$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f9289d2-98ca-3cbf-8f59-e1964ea684c4.roa File: 4f9289d2-98ca-3cbf-8f59-e1964ea684c4.roa (raw, json) Hash identifier: o6b3DEOT/RaddCjkMVZS4SVaBHkIxotl/Agv6Ofasf0= Subject key identifier: 1A:23:9B:7B:78:35:B4:F1:E0:86:98:0A:02:6B:92:ED:6E:1A:BD:60 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2CA00A52C0B07EFD12D800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f9289d2-98ca-3cbf-8f59-e1964ea684c4.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 173.189.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:a0:0a:52:c0:b0:7e:fd:12:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=1413576d-b6c6-4188-b381-3b4e011ade31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d0:b1:27:50:4e:c6:9e:dd:00:19:24:36:34: c4:9f:71:a6:f2:e3:29:fd:a9:34:35:4b:77:f4:29: 0c:c7:61:63:6a:ea:bf:9b:26:b1:b5:18:91:1a:56: 18:38:81:ba:d0:19:61:c5:85:15:c8:2e:35:b8:70: 4a:a5:e6:ce:c0:bf:37:b2:87:cd:9b:96:79:29:0f: e3:01:54:e5:23:df:80:3b:28:13:a7:da:03:4b:4e: 72:a5:d7:7b:99:86:b6:19:d5:c3:65:f1:4b:c8:c6: 18:12:d7:1b:16:e9:a5:b1:57:af:14:83:4e:6a:d5: 1c:3c:03:e7:90:2e:09:7a:5b:78:36:9f:96:46:23: e4:5d:ef:6b:3b:22:80:83:9a:05:18:31:fe:7b:a2: f4:2b:2c:3e:ae:45:60:64:3f:78:ee:2b:83:fd:ed: 44:d6:db:9f:84:05:ec:e3:28:9d:77:37:62:cd:0d: 30:ec:fc:ee:a5:09:86:f4:5b:8b:3c:be:25:c2:d7: 4f:3f:f2:5c:0b:0b:f5:7b:d1:3e:61:12:f3:1a:10: 44:19:ea:47:24:54:83:ef:03:49:b4:19:fa:1c:35: c4:55:51:25:c4:76:df:b3:10:ab:ef:36:74:67:ac: 7e:94:8c:fc:d8:ba:60:04:2b:91:d0:2f:b6:bf:d4: fc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:23:9B:7B:78:35:B4:F1:E0:86:98:0A:02:6B:92:ED:6E:1A:BD:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f9289d2-98ca-3cbf-8f59-e1964ea684c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:cf:b1:a8:7c:ca:3a:68:f6:00:5d:5f:ee:43:65:ca:33:9f: 89:57:3b:76:30:f4:82:d5:8a:7c:ca:79:da:bd:b3:52:e0:fe: ce:69:35:38:c5:a5:4e:9b:f2:b7:13:55:e1:97:73:eb:25:9a: ca:4c:a6:54:c3:c0:c8:10:25:bb:6b:dc:f6:bc:a3:3a:50:06: de:93:c9:e9:e6:e3:db:9c:49:af:76:bd:4e:34:f0:a1:e0:b7: 25:ff:fe:ff:56:c5:a3:73:d7:8d:77:40:b6:44:39:7f:9b:99: 0a:ae:26:af:65:0c:f7:12:c9:a6:09:ee:bb:a9:2a:45:2c:08: 2d:dd:f7:2e:8e:a1:4c:7f:03:63:d9:bc:a5:f4:ae:6b:88:20: 66:85:16:48:ae:20:0d:aa:81:78:a3:12:2e:fc:67:fd:07:ca: 2e:22:02:d5:0f:e8:55:e8:7f:f7:38:5c:44:38:d7:1e:17:28: 22:ec:cb:c4:2c:73:7c:33:90:44:1e:29:ce:4d:cb:7f:aa:f9: cc:3d:c7:2c:94:56:0e:1a:0f:cb:4d:22:d3:3a:e9:3d:5b:5b: 45:c6:ca:e4:f3:7a:5d:42:4d:e6:ef:64:da:73:32:d1:19:33: 76:1e:ff:e5:ac:2b:08:cf:a6:aa:ae:a6:4a:7f:8c:a2:28:fb: 3d:b9:34:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLKAKUsCwfv0S2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MTQxMzU3NmQtYjZjNi00MTg4LWIzODEtM2I0ZTAxMWFkZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dCxJ1BOxp7dABkkNjTEn3Gm8uMp/ak0NUt3 9CkMx2Fjauq/myaxtRiRGlYYOIG60BlhxYUVyC41uHBKpebOwL83sofNm5Z5KQ/j AVTlI9+AOygTp9oDS05ypdd7mYa2GdXDZfFLyMYYEtcbFumlsVevFINOatUcPAPn kC4Jelt4Np+WRiPkXe9rOyKAg5oFGDH+e6L0Kyw+rkVgZD947iuD/e1E1tufhAXs 4yiddzdizQ0w7PzupQmG9FuLPL4lwtdPP/JcCwv1e9E+YRLzGhBEGepHJFSD7wNJ tBn6HDXEVVElxHbfsxCr7zZ0Z6x+lIz82LpgBCuR0C+2v9T8sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBojm3t4NbTx4IaYCgJrku1uGr1gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGY5Mjg5ZDItOThjYS0z Y2JmLThmNTktZTE5NjRlYTY4NGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvPsah8yjpo9gBdX+5DZcozn4lXO3Yw9ILVinzKedq9s1Lg/s5pNTjF pU6b8rcTVeGXc+slmspMplTDwMgQJbtr3Pa8ozpQBt6Tyenm49ucSa92vU408KHg tyX//v9WxaNz1413QLZEOX+bmQquJq9lDPcSyaYJ7rupKkUsCC3d9y6OoUx/A2PZ vKX0rmuIIGaFFkiuIA2qgXijEi78Z/0Hyi4iAtUP6FXof/c4XEQ41x4XKCLsy8Qs c3wzkEQeKc5Ny3+q+cw9xyyUVg4aD8tNItM66T1bW0XGyuTzel1CTebvZNpzMtEZ M3Ye/+WsKwjPpqqupkp/jKIo+z25NIg= -----END CERTIFICATE-----Generated at Fri Oct 10 22:10:56 2025 by rpki-client