$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/641a8e03-d30f-3487-944d-48d9a3bf5ff0.roa File: 641a8e03-d30f-3487-944d-48d9a3bf5ff0.roa (raw, json) Hash identifier: zS/sxcKdN9m7tjYTXx9YPLpgMhnw7YwSJJeiDkB3rCg= Subject key identifier: C2:F3:32:EB:29:0F:D7:0E:8D:DA:30:DE:07:A7:0F:C5:19:72:B9:B3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3F1C5785C9594A19097C6500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/641a8e03-d30f-3487-944d-48d9a3bf5ff0.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 174.131.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:57:85:c9:59:4a:19:09:7c:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=0aaa0c1f-9c54-4383-89f3-275589833943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e4:b0:58:cb:5e:6d:a6:96:f1:ea:ab:0a:36: 92:cf:4e:7c:70:4f:92:7b:5d:e8:41:b7:d7:75:9d: 99:98:ab:17:3d:8c:e0:58:02:d3:65:ae:13:77:42: 55:f0:f3:07:7d:04:96:12:12:53:a4:9f:2e:d4:a6: d5:6d:f3:19:91:f7:45:8f:7e:bd:a6:9e:ba:32:b0: 82:a0:5a:f4:b6:80:10:27:a5:13:b7:15:88:d5:99: e9:ae:fe:f0:fc:3b:1f:0a:80:89:bd:5e:2b:1b:26: 61:0f:c9:f1:d2:99:f4:6e:b6:9e:10:f1:a9:95:dc: 7c:1e:da:dd:2c:4b:7d:7e:89:b1:ba:c7:07:58:f4: fb:7f:88:e4:28:0a:25:db:0e:fb:ad:6a:1a:d0:2e: 6a:35:3a:72:24:6f:3c:48:fc:1d:dc:c3:f6:46:f5: 2f:d5:83:c4:31:a4:38:d3:b6:7b:ce:d3:85:dd:8d: 8b:88:55:96:18:46:e9:3f:44:5f:a8:0d:91:17:16: 2b:a6:fa:59:39:a3:e5:fe:8f:a7:d5:72:e6:da:00: 4a:51:23:ba:c7:c6:cb:df:65:06:6f:b5:2c:80:2a: ae:47:ec:7b:bb:d9:40:db:8c:a3:88:fa:e2:fd:ef: fd:d9:88:a6:47:82:fe:9d:6f:04:97:42:bf:28:13: 4d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F3:32:EB:29:0F:D7:0E:8D:DA:30:DE:07:A7:0F:C5:19:72:B9:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/641a8e03-d30f-3487-944d-48d9a3bf5ff0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:69:ef:4f:f9:2d:27:0e:87:1d:f7:83:3d:86:49:14:c2:72: 19:2e:2e:cd:16:11:01:03:c6:cd:a5:8d:16:b3:81:f3:27:92: ba:e4:07:47:51:a4:17:86:11:21:71:67:56:ec:04:c1:52:4a: 24:b2:43:bb:00:61:de:53:6b:07:41:de:b0:b9:b4:d0:4d:b7: d1:3a:53:b9:55:bd:89:95:8a:a4:c3:8f:d8:33:fe:50:8c:ae: 07:20:48:79:33:a8:c1:8b:a1:64:c0:f0:11:66:11:61:ab:bc: 73:77:4c:0c:e6:57:ec:5f:30:f4:09:40:5e:90:1d:2b:1e:9c: f5:9b:48:9b:62:6d:79:89:1e:dd:96:b6:dc:a1:64:62:5b:10: 90:40:f6:47:a3:5c:9b:2f:51:4e:dc:e4:d4:1e:60:1d:cd:d3: f3:47:9a:d8:38:13:5c:35:9f:97:45:a8:3c:83:b4:10:32:ef: 56:13:11:42:2a:73:a1:02:56:af:3b:88:fd:55:8e:59:c8:de: b9:a0:82:89:04:48:88:8a:92:f1:f3:91:2b:b0:9b:5d:a6:4d: 34:e1:19:4a:05:a3:47:de:27:89:f0:5d:7d:e4:36:d8:ab:66: ff:b5:41:7c:86:56:4b:a7:9b:57:ad:9a:d9:4a:ef:35:37:4c: d6:2b:b4:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HFeFyVlKGQl8ZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk MGFhYTBjMWYtOWM1NC00MzgzLTg5ZjMtMjc1NTg5ODMzOTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOSwWMtebaaW8eqrCjaSz058cE+Se13oQbfX dZ2ZmKsXPYzgWALTZa4Td0JV8PMHfQSWEhJTpJ8u1KbVbfMZkfdFj369pp66MrCC oFr0toAQJ6UTtxWI1Znprv7w/DsfCoCJvV4rGyZhD8nx0pn0braeEPGpldx8Htrd LEt9fomxuscHWPT7f4jkKAol2w77rWoa0C5qNTpyJG88SPwd3MP2RvUv1YPEMaQ4 07Z7ztOF3Y2LiFWWGEbpP0RfqA2RFxYrpvpZOaPl/o+n1XLm2gBKUSO6x8bL32UG b7UsgCquR+x7u9lA24yjiPri/e/92YimR4L+nW8El0K/KBNNmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLzMuspD9cOjdow3genD8UZcrmzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjQxYThlMDMtZDMwZi0z NDg3LTk0NGQtNDhkOWEzYmY1ZmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEroNQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtp70/5LScOhx33gz2GSRTCchkuLs0WEQEDxs2ljRazgfMnkrrkB0dR pBeGESFxZ1bsBMFSSiSyQ7sAYd5TawdB3rC5tNBNt9E6U7lVvYmViqTDj9gz/lCM rgcgSHkzqMGLoWTA8BFmEWGrvHN3TAzmV+xfMPQJQF6QHSsenPWbSJtibXmJHt2W ttyhZGJbEJBA9kejXJsvUU7c5NQeYB3N0/NHmtg4E1w1n5dFqDyDtBAy71YTEUIq c6ECVq87iP1VjlnI3rmggokESIiKkvHzkSuwm12mTTThGUoFo0feJ4nwXX3kNtir Zv+1QXyGVkunm1etmtlK7zU3TNYrtOA= -----END CERTIFICATE-----Generated at Fri Oct 10 19:55:02 2025 by rpki-client