$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c27ae8a-1fd5-388e-a051-f697661a310c.roa File: 4c27ae8a-1fd5-388e-a051-f697661a310c.roa (raw, json) Hash identifier: XSeEwuq28APsGs2IYQBO9erbk4cDiCTSrmTs6oxSOSM= Subject key identifier: 10:C9:45:D6:8A:EA:B9:F3:BF:21:25:6E:A8:DE:FB:4A:7B:F4:DA:FE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF9E105916CF3C322D480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c27ae8a-1fd5-388e-a051-f697661a310c.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 174.131.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f9:e1:05:91:6c:f3:c3:22:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=32bf3462-8cd2-4fbf-9632-9b9386bbbea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9a:85:36:33:35:be:5c:83:40:94:2f:ed:8b: 90:65:db:2b:20:47:07:62:7a:2f:b7:fd:a4:d9:f6: 1b:b2:75:5b:f3:c0:de:35:af:ae:0c:bd:dd:d4:27: 49:2b:7c:9a:2b:1c:4a:18:39:e2:3c:22:e7:95:dd: 3e:84:9e:db:ae:3b:9a:1b:42:6a:e1:5a:6c:64:d8: 46:3c:83:7e:37:d7:00:2a:23:7a:e8:99:59:e7:55: bf:26:93:94:94:0c:e8:00:7c:01:9e:a2:fb:fa:84: 6f:70:6c:8b:06:d6:ba:8a:41:1b:48:f4:5a:85:1e: 90:41:11:28:3c:53:14:af:eb:42:82:25:c4:ad:40: 0b:c4:0a:36:a2:af:46:3d:d7:2a:fe:e5:b2:02:bc: 0d:24:75:4c:fc:f5:b8:f8:6b:07:64:b4:18:10:6e: 8f:01:ac:a9:6d:a7:8e:5a:6a:e3:04:73:e1:5e:aa: a9:3f:d4:3e:b2:ec:ca:2e:36:4c:c1:d4:2f:09:ee: 00:02:13:0a:fb:d4:f3:96:d3:51:21:4b:8b:6a:0c: 8f:bf:20:ac:11:1f:af:da:de:10:72:1e:c7:b2:49: 83:d4:c3:52:4d:7a:21:32:78:65:d6:7c:a5:c3:87: 65:fa:ed:7b:92:61:7c:30:77:75:70:97:08:80:87: 80:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C9:45:D6:8A:EA:B9:F3:BF:21:25:6E:A8:DE:FB:4A:7B:F4:DA:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c27ae8a-1fd5-388e-a051-f697661a310c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:c5:5d:a2:45:91:dc:fa:04:72:0d:5c:e4:ae:26:d6:50:15: e6:d4:11:e6:95:0e:2b:cc:84:b3:40:71:fa:c2:a0:9c:29:e8: c1:e1:f6:41:4b:8c:83:7c:7c:78:90:9f:50:5b:b7:e8:61:fa: 7f:12:ee:fd:c7:86:8b:27:af:8b:45:ce:c9:2a:cd:e5:8b:6d: 6d:2b:d6:0d:15:99:58:13:ae:26:9c:a6:9f:43:3b:31:4f:fd: 2e:a5:c3:3f:39:15:6c:18:39:11:7a:e6:63:65:a0:8f:36:ab: 88:c3:5c:0f:f1:ce:2b:72:6b:91:eb:14:6f:b7:f8:2a:38:33: e0:71:f1:11:20:3a:37:9a:4d:44:51:17:69:c5:98:22:05:a9: 31:f6:b0:d8:3b:2c:ec:27:f4:e3:f7:a9:da:b8:3e:c2:e3:a9: c1:83:db:b8:0b:88:2e:c1:c6:2d:57:45:80:88:29:a9:8b:cb: dd:74:c6:dc:dd:79:84:79:87:67:0e:35:be:54:98:00:bc:c6: 40:97:81:57:b4:45:8e:ce:3f:86:3d:a2:2d:86:17:26:66:fe: 14:10:e3:48:4c:11:6a:3f:60:cf:1a:b3:67:45:81:96:54:ce: 47:c4:a3:b3:f7:8a:6d:de:43:a6:45:72:36:1a:b9:a9:1d:f4: 58:a5:98:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPnhBZFs88Mi1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MzJiZjM0NjItOGNkMi00ZmJmLTk2MzItOWI5Mzg2YmJiZWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5qFNjM1vlyDQJQv7YuQZdsrIEcHYnovt/2k 2fYbsnVb88DeNa+uDL3d1CdJK3yaKxxKGDniPCLnld0+hJ7brjuaG0Jq4VpsZNhG PIN+N9cAKiN66JlZ51W/JpOUlAzoAHwBnqL7+oRvcGyLBta6ikEbSPRahR6QQREo PFMUr+tCgiXErUALxAo2oq9GPdcq/uWyArwNJHVM/PW4+GsHZLQYEG6PAaypbaeO WmrjBHPhXqqpP9Q+suzKLjZMwdQvCe4AAhMK+9TzltNRIUuLagyPvyCsER+v2t4Q ch7HskmD1MNSTXohMnhl1nylw4dl+u17kmF8MHd1cJcIgIeAawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDJRdaK6rnzvyElbqje+0p79Nr+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGMyN2FlOGEtMWZkNS0z ODhlLWEwNTEtZjY5NzY2MWEzMTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCroPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELFXaJFkdz6BHINXOSuJtZQFebUEeaVDivMhLNAcfrCoJwp6MHh9kFL jIN8fHiQn1Bbt+hh+n8S7v3Hhosnr4tFzskqzeWLbW0r1g0VmVgTriacpp9DOzFP /S6lwz85FWwYORF65mNloI82q4jDXA/xzitya5HrFG+3+Co4M+Bx8REgOjeaTURR F2nFmCIFqTH2sNg7LOwn9OP3qdq4PsLjqcGD27gLiC7Bxi1XRYCIKamLy910xtzd eYR5h2cONb5UmAC8xkCXgVe0RY7OP4Y9oi2GFyZm/hQQ40hMEWo/YM8as2dFgZZU zkfEo7P3im3eQ6ZFcjYauakd9FilmBU= -----END CERTIFICATE-----Generated at Fri Oct 10 17:51:37 2025 by rpki-client