$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5295be43-da7d-3253-8b1e-ad11e7eb36d4.roa File: 5295be43-da7d-3253-8b1e-ad11e7eb36d4.roa (raw, json) Hash identifier: FbO2P+/kDIzYaJantXG22ttcuypUv+Dm//mg673biVc= Subject key identifier: 44:38:EF:7F:07:1B:04:3A:DD:3D:B4:55:D1:D0:68:C3:A0:C0:20:D9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC0CA81FF3A9CC5611340 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5295be43-da7d-3253-8b1e-ad11e7eb36d4.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 64.119.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c0:ca:81:ff:3a:9c:c5:61:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=1c6b7c16-f1f8-45f1-b378-e78590a2affe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:02:f2:f8:2e:aa:c1:e9:00:bc:20:3f:84:f7: db:2e:86:9a:c3:cb:4f:d5:32:31:63:ef:da:b9:5a: 69:74:38:62:ab:8d:a8:15:10:fa:f2:b2:9e:90:84: ec:15:68:22:c9:25:e1:86:c1:db:10:53:1f:73:49: e0:fb:c0:71:6e:03:e2:f0:04:7b:55:8c:17:b5:61: 16:3c:97:f0:41:a5:e6:25:75:ec:ce:67:b4:62:56: 1a:49:c3:67:2e:fe:60:d9:b0:33:2f:7e:b6:73:0f: 21:51:a8:aa:a0:ba:e5:e1:90:00:4b:dc:92:38:8f: f4:6e:a3:4e:c9:5d:93:9c:b3:8c:4c:02:5d:f5:ae: 1a:5c:99:c9:47:e4:52:26:ab:1d:28:2d:d5:70:99: 53:ad:ba:d9:a9:c1:23:82:88:70:a7:4d:f9:9d:c9: 29:34:f7:6a:df:80:1b:6a:18:ef:fa:fe:ca:a4:98: f0:3c:b6:7f:5e:5c:51:99:fa:20:7b:0d:89:69:db: 49:c1:c7:07:f6:90:d6:cd:4c:30:92:52:bb:5c:5e: 44:24:2c:29:92:c3:a3:d3:a0:e5:8e:9a:eb:b7:1e: c6:f5:63:86:3c:ef:3b:6a:56:53:fa:11:ad:11:f9: 48:a7:b9:35:3a:7e:32:d0:a2:a1:b0:97:39:24:b5: 8b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:38:EF:7F:07:1B:04:3A:DD:3D:B4:55:D1:D0:68:C3:A0:C0:20:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5295be43-da7d-3253-8b1e-ad11e7eb36d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.119.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:6f:bb:bd:f0:18:bd:ff:b5:bc:2d:aa:e1:94:e4:a9:f8:be: 72:20:e7:bf:53:c2:ac:e3:a6:98:a6:51:c0:76:de:36:0a:ff: 8d:65:87:2f:09:d6:79:da:f3:30:c3:55:bf:5d:a6:78:11:47: e9:83:c9:23:28:f1:0e:51:bc:17:8b:ce:a0:12:5a:65:5a:28: 53:cf:7a:28:4a:dc:55:a5:2a:15:96:c3:6c:21:cf:98:4c:76: 72:e1:38:47:96:03:f3:6d:5e:ae:0e:e6:49:be:67:a1:3e:b4: d4:b3:20:1e:b9:ad:fc:24:dd:cc:99:dc:8a:a5:30:38:01:48: b8:9e:7d:bc:4f:3e:f6:34:a1:23:4a:b6:64:81:f9:ad:8b:7d: b6:c3:c4:77:ef:ae:20:da:d4:03:7b:de:9c:e9:ad:9d:25:0b: fa:fc:60:58:57:8f:36:26:20:3c:09:2a:04:d6:00:30:4a:b0: 1f:b7:28:1a:2a:89:a5:12:f1:8c:60:9c:5c:23:55:4e:12:23: d0:97:0d:36:6e:3a:d6:08:00:ac:d2:02:0e:b2:ac:eb:20:51: b1:b2:2e:47:f2:22:eb:fa:10:4f:e2:eb:68:40:8b:f9:94:8a: c8:af:4a:15:56:a8:ba:4b:be:a5:af:37:30:89:47:de:9a:2b: 96:20:69:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMDKgf86nMVhE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MWM2YjdjMTYtZjFmOC00NWYxLWIzNzgtZTc4NTkwYTJhZmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgLy+C6qwekAvCA/hPfbLoaaw8tP1TIxY+/a uVppdDhiq42oFRD68rKekITsFWgiySXhhsHbEFMfc0ng+8BxbgPi8AR7VYwXtWEW PJfwQaXmJXXszme0YlYaScNnLv5g2bAzL362cw8hUaiqoLrl4ZAAS9ySOI/0bqNO yV2TnLOMTAJd9a4aXJnJR+RSJqsdKC3VcJlTrbrZqcEjgohwp035nckpNPdq34Ab ahjv+v7KpJjwPLZ/XlxRmfogew2JadtJwccH9pDWzUwwklK7XF5EJCwpksOj06Dl jprrtx7G9WOGPO87alZT+hGtEflIp7k1On4y0KKhsJc5JLWLMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQ4738HGwQ63T20VdHQaMOgwCDZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTI5NWJlNDMtZGE3ZC0z MjUzLThiMWUtYWQxMWU3ZWIzNmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQHdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFvu73wGL3/tbwtquGU5Kn4vnIg579TwqzjppimUcB23jYK/41lhy8J 1nna8zDDVb9dpngRR+mDySMo8Q5RvBeLzqASWmVaKFPPeihK3FWlKhWWw2whz5hM dnLhOEeWA/NtXq4O5km+Z6E+tNSzIB65rfwk3cyZ3IqlMDgBSLiefbxPPvY0oSNK tmSB+a2LfbbDxHfvriDa1AN73pzprZ0lC/r8YFhXjzYmIDwJKgTWADBKsB+3KBoq iaUS8YxgnFwjVU4SI9CXDTZuOtYIAKzSAg6yrOsgUbGyLkfyIuv6EE/i62hAi/mU isivShVWqLpLvqWvNzCJR96aK5YgaaY= -----END CERTIFICATE-----Generated at Fri Oct 10 17:54:03 2025 by rpki-client