$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/516cc248-81bd-33c0-bf40-213c6b40e73b.roa File: 516cc248-81bd-33c0-bf40-213c6b40e73b.roa (raw, json) Hash identifier: MF81u3gx0eZePOPJyQtUL6oZ5b6A6bIiNUA+thXs2Pc= Subject key identifier: 0B:F1:4A:6A:BE:B1:94:10:08:16:7D:91:CC:32:30:0D:34:97:54:E3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCB32ED1316031ED00A20 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/516cc248-81bd-33c0-bf40-213c6b40e73b.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 216.224.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:cb:32:ed:13:16:03:1e:d0:0a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=bc58a25d-5776-4e86-8d44-9889a594a539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e4:15:24:3c:1d:6d:10:5f:ca:7e:19:42:1a: 78:29:68:ea:85:67:85:d9:17:e8:30:2e:53:64:43: 39:cc:ba:28:11:23:b0:2e:e6:b8:5d:33:af:e2:eb: 56:5b:6f:90:e8:ed:72:46:1c:2e:fd:8a:c5:52:7b: 99:86:5c:e9:e5:06:23:80:4e:42:33:21:ac:39:4f: 20:27:90:7f:3b:e6:50:5f:8e:70:65:25:63:71:77: 5f:48:47:98:20:6b:20:1e:ab:bc:0c:82:ad:f5:b7: b3:6c:51:4a:b3:cd:4e:87:89:12:54:72:6c:1d:86: b9:ca:22:09:c0:aa:20:d8:01:83:9e:16:ed:fe:3b: d2:1c:7d:6b:4c:dd:ff:54:29:94:e5:cc:8a:22:c1: 4f:6f:d9:50:4d:31:31:8d:c8:f1:22:8b:a7:19:d8: 15:9d:22:12:15:ce:44:21:7e:d0:8f:36:98:e7:9d: bc:ee:f1:67:a5:73:a5:7f:4d:0e:da:ab:ef:c5:57: de:fc:79:41:f9:0a:1f:82:9f:ef:e4:41:68:d3:3b: 3a:b0:28:d1:be:b0:22:3f:ae:57:ca:c1:32:ef:dc: ba:be:53:85:cd:5f:4f:a4:64:f0:b7:33:27:ba:34: eb:28:ad:6b:ba:20:dd:6f:5e:63:55:88:dc:a4:f1: 4a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F1:4A:6A:BE:B1:94:10:08:16:7D:91:CC:32:30:0D:34:97:54:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/516cc248-81bd-33c0-bf40-213c6b40e73b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.224.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:fd:cc:31:5e:1f:92:ec:d6:73:9b:c5:de:89:cc:63:78:4d: c0:09:b4:f2:ae:fe:3c:a0:3d:d4:99:3a:53:fc:3a:f1:9d:9e: cb:37:cc:f4:49:31:25:8f:8e:61:1c:84:57:d0:5e:43:b9:e1: 75:1f:34:dd:8f:80:4b:17:e5:78:95:2f:17:17:ec:ce:4a:e4: c7:44:a0:56:f7:46:9c:19:2f:97:fc:09:b2:e3:e1:49:62:69: da:e5:50:f1:f5:85:7b:d4:13:bf:dd:7d:57:84:5d:ce:9b:79: e4:b0:05:38:ae:30:3d:f6:c3:54:ae:f9:fc:32:98:05:6a:98: 94:6d:5e:67:19:4b:5c:66:11:b5:06:93:bf:32:b8:c3:65:be: 74:57:31:1a:4d:b6:a2:31:ee:f3:da:81:59:6d:ac:49:23:c8: dc:90:7f:13:59:42:bf:04:60:c1:b6:3d:56:1b:ad:81:2b:4f: f3:36:6b:8e:6f:e4:11:e5:43:b0:48:39:72:55:12:83:41:b9: f8:5f:d3:21:70:70:4a:a9:b8:f9:74:23:c9:2f:fe:35:41:40: fa:27:7c:f3:ca:b6:20:71:3d:ca:28:b2:6e:35:7e:89:11:a4: 2f:ff:ef:58:01:78:e0:a8:8e:d0:4a:e4:66:0b:95:77:09:dd: ad:40:20:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMsy7RMWAx7QCiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YmM1OGEyNWQtNTc3Ni00ZTg2LThkNDQtOTg4OWE1OTRhNTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOQVJDwdbRBfyn4ZQhp4KWjqhWeF2RfoMC5T ZEM5zLooESOwLua4XTOv4utWW2+Q6O1yRhwu/YrFUnuZhlzp5QYjgE5CMyGsOU8g J5B/O+ZQX45wZSVjcXdfSEeYIGsgHqu8DIKt9bezbFFKs81Oh4kSVHJsHYa5yiIJ wKog2AGDnhbt/jvSHH1rTN3/VCmU5cyKIsFPb9lQTTExjcjxIounGdgVnSISFc5E IX7QjzaY55287vFnpXOlf00O2qvvxVfe/HlB+Qofgp/v5EFo0zs6sCjRvrAiP65X ysEy79y6vlOFzV9PpGTwtzMnujTrKK1ruiDdb15jVYjcpPFKQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvxSmq+sZQQCBZ9kcwyMA00l1TjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTE2Y2MyNDgtODFiZC0z M2MwLWJmNDAtMjEzYzZiNDBlNzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2OCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADD9zDFeH5Ls1nObxd6JzGN4TcAJtPKu/jygPdSZOlP8OvGdnss3zPRJ MSWPjmEchFfQXkO54XUfNN2PgEsX5XiVLxcX7M5K5MdEoFb3RpwZL5f8CbLj4Uli adrlUPH1hXvUE7/dfVeEXc6beeSwBTiuMD32w1Su+fwymAVqmJRtXmcZS1xmEbUG k78yuMNlvnRXMRpNtqIx7vPagVltrEkjyNyQfxNZQr8EYMG2PVYbrYErT/M2a45v 5BHlQ7BIOXJVEoNBufhf0yFwcEqpuPl0I8kv/jVBQPonfPPKtiBxPcoosm41fokR pC//71gBeOCojtBK5GYLlXcJ3a1AILM= -----END CERTIFICATE-----Generated at Fri Oct 10 17:50:43 2025 by rpki-client