$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d2b22a6-bd49-3c71-a630-4cd3ecafa3ae.roa File: 5d2b22a6-bd49-3c71-a630-4cd3ecafa3ae.roa (raw, json) Hash identifier: HwSxBonPrND2qeXI9Fivl/2noNkWcfaZupwX06VV3Tk= Subject key identifier: A1:B7:C5:2D:D7:85:85:A2:F6:DE:B9:2D:2F:C2:DE:29:70:28:BD:1C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3F1C69873CD426E55CDD3500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d2b22a6-bd49-3c71-a630-4cd3ecafa3ae.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 174.131.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:69:87:3c:d4:26:e5:5c:dd:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=b5c49d78-9469-4a8b-bc05-ef7157f12b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:68:3e:e0:3d:c8:38:f1:5c:39:ec:90:db:e1: e2:9c:3f:71:b7:03:d8:cd:ae:1a:4c:10:7c:2a:2b: 12:08:00:d3:57:42:f0:c4:ee:05:ee:20:dc:74:4c: 4b:a4:d7:55:2f:82:1c:e5:0a:0c:51:87:6a:52:5e: d5:ce:b0:91:d8:5a:2b:be:c6:d8:b9:8f:f3:a8:21: 0a:78:62:1c:14:00:82:27:1e:e8:15:c2:a8:f0:99: 3c:da:54:9f:33:5e:d6:2a:e1:5f:0f:98:30:a2:e8: 27:37:92:53:ac:23:d0:a7:77:d6:9f:32:54:7a:3d: a2:8c:6b:db:4f:df:40:b5:f8:21:ee:bd:12:2a:14: 11:e8:c4:98:42:6e:b2:8f:45:33:a9:6d:c9:f2:10: f8:20:62:0a:be:f7:da:18:81:79:86:63:02:59:23: fb:22:17:a2:b3:89:ad:a8:c7:d7:96:3f:9d:2d:a0: 57:07:74:03:74:6d:4c:03:95:1f:cc:0a:b2:6d:90: b6:ea:fa:dc:89:d0:d5:84:de:30:2f:eb:5b:12:a5: a9:48:d7:52:f3:01:9e:03:92:72:95:b2:63:5b:85: 83:86:7e:d1:23:e9:8c:a4:a7:1d:4c:36:e1:f6:14: 04:f3:0f:c4:f9:3f:fa:8a:92:cd:4e:4b:a4:2d:cb: 9c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B7:C5:2D:D7:85:85:A2:F6:DE:B9:2D:2F:C2:DE:29:70:28:BD:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d2b22a6-bd49-3c71-a630-4cd3ecafa3ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d7:27:da:31:74:e9:68:e5:10:9f:56:34:f6:df:ba:32:53: a7:93:b8:ed:60:d1:92:06:47:0a:7d:d6:14:5e:e4:5a:90:99: 64:d1:0f:e6:a0:15:92:39:eb:9c:00:92:d5:51:f7:3d:34:c4: 3c:4c:dd:b1:ea:36:e7:5f:97:db:47:1c:38:dd:9a:b0:0d:c6: de:13:b7:6f:e8:1f:a7:d9:05:30:85:14:2a:87:0e:f5:83:0e: 28:80:af:c2:84:c9:40:5e:40:52:66:08:b1:e1:0f:b5:cf:d3: e3:1e:4b:08:54:89:cd:ed:f5:16:e0:09:f0:86:3d:32:49:4e: 14:f9:36:b1:99:62:90:14:4f:6a:61:b4:3d:ae:d1:4e:0e:7b: dd:be:c9:a5:75:40:43:dd:3a:22:78:8c:6e:2e:88:c9:12:ec: 65:f3:91:8d:40:7d:8b:7a:8b:48:ad:b0:58:6b:ac:48:4b:d8: 16:9a:32:69:07:05:13:db:d9:ff:28:cd:00:f0:48:6f:ae:c3: 48:69:a0:ba:68:0c:8a:b6:57:dc:ba:0b:1d:2f:3b:24:49:2e: 7e:f9:f9:e4:11:ca:ac:78:12:ed:b6:10:9b:82:ac:d2:53:f7: ec:c2:73:09:c7:52:5b:ea:82:81:44:ce:63:51:40:49:3c:b0: ab:be:bb:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HGmHPNQm5VzdNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk YjVjNDlkNzgtOTQ2OS00YThiLWJjMDUtZWY3MTU3ZjEyYjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGg+4D3IOPFcOeyQ2+HinD9xtwPYza4aTBB8 KisSCADTV0LwxO4F7iDcdExLpNdVL4Ic5QoMUYdqUl7VzrCR2ForvsbYuY/zqCEK eGIcFACCJx7oFcKo8Jk82lSfM17WKuFfD5gwougnN5JTrCPQp3fWnzJUej2ijGvb T99Atfgh7r0SKhQR6MSYQm6yj0UzqW3J8hD4IGIKvvfaGIF5hmMCWSP7Iheis4mt qMfXlj+dLaBXB3QDdG1MA5UfzAqybZC26vrcidDVhN4wL+tbEqWpSNdS8wGeA5Jy lbJjW4WDhn7RI+mMpKcdTDbh9hQE8w/E+T/6ipLNTkukLcucRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKG3xS3XhYWi9t65LS/C3ilwKL0cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWQyYjIyYTYtYmQ0OS0z YzcxLWE2MzAtNGNkM2VjYWZhM2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBroP6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnXJ9oxdOlo5RCfVjT237oyU6eTuO1g0ZIGRwp91hRe5FqQmWTRD+ag FZI565wAktVR9z00xDxM3bHqNudfl9tHHDjdmrANxt4Tt2/oH6fZBTCFFCqHDvWD DiiAr8KEyUBeQFJmCLHhD7XP0+MeSwhUic3t9RbgCfCGPTJJThT5NrGZYpAUT2ph tD2u0U4Oe92+yaV1QEPdOiJ4jG4uiMkS7GXzkY1AfYt6i0itsFhrrEhL2BaaMmkH BRPb2f8ozQDwSG+uw0hpoLpoDIq2V9y6Cx0vOyRJLn75+eQRyqx4Eu22EJuCrNJT 9+zCcwnHUlvqgoFEzmNRQEk8sKu+u9w= -----END CERTIFICATE-----Generated at Fri Oct 10 20:06:27 2025 by rpki-client