$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dac3a66-2390-353e-a856-4725c0e824cd.roa File: 4dac3a66-2390-353e-a856-4725c0e824cd.roa (raw, json) Hash identifier: KT/4eWWtrt1Js1FjPGi358UL4ITic2xvAuApwNm3sb0= Subject key identifier: 42:59:12:46:90:FF:F0:8D:34:7B:65:8C:D2:06:D7:C0:B5:4C:E3:90 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2C9DD34A0AB213F6A5EA00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dac3a66-2390-353e-a856-4725c0e824cd.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 173.190.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:9d:d3:4a:0a:b2:13:f6:a5:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=a6cd91e4-4c22-467a-bfbd-523ee8d1b16a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6c:7d:bb:f7:1d:c0:b3:4b:5d:37:a9:77:99: a6:ca:83:da:bf:b0:66:78:e3:59:d5:ee:23:d3:1f: 9f:19:ad:49:41:49:15:d8:68:f6:11:60:4f:7c:20: 17:8a:bb:e4:a5:72:f9:ba:2f:f0:2c:62:43:82:6a: 19:c7:58:fb:92:fb:62:72:b5:71:b6:90:03:ff:73: b9:a2:74:28:0d:c9:3f:f1:c7:71:1e:d1:3a:71:6f: fb:fc:ad:31:33:c8:0a:31:9f:8c:12:07:e7:20:81: e8:39:d0:ae:84:1b:fa:d5:32:df:05:97:76:7d:b4: 92:a5:2c:eb:3f:95:82:b2:92:b0:2f:cc:d4:7a:11: 8a:c7:dc:db:16:01:9b:1c:39:ac:fd:6d:94:c7:1a: fe:87:91:40:e7:56:7d:81:63:57:a3:5f:62:6c:87: 65:36:d3:b2:47:fa:a6:d5:4c:df:11:dc:1f:53:4d: 1e:49:61:45:9a:d5:89:a0:2b:17:fd:fc:73:90:37: 13:25:dc:05:86:75:87:9c:d6:2e:0b:95:cd:d5:9a: 4d:a6:13:82:88:7f:ca:41:67:af:b3:91:b0:3b:6a: 98:24:c8:5e:c8:48:3f:18:40:65:81:2c:8a:56:c5: ea:7b:01:06:0d:3c:04:34:5a:6f:6b:f2:df:4d:1c: b5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:59:12:46:90:FF:F0:8D:34:7B:65:8C:D2:06:D7:C0:B5:4C:E3:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dac3a66-2390-353e-a856-4725c0e824cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:fa:5a:3c:19:65:02:e1:d4:51:51:77:6d:a6:5f:0d:59:16: 4d:d0:3a:d2:2f:47:43:1e:df:89:da:89:9b:7f:54:1a:65:8e: ef:29:c8:26:7f:56:4c:44:d8:8e:c8:46:48:86:f7:44:4f:b8: 38:82:a6:50:30:75:97:0f:7d:82:8c:34:93:5e:ce:0a:1c:13: 92:df:88:03:0a:bd:37:1e:c8:53:98:36:f6:a1:b5:c8:ce:f0: 3f:66:b6:d1:6d:53:fa:c6:5e:d9:31:c7:41:98:01:20:68:32: af:05:02:d0:e2:e5:5d:f7:9d:11:26:c2:23:9d:f5:48:6a:0e: 82:b6:77:e8:d6:6e:16:db:b2:a3:a1:9e:3e:16:89:7d:34:c8: ad:1b:70:69:c2:ec:99:46:cf:af:d2:a2:a6:c5:c7:c0:bb:90: be:45:5e:e5:f1:b5:47:63:d9:72:e5:d7:c9:16:59:b2:33:b3: 67:f7:33:82:16:ec:81:3a:6d:57:27:0c:b2:17:b9:56:a1:4c: 1f:7c:7c:af:97:8f:66:21:26:04:b0:f8:92:61:09:f4:da:08: d9:bb:e3:7b:a1:81:a4:1c:19:4c:47:93:fe:b5:a2:ef:ca:b0: e3:35:7b:9f:65:5a:ed:c8:e5:e9:2b:e3:b6:60:52:6e:86:6c: 32:2f:11:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLJ3TSgqyE/al6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YTZjZDkxZTQtNGMyMi00NjdhLWJmYmQtNTIzZWU4ZDFiMTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmx9u/cdwLNLXTepd5mmyoPav7BmeONZ1e4j 0x+fGa1JQUkV2Gj2EWBPfCAXirvkpXL5ui/wLGJDgmoZx1j7kvticrVxtpAD/3O5 onQoDck/8cdxHtE6cW/7/K0xM8gKMZ+MEgfnIIHoOdCuhBv61TLfBZd2fbSSpSzr P5WCspKwL8zUehGKx9zbFgGbHDms/W2Uxxr+h5FA51Z9gWNXo19ibIdlNtOyR/qm 1UzfEdwfU00eSWFFmtWJoCsX/fxzkDcTJdwFhnWHnNYuC5XN1ZpNphOCiH/KQWev s5GwO2qYJMheyEg/GEBlgSyKVsXqewEGDTwENFpva/LfTRy1OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJZEkaQ//CNNHtljNIG18C1TOOQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGRhYzNhNjYtMjM5MC0z NTNlLWE4NTYtNDcyNWMwZTgyNGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErb6gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABb6WjwZZQLh1FFRd22mXw1ZFk3QOtIvR0Me34naiZt/VBplju8pyCZ/ VkxE2I7IRkiG90RPuDiCplAwdZcPfYKMNJNezgocE5LfiAMKvTceyFOYNvahtcjO 8D9mttFtU/rGXtkxx0GYASBoMq8FAtDi5V33nREmwiOd9UhqDoK2d+jWbhbbsqOh nj4WiX00yK0bcGnC7JlGz6/SoqbFx8C7kL5FXuXxtUdj2XLl18kWWbIzs2f3M4IW 7IE6bVcnDLIXuVahTB98fK+Xj2YhJgSw+JJhCfTaCNm743uhgaQcGUxHk/61ou/K sOM1e59lWu3I5ekr47ZgUm6GbDIvEVY= -----END CERTIFICATE-----Generated at Fri Oct 10 22:07:44 2025 by rpki-client