$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e0125d0-b517-3612-9f37-c35c35e9e3e6.roa File: 7e0125d0-b517-3612-9f37-c35c35e9e3e6.roa (raw, json) Hash identifier: ClDlPysS1xmxfm+kPOB/a39atUHwDxTFkrekPyxdJnk= Subject key identifier: 9E:A5:9A:87:8E:31:3E:E5:62:59:AE:C5:B8:3D:D8:FD:29:B2:23:64 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF575A66BC020513579C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e0125d0-b517-3612-9f37-c35c35e9e3e6.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 72.25.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f5:75:a6:6b:c0:20:51:35:79:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=1522dfd2-c728-436f-b8b6-1f9ff414d471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6d:4a:de:70:eb:4b:01:fa:9b:f3:3f:98:6d: 8a:58:b2:28:e9:a7:bd:f8:be:8b:78:14:9a:16:ae: 3d:a2:54:57:0d:dc:59:f5:b3:fe:2c:40:c2:77:4e: 89:82:3d:12:4f:83:6d:26:d5:4c:2e:d3:3c:9f:45: 4b:a3:d8:4a:d7:3b:08:d9:5c:69:36:79:5f:ee:8c: 82:d5:5f:94:1b:ce:fe:b6:27:e2:cb:8f:d8:61:ef: ac:0f:ac:0b:56:a8:e0:4f:1f:18:62:7d:76:54:51: 93:ec:63:cd:d9:5b:54:11:0b:c8:66:46:68:9b:ff: cb:93:60:ed:d9:91:2d:f3:40:44:bb:72:82:94:48: 9c:00:97:40:5d:dd:69:5c:64:80:77:a5:15:61:6f: 2d:9d:1b:bf:f8:70:c9:c6:16:07:3d:c9:65:f3:61: a0:de:14:b7:0f:7d:70:20:aa:40:da:b6:64:ec:61: e5:c5:7e:a8:bf:8b:d9:d0:ee:ee:65:68:1c:70:c8: 20:91:49:19:fc:81:ae:f2:e0:da:e5:f4:73:e5:35: 33:a4:28:a0:86:bd:86:9b:80:af:4c:04:3e:3d:65: 09:c4:c3:93:96:07:2a:c2:02:9d:88:b0:b4:a4:0e: b5:4b:36:2b:7a:56:6c:e6:fa:bf:10:70:75:7d:b3: 21:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A5:9A:87:8E:31:3E:E5:62:59:AE:C5:B8:3D:D8:FD:29:B2:23:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e0125d0-b517-3612-9f37-c35c35e9e3e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.25.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:ae:01:49:e3:09:d8:b8:73:02:20:96:aa:fe:6e:a0:8e:2e: e7:2b:25:6f:8e:ba:53:e0:7d:19:73:b0:0f:00:e3:b7:96:c2: 4a:03:59:14:6e:1f:a8:44:35:5b:ca:65:fa:7b:4c:eb:ed:ea: 87:dc:99:90:1c:39:98:34:64:5b:48:12:3f:d3:bf:59:ba:26: 28:b1:0f:8d:8f:84:e0:bf:c3:a7:21:c0:9a:84:66:8e:ce:4f: 3b:a4:79:4f:37:20:34:ec:52:19:20:c6:78:46:3e:e7:55:ea: e9:ef:a6:82:41:11:48:49:58:ed:5f:2b:8e:24:f9:ef:3b:eb: a2:42:3b:f6:5e:39:fc:43:82:a5:05:9a:bc:b2:09:f7:0c:08: 1d:cc:55:e7:c2:82:0f:81:05:82:3e:fd:4f:00:46:95:43:1a: d4:c2:7b:29:de:91:ea:30:b9:5f:73:ab:5f:46:5f:50:a8:a5: eb:c8:4a:e7:48:9d:4b:a9:05:eb:09:2d:c0:ce:9c:c5:0e:7a: 46:91:58:62:67:e7:59:3b:e8:bb:fb:de:d9:df:dd:26:d6:b9: 1e:02:e3:6c:f3:27:85:05:c7:a9:1b:ce:6a:8c:23:ef:91:85: 50:5a:f2:87:b9:34:89:80:2a:b4:65:99:c9:35:89:2d:ab:09: f8:18:aa:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPV1pmvAIFE1ecAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MTUyMmRmZDItYzcyOC00MzZmLWI4YjYtMWY5ZmY0MTRkNDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW1K3nDrSwH6m/M/mG2KWLIo6ae9+L6LeBSa Fq49olRXDdxZ9bP+LEDCd06Jgj0ST4NtJtVMLtM8n0VLo9hK1zsI2VxpNnlf7oyC 1V+UG87+tifiy4/YYe+sD6wLVqjgTx8YYn12VFGT7GPN2VtUEQvIZkZom//Lk2Dt 2ZEt80BEu3KClEicAJdAXd1pXGSAd6UVYW8tnRu/+HDJxhYHPcll82Gg3hS3D31w IKpA2rZk7GHlxX6ov4vZ0O7uZWgccMggkUkZ/IGu8uDa5fRz5TUzpCighr2Gm4Cv TAQ+PWUJxMOTlgcqwgKdiLC0pA61SzYrelZs5vq/EHB1fbMhCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6lmoeOMT7lYlmuxbg92P0psiNkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2UwMTI1ZDAtYjUxNy0z NjEyLTlmMzctYzM1YzM1ZTllM2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSBkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyuAUnjCdi4cwIglqr+bqCOLucrJW+OulPgfRlzsA8A47eWwkoDWRRu H6hENVvKZfp7TOvt6ofcmZAcOZg0ZFtIEj/Tv1m6JiixD42PhOC/w6chwJqEZo7O TzukeU83IDTsUhkgxnhGPudV6unvpoJBEUhJWO1fK44k+e8766JCO/ZeOfxDgqUF mryyCfcMCB3MVefCgg+BBYI+/U8ARpVDGtTCeynekeowuV9zq19GX1CopevISudI nUupBesJLcDOnMUOekaRWGJn51k76Lv73tnf3SbWuR4C42zzJ4UFx6kbzmqMI++R hVBa8oe5NImAKrRlmck1iS2rCfgYqrs= -----END CERTIFICATE-----Generated at Fri Oct 10 17:49:29 2025 by rpki-client