$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e39ba3e-d61a-3491-9bb5-edbe4687dcfd.roa File: 7e39ba3e-d61a-3491-9bb5-edbe4687dcfd.roa (raw, json) Hash identifier: G64rHULxNXILz5dF5aUm/cY2TGfJR48D+ku2ccjTYrM= Subject key identifier: 2B:12:09:0B:4B:F9:CF:46:68:2C:C3:94:D2:EA:8E:A8:20:A8:C4:B1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CFA23B1A526DA96B6DEC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e39ba3e-d61a-3491-9bb5-edbe4687dcfd.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 199.35.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:fa:23:b1:a5:26:da:96:b6:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=8e1c2bc9-bdc0-4396-a769-a314ff353f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b6:bb:09:3b:8f:58:05:22:69:66:f6:2e:e5: dc:1f:dd:7f:93:78:89:85:bf:f2:d7:6d:29:0f:e9: 4a:39:91:53:d4:87:f8:78:97:9d:37:ea:03:4b:01: aa:d5:4c:e8:a5:bf:cf:6b:e7:e3:73:dd:3f:fc:d4: 0f:11:95:45:2b:85:17:7f:c8:6b:b4:e9:c6:f1:fe: ad:53:ed:fe:2b:b6:fa:3b:78:ec:ab:a7:32:f3:de: 89:e4:11:84:50:90:b4:49:f8:ef:0d:1c:a3:ab:4e: 44:d6:14:8b:64:c8:59:69:26:b8:fb:a9:dd:cd:ea: c6:73:27:82:20:6d:33:5a:35:e2:12:3c:41:01:eb: 8e:25:f9:46:6d:fd:29:03:ea:ae:f5:a6:71:24:4b: 3e:15:18:b5:de:3f:cf:ec:df:31:c1:28:4f:fd:62: 1f:9c:cf:36:31:81:87:fa:1d:50:a5:d9:1a:dc:18: 35:07:7c:ff:fa:8d:29:cc:da:3e:a4:ec:cd:16:8c: 95:87:b2:b2:6c:b8:88:86:cc:8d:71:cc:08:0f:7b: d0:33:ee:1d:69:95:83:32:44:5d:38:4f:1e:c1:ae: 22:aa:11:48:3d:ad:b6:e9:94:7d:c0:74:5a:62:19: 56:17:9a:82:1a:5e:bc:0d:5c:80:d0:0f:8c:0e:f8: 5e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:12:09:0B:4B:F9:CF:46:68:2C:C3:94:D2:EA:8E:A8:20:A8:C4:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e39ba3e-d61a-3491-9bb5-edbe4687dcfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 199.35.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:dd:06:37:0e:24:de:e9:73:b6:9b:49:d8:1d:ff:2d:24:95: 33:19:ea:3c:b3:f6:4d:1b:b4:83:59:22:9b:04:d6:d3:4f:88: da:6c:64:79:4a:46:2b:55:fc:a9:2f:cf:8c:19:82:33:d7:2b: 1b:1b:cc:c2:b1:65:a9:63:49:21:a6:37:44:a8:1f:c7:b1:d7: da:0a:21:5f:9e:7b:ba:d5:ff:36:eb:d8:32:18:29:bf:f4:73: c1:0a:bc:1d:99:ab:07:ee:4f:93:24:bf:94:8f:c8:a2:63:46: 77:d7:9d:cd:7c:a2:28:40:0e:a4:15:e2:3f:d3:77:d6:b6:0a: 87:b0:51:ac:2b:1a:da:f6:82:54:26:bf:ec:0d:77:90:d8:a7: 7d:b2:0c:aa:66:10:81:52:00:34:09:1b:e5:a7:63:a4:96:a4: a4:76:16:9f:c1:4f:56:39:4a:8c:2d:c3:cb:f0:f3:1a:f8:94: 83:52:3a:37:b5:46:b8:51:50:7b:da:d5:99:f8:12:28:1c:f7: 6d:b5:a9:e4:7c:2e:4e:f3:6e:00:dd:3a:99:82:dd:2f:79:54: c3:0f:cd:4f:7c:21:3b:f2:1c:25:fe:9b:b7:a6:55:2a:c1:4c: 12:36:d0:be:19:73:74:6b:c2:0f:7b:aa:64:2c:3c:18:18:33: 4a:d3:b5:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPojsaUm2pa23sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk OGUxYzJiYzktYmRjMC00Mzk2LWE3NjktYTMxNGZmMzUzZjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLa7CTuPWAUiaWb2LuXcH91/k3iJhb/y120p D+lKOZFT1If4eJedN+oDSwGq1Uzopb/Pa+fjc90//NQPEZVFK4UXf8hrtOnG8f6t U+3+K7b6O3jsq6cy896J5BGEUJC0SfjvDRyjq05E1hSLZMhZaSa4+6ndzerGcyeC IG0zWjXiEjxBAeuOJflGbf0pA+qu9aZxJEs+FRi13j/P7N8xwShP/WIfnM82MYGH +h1Qpdka3Bg1B3z/+o0pzNo+pOzNFoyVh7KybLiIhsyNccwID3vQM+4daZWDMkRd OE8ewa4iqhFIPa226ZR9wHRaYhlWF5qCGl68DVyA0A+MDvheowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsSCQtL+c9GaCzDlNLqjqggqMSxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2UzOWJhM2UtZDYxYS0z NDkxLTliYjUtZWRiZTQ2ODdkY2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExyMwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLdBjcOJN7pc7abSdgd/y0klTMZ6jyz9k0btINZIpsE1tNPiNpsZHlK RitV/Kkvz4wZgjPXKxsbzMKxZaljSSGmN0SoH8ex19oKIV+ee7rV/zbr2DIYKb/0 c8EKvB2ZqwfuT5Mkv5SPyKJjRnfXnc18oihADqQV4j/Td9a2CoewUawrGtr2glQm v+wNd5DYp32yDKpmEIFSADQJG+WnY6SWpKR2Fp/BT1Y5Sowtw8vw8xr4lINSOje1 RrhRUHva1Zn4Eigc9221qeR8Lk7zbgDdOpmC3S95VMMPzU98ITvyHCX+m7emVSrB TBI20L4Zc3Rrwg97qmQsPBgYM0rTtRk= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:46 2025 by rpki-client