$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5313c1c7-7762-3008-a43b-d619f2ea123f.roa File: 5313c1c7-7762-3008-a43b-d619f2ea123f.roa (raw, json) Hash identifier: H92vysBRdqR8ZMIBe2a648u0mxCXnWBLPpP0S7WfLrI= Subject key identifier: 61:C3:84:61:F8:3B:93:5D:4D:EE:86:4F:B3:D4:9A:9A:51:3C:85:EE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D01F7D476786DA0E71700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5313c1c7-7762-3008-a43b-d619f2ea123f.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 11632 IP address blocks: 216.172.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:01:f7:d4:76:78:6d:a0:e7:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=ef197fb4-c952-4104-a2d0-36fde4b44d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4e:19:0e:f6:c6:33:0c:0a:49:98:b9:5c:ad: b5:9d:c5:dd:5f:3d:a6:ba:a3:54:06:5c:21:bd:b7: f8:68:41:fd:62:5b:2c:54:e1:bd:8f:71:95:7f:2c: ba:f6:8c:60:02:6a:8e:fc:1f:fb:87:59:60:02:e3: 6b:98:6a:82:4b:c2:0f:f0:17:b0:c2:cc:d2:df:fe: e9:d7:19:7c:be:fb:1b:e3:ed:86:7e:3a:22:e1:c9: 5a:f2:f1:6a:62:e8:86:64:f6:8c:ba:16:79:8b:c5: 28:a8:3d:c3:c0:ff:cf:d4:be:84:f3:f8:0c:7d:5f: 4d:65:0c:48:7a:87:2d:13:59:9c:d6:c7:5b:e1:06: 4a:97:da:2d:6e:d1:2c:e9:24:11:09:ab:c6:20:c8: 71:1a:74:8e:aa:31:5f:3b:bf:bc:1c:f9:98:aa:6a: 49:58:11:fc:3c:c1:8e:c1:0d:25:42:38:2e:55:0d: 8c:3d:36:e3:f0:af:54:8a:bd:31:d1:68:cd:a0:c2: c5:a2:2b:c0:1e:42:21:d4:04:65:39:0f:4b:de:9c: 03:11:55:5f:e1:5e:18:23:3c:e3:46:73:2a:1e:f8: 35:ca:ec:cd:bc:f4:cd:50:cd:94:75:74:69:7f:00: 2f:af:ca:a0:5f:4d:ac:6f:10:61:18:c0:b0:d6:e3: af:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C3:84:61:F8:3B:93:5D:4D:EE:86:4F:B3:D4:9A:9A:51:3C:85:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5313c1c7-7762-3008-a43b-d619f2ea123f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.172.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:76:13:3b:bd:9d:e8:36:fc:b1:5d:fe:aa:3b:01:ce:51:ea: 9c:5f:f1:f3:7f:8c:34:fc:fb:85:84:ee:fa:57:81:a1:e2:8e: 16:e3:4d:f3:06:12:41:e9:58:bc:1f:1a:f5:d8:5a:22:4e:9d: 3d:2c:91:ed:f2:7b:03:ae:ec:a8:67:bd:2b:cf:9c:25:ba:a6: 85:57:cb:41:4c:1e:71:1d:18:7b:00:49:ca:46:1a:f1:3d:a8: ce:4c:ad:9f:1e:43:ca:b5:04:f4:fc:84:f4:70:f1:ca:ee:cb: e7:f4:6a:24:4f:3d:8f:6f:34:b4:cb:3e:4f:ab:b8:6c:2d:dc: 0f:75:7e:53:66:61:94:52:6a:48:28:56:94:d7:4b:25:80:6a: ab:ab:3f:61:66:74:84:17:83:86:cb:86:92:09:ba:68:a1:20: 7d:4f:33:e7:a8:c2:65:59:b9:1f:68:e9:50:d8:29:ad:9a:b1: fb:33:2d:b1:5d:f6:4e:bd:62:f3:ca:a3:76:e3:f5:1f:8f:1b: 34:aa:c3:eb:a1:de:e6:b5:dd:55:18:84:ef:53:3b:cf:54:e2: 20:64:16:d7:d0:3a:3b:64:c9:56:1c:db:84:58:50:fd:91:2e: a9:20:fc:d5:41:c6:58:86:f1:44:3a:ed:1c:2b:94:f1:1a:77: a0:9e:b4:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQH31HZ4baDnFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZWYxOTdmYjQtYzk1Mi00MTA0LWEyZDAtMzZmZGU0YjQ0ZDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU4ZDvbGMwwKSZi5XK21ncXdXz2muqNUBlwh vbf4aEH9YlssVOG9j3GVfyy69oxgAmqO/B/7h1lgAuNrmGqCS8IP8BewwszS3/7p 1xl8vvsb4+2Gfjoi4cla8vFqYuiGZPaMuhZ5i8UoqD3DwP/P1L6E8/gMfV9NZQxI eoctE1mc1sdb4QZKl9otbtEs6SQRCavGIMhxGnSOqjFfO7+8HPmYqmpJWBH8PMGO wQ0lQjguVQ2MPTbj8K9Uir0x0WjNoMLFoivAHkIh1ARlOQ9L3pwDEVVf4V4YIzzj RnMqHvg1yuzNvPTNUM2UdXRpfwAvr8qgX02sbxBhGMCw1uOvwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHDhGH4O5NdTe6GT7PUmppRPIXuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTMxM2MxYzctNzc2Mi0z MDA4LWE0M2ItZDYxOWYyZWExMjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KwdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAt2Ezu9neg2/LFd/qo7Ac5R6pxf8fN/jDT8+4WE7vpXgaHijhbjTfMG EkHpWLwfGvXYWiJOnT0ske3yewOu7KhnvSvPnCW6poVXy0FMHnEdGHsAScpGGvE9 qM5MrZ8eQ8q1BPT8hPRw8cruy+f0aiRPPY9vNLTLPk+ruGwt3A91flNmYZRSakgo VpTXSyWAaqurP2FmdIQXg4bLhpIJumihIH1PM+eowmVZuR9o6VDYKa2asfszLbFd 9k69YvPKo3bj9R+PGzSqw+uh3ua13VUYhO9TO89U4iBkFtfQOjtkyVYc24RYUP2R Lqkg/NVBxliG8UQ67RwrlPEad6CetGw= -----END CERTIFICATE-----Generated at Fri Oct 10 22:07:46 2025 by rpki-client