$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5aa60e94-2eda-3416-b925-e6b36e93be4e.roa File: 5aa60e94-2eda-3416-b925-e6b36e93be4e.roa (raw, json) Hash identifier: e5VSEroH4ptzQw20/lNk10RAb+g6X7kYY/Ak/CyuVuc= Subject key identifier: AB:CF:C8:FF:A0:D1:D4:0A:28:2B:A9:FF:48:B5:AE:83:F3:2C:BE:81 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CEFC02974AFA70E237380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5aa60e94-2eda-3416-b925-e6b36e93be4e.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 14 IP address blocks: 209.2.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ef:c0:29:74:af:a7:0e:23:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=7b83566b-a237-4eb4-9494-d2c62f440537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b5:6e:f8:f2:5f:e4:e8:85:6d:4b:83:38:ab: b6:b8:65:22:b8:17:8d:57:05:93:30:34:71:bf:49: c3:fd:5b:12:a2:81:76:04:aa:f2:0c:f9:48:62:dc: 88:e4:6b:33:88:22:28:2a:55:78:3c:86:39:c4:42: 12:76:5c:98:d7:f5:f9:f0:c6:ae:2f:c4:12:85:9d: 8f:d3:25:b9:b0:36:1c:ad:3b:fd:9f:2f:50:43:e4: ab:4d:cc:ec:e2:46:23:ef:83:65:c7:27:33:c7:33: e2:06:c3:09:14:12:b5:2e:1e:0e:ec:ed:94:49:57: 36:19:06:99:ec:d0:87:00:b2:4a:4b:79:ca:10:db: 39:6d:b2:0f:2a:c8:68:c4:81:d0:ee:c7:63:06:34: 39:85:24:27:5a:75:1b:44:ff:1b:7d:a5:bc:76:27: 97:aa:14:d7:19:f8:ba:19:d9:60:4e:9b:ba:89:0e: dd:97:fd:78:15:6d:87:cd:63:08:a9:b9:64:a6:41: b6:b4:80:16:59:fb:17:87:91:85:b7:66:e9:c5:04: 6f:67:16:31:2e:44:98:f2:50:40:47:64:ac:3c:f1: d0:0c:4f:21:2e:53:4b:ea:f8:e7:1a:c2:ac:d2:71: 32:fb:ec:11:ca:da:11:47:6f:a5:b8:72:08:a4:c4: 0c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:CF:C8:FF:A0:D1:D4:0A:28:2B:A9:FF:48:B5:AE:83:F3:2C:BE:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5aa60e94-2eda-3416-b925-e6b36e93be4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:10:ad:1e:da:91:83:b7:e5:ba:d9:f8:ca:68:21:d3:06:d2: de:d3:2d:6c:6b:e7:fa:e8:30:24:c9:2a:fe:f0:99:f2:8e:10: e6:0c:7a:40:da:ff:fb:a6:04:98:3e:43:00:dd:52:7b:f9:76: 47:04:fa:8b:a3:55:26:6f:56:60:dc:31:0e:cb:76:65:a6:7f: ee:00:ec:9e:67:92:dd:ea:bc:2f:4c:ca:db:77:24:7d:22:09: 0f:a0:ea:98:2e:8b:62:ac:c4:95:c3:d7:52:77:72:2f:50:12: 69:bf:30:07:2e:ec:ac:74:f1:ae:2a:e3:e4:6b:d6:fd:33:15: fd:f4:57:92:de:d6:18:02:aa:89:85:b1:c8:6a:d2:f1:8b:52: 08:5b:f3:6e:f7:f7:12:13:81:b1:71:da:2d:36:68:f2:15:08: be:69:0e:14:f0:f8:b5:4b:44:13:47:1f:6e:04:7e:0c:73:0b: 93:7c:a9:a6:ef:d4:3e:de:a9:bb:82:c8:59:01:dd:a5:be:20: db:b7:92:da:f1:7e:04:a8:da:08:80:23:39:30:6b:48:e5:6c: 57:17:26:c8:f7:9d:6e:ac:98:11:f8:41:24:88:86:07:f9:a6: 8b:fd:07:a9:a3:2a:24:1c:61:9d:b9:76:22:fb:4b:23:a6:7b: 54:3a:68:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXO/AKXSvpw4jc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk N2I4MzU2NmItYTIzNy00ZWI0LTk0OTQtZDJjNjJmNDQwNTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbVu+PJf5OiFbUuDOKu2uGUiuBeNVwWTMDRx v0nD/VsSooF2BKryDPlIYtyI5GsziCIoKlV4PIY5xEISdlyY1/X58MauL8QShZ2P 0yW5sDYcrTv9ny9QQ+SrTczs4kYj74NlxyczxzPiBsMJFBK1Lh4O7O2USVc2GQaZ 7NCHALJKS3nKENs5bbIPKshoxIHQ7sdjBjQ5hSQnWnUbRP8bfaW8dieXqhTXGfi6 GdlgTpu6iQ7dl/14FW2HzWMIqblkpkG2tIAWWfsXh5GFt2bpxQRvZxYxLkSY8lBA R2SsPPHQDE8hLlNL6vjnGsKs0nEy++wRytoRR2+luHIIpMQMPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvPyP+g0dQKKCup/0i1roPzLL6BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWFhNjBlOTQtMmVkYS0z NDE2LWI5MjUtZTZiMzZlOTNiZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0QLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwQrR7akYO35brZ+MpoIdMG0t7TLWxr5/roMCTJKv7wmfKOEOYMekDa //umBJg+QwDdUnv5dkcE+oujVSZvVmDcMQ7LdmWmf+4A7J5nkt3qvC9Mytt3JH0i CQ+g6pgui2KsxJXD11J3ci9QEmm/MAcu7Kx08a4q4+Rr1v0zFf30V5Le1hgCqomF schq0vGLUghb82739xITgbFx2i02aPIVCL5pDhTw+LVLRBNHH24EfgxzC5N8qabv 1D7eqbuCyFkB3aW+INu3ktrxfgSo2giAIzkwa0jlbFcXJsj3nW6smBH4QSSIhgf5 pov9B6mjKiQcYZ25diL7SyOme1Q6aC8= -----END CERTIFICATE-----Generated at Fri Oct 10 22:06:19 2025 by rpki-client