5:81:ad:28:5d:95:24: 81:d2:e8:b9:f0:67:98:0e:f7:95:f7:b7:3e:4c:88:aa:ba:29: 8c:72:bb:c3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtxXPK9D1dXl9XM1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YTcxNGYwZmQtMWYxNC00NDczLWFlNzQtZjlhMGNiNGJkZGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LVNgqaFl1fwVqGYQOh+SyRx14GnxOtM+0fS vjfvVxrwzL/1Q82bvurWYbZ5RVtQ+yf10ZRppjTZ1TwjK+1UofSspHrldnvu5m+x aSQVQqJeQhiL+lQp5f4Pdbk1ezCwq6oOeb463KsTXlTCMwAWa4jUhFYjRK3uSIE1 4IHQRUtKZA6QtDgib+zW7UqFx4vEuxuKpCOLuE1PYZeGszCOIaqtHFYWIBVaRvmN Exw9uM7XfeUIpaFh74j1JMpatlkmcSDmNTwqY2kOlqAg9gmMBAtW8u45Os/hV+yI UoaiMXL4Q7GXuJJgvf2oo00q0WxzYQzDlWBcs8VdctnvfbIOpQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFD/eHq2CJ+sknurmwjnKsISh9qNpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDg4ZDdhODctNWVjZC0z YjUwLTkzNjQtNjA2NzQ5ODE2MDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQM4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAUBNwHO/L2WmnbRb/cGrPBNB21JvpRo9lELY+BlyiXTwYoulce/LzCQ5J ZVyfAPacF4CE3F48RONcAAZLXAI3v05eMgwF5MOKkDKEP1wEhkjma/aKSy/FQTv8 pMWbpjzdD1sbnUjcp5H+3fyF55RYGg3ubWeqLKqyo8dP4UR3ep7h1QJc/WFv+Ow9 JXpYJPJgq2MmmiMBj0CwllFjgHFx45aF5FINZV15xAP5OULuDni7JI5pg+x5rvil v2NzgXlvZYtkrI2WL/IweLauR2ExcZwQV0pm7G+i5GTnfR6rMUPWLIjVga0oXZUk gdLoufBnmA73lfe3PkyIqropjHK7ww== -----END CERTIFICATE-----Generated at Fri Oct 10 17:54:45 2025 by rpki-client