$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/65820e26-08d3-39ca-84f8-de5a4f299c38.roa File: 65820e26-08d3-39ca-84f8-de5a4f299c38.roa (raw, json) Hash identifier: +jMwAJuaBcKbiOFY25t93z45y4s1pR7DVmd4ZVyDbMg= Subject key identifier: 3E:90:B4:8F:2A:F6:39:51:48:9D:A2:E1:E7:21:2C:7F:F2:E3:21:82 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CFC18987DB84CF22FF800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/65820e26-08d3-39ca-84f8-de5a4f299c38.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 208.101.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:fc:18:98:7d:b8:4c:f2:2f:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=88ada0dc-5df2-4542-a4f3-ccfd2f2740d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ef:42:ad:a7:d9:44:b7:54:a1:ca:4e:3d:e7: 0e:d1:4d:6f:f2:f2:c9:10:ff:c7:06:d9:cb:88:3c: b7:00:c5:ef:3a:22:51:97:55:56:ae:a1:6b:25:3c: ec:66:de:81:78:1a:15:3e:3f:43:a9:61:6d:7b:07: 10:a9:3c:fc:fd:17:a8:28:bd:c3:fd:fe:7d:d2:4a: 96:61:92:4a:2a:25:95:4b:52:69:9c:26:bb:9d:ea: cc:47:d9:d3:59:ac:64:f1:c8:4b:73:c3:fa:64:0b: 79:93:23:0b:4c:5f:32:3d:09:87:2b:82:f1:6a:00: 57:3d:81:ac:e8:43:db:b1:d4:fd:74:3a:32:e5:bf: b8:c8:6c:be:04:c7:eb:96:d7:ad:08:3f:82:c5:5a: a6:0a:7f:b9:d5:43:59:88:20:c6:72:5e:11:4b:cf: 34:63:48:d6:7d:74:14:e8:91:1e:a8:06:de:2b:b8: 76:5b:b3:e1:27:2e:96:3b:20:78:89:28:64:0a:1d: c1:6c:23:d7:a7:f3:1c:2c:a9:c7:2b:8f:02:f4:c4: 50:10:03:6e:f0:18:c7:33:50:b4:6c:5a:07:34:44: 34:b3:0d:d1:fa:17:87:09:d6:2c:15:b4:8f:3a:51: 8e:0e:9e:d1:21:4c:3f:21:90:bc:6d:2d:0f:8a:e1: b0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:90:B4:8F:2A:F6:39:51:48:9D:A2:E1:E7:21:2C:7F:F2:E3:21:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/65820e26-08d3-39ca-84f8-de5a4f299c38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 208.101.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:a1:20:ec:36:1c:39:86:7c:df:cf:8a:cf:67:7c:9b:e2:1e: 64:d6:22:36:85:e5:94:f1:47:69:99:15:cf:08:52:0d:cc:1c: 85:f6:2b:43:36:b0:74:78:40:b1:b8:da:11:4d:19:81:05:b0: 62:8b:48:ee:8f:69:57:80:bd:4a:b4:31:a3:11:a8:38:18:8b: ef:51:8d:41:51:0c:d3:ec:ba:75:a0:a4:e4:7d:ef:ef:c7:34: 24:d8:e8:c8:23:50:6c:99:59:e0:d8:ee:79:3d:56:e1:82:62: 09:a6:fe:3b:5d:5e:5b:b3:b2:7e:be:6b:a7:c0:30:b8:ee:12: 6f:43:2b:db:36:0a:a4:05:d5:74:33:63:32:d8:d0:7a:64:00: ff:29:d8:b0:07:fb:80:63:2d:4d:45:86:da:d8:81:cf:cb:f3: 21:1d:12:be:4c:ff:ee:0e:0b:76:28:af:34:bf:98:81:4e:7c: 56:f3:f6:ef:d6:ee:64:5f:ef:d0:17:2a:7f:e4:d3:54:fd:20: b4:c7:b7:80:a6:de:3a:70:5c:5f:4e:f8:69:79:49:0c:9c:78: 03:16:6c:85:20:40:0c:b6:91:8d:bd:fd:c0:46:ea:45:bd:e8: 3a:75:66:50:d5:7d:ed:00:33:eb:2f:79:3f:6c:1c:d4:23:6a: f8:ac:8b:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPwYmH24TPIv+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ODhhZGEwZGMtNWRmMi00NTQyLWE0ZjMtY2NmZDJmMjc0MGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+9CrafZRLdUocpOPecO0U1v8vLJEP/HBtnL iDy3AMXvOiJRl1VWrqFrJTzsZt6BeBoVPj9DqWFtewcQqTz8/ReoKL3D/f590kqW YZJKKiWVS1JpnCa7nerMR9nTWaxk8chLc8P6ZAt5kyMLTF8yPQmHK4LxagBXPYGs 6EPbsdT9dDoy5b+4yGy+BMfrltetCD+CxVqmCn+51UNZiCDGcl4RS880Y0jWfXQU 6JEeqAbeK7h2W7PhJy6WOyB4iShkCh3BbCPXp/McLKnHK48C9MRQEANu8BjHM1C0 bFoHNEQ0sw3R+heHCdYsFbSPOlGODp7RIUw/IZC8bS0PiuGw9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6QtI8q9jlRSJ2i4echLH/y4yGCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjU4MjBlMjYtMDhkMy0z OWNhLTg0ZjgtZGU1YTRmMjk5YzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0GWMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEahIOw2HDmGfN/Pis9nfJviHmTWIjaF5ZTxR2mZFc8IUg3MHIX2K0M2 sHR4QLG42hFNGYEFsGKLSO6PaVeAvUq0MaMRqDgYi+9RjUFRDNPsunWgpOR97+/H NCTY6MgjUGyZWeDY7nk9VuGCYgmm/jtdXluzsn6+a6fAMLjuEm9DK9s2CqQF1XQz YzLY0HpkAP8p2LAH+4BjLU1FhtrYgc/L8yEdEr5M/+4OC3YorzS/mIFOfFbz9u/W 7mRf79AXKn/k01T9ILTHt4Cm3jpwXF9O+Gl5SQyceAMWbIUgQAy2kY29/cBG6kW9 6Dp1ZlDVfe0AM+sveT9sHNQjavisi4w= -----END CERTIFICATE-----Generated at Fri Oct 10 20:04:30 2025 by rpki-client