$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/814cbe67-9c67-3420-81e6-2b9acdf04041.roa File: 814cbe67-9c67-3420-81e6-2b9acdf04041.roa (raw, json) Hash identifier: qWnfUHW08I3+hMZmJF9tA8QMm5j+a9N4rDQJuu/PW+g= Subject key identifier: BF:AD:D6:03:70:90:4E:DA:6F:63:BC:32:4C:45:2A:09:2A:1F:DB:BD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CFC085A11D4D5F3574280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/814cbe67-9c67-3420-81e6-2b9acdf04041.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 208.101.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:fc:08:5a:11:d4:d5:f3:57:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=f29d9181-d185-46cc-8a68-b693838e71b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9b:6b:cc:be:52:3e:9f:a3:5b:78:a9:4a:d9: cb:87:aa:69:ec:50:8a:59:60:ad:4c:d8:45:1d:76: 0c:72:c5:f7:a3:88:a1:83:e2:aa:25:01:d6:3d:4d: 30:83:9f:54:63:b1:46:6f:86:85:27:d6:65:6e:9b: b8:e1:5b:07:1b:7f:d9:23:aa:06:4b:e1:68:89:c5: 08:fe:09:ed:c2:20:9b:f8:59:28:e8:40:26:ac:f7: 9b:0a:be:bc:52:2e:78:35:38:ac:7b:8d:5c:a1:5f: b4:3c:c7:29:f2:63:d1:5f:7e:51:e0:d1:f6:94:ee: 55:43:33:c2:25:1e:3a:bc:7c:9f:3b:02:98:ec:1b: 6c:54:a1:61:1b:f8:bd:f4:2f:59:58:3b:96:a7:3d: 40:a3:f5:e7:6b:af:cc:94:50:2a:de:22:03:1a:83: 92:dc:de:7e:27:3e:a5:98:b7:41:87:40:ab:16:e3: 28:c1:83:1a:14:92:f3:e4:35:44:19:93:f7:0b:6b: bc:18:a1:0c:c6:ed:3b:f8:49:21:d9:01:78:45:ec: a4:ce:25:e8:84:a8:69:4b:6e:f2:98:df:29:4b:b1: 63:bc:45:02:d7:ee:1d:f9:01:f3:af:61:8b:48:cc: eb:ff:bf:c5:30:be:cb:30:35:a7:c4:21:27:55:42: 55:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AD:D6:03:70:90:4E:DA:6F:63:BC:32:4C:45:2A:09:2A:1F:DB:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/814cbe67-9c67-3420-81e6-2b9acdf04041.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 208.101.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:db:fb:9b:16:b7:51:8f:eb:d0:7f:88:f5:c3:02:a5:29:7f: 17:54:b9:62:b3:b3:ab:aa:ef:eb:cb:29:d0:99:6b:02:a3:ad: 11:d8:e7:12:de:61:9e:23:e1:76:92:1f:50:d2:fa:7a:6f:13: ad:5d:4a:cf:fe:06:92:e4:63:ff:34:18:59:ce:c1:35:2f:87: 61:29:2d:7c:be:44:72:8e:65:c4:6e:07:64:6a:d8:1a:41:44: 83:57:5c:de:0c:b1:3b:06:ac:bb:ec:e1:4d:a5:ab:81:26:0d: ef:90:93:b6:f7:b8:13:b4:37:15:af:18:20:c6:69:02:0f:00: f3:3b:ba:76:ab:1c:97:f2:72:6e:f3:7c:36:d8:e3:3b:5c:d0: 65:cd:9a:91:64:b4:3e:45:78:cc:e9:52:89:29:64:8e:20:6c: 2b:62:08:c4:04:de:a9:55:9f:bb:37:9d:ba:52:73:0a:e6:76: 5e:80:81:f7:c2:e6:7f:7f:07:24:2a:a4:2b:c0:bd:b5:3f:ce: 24:cd:b5:21:cd:36:04:85:bd:ab:95:65:c3:29:e6:61:ce:01: 2c:b5:e6:7e:34:a7:a2:37:ad:a5:8c:cc:d7:1d:e9:5b:dc:f9: cf:91:7c:44:c8:a4:ef:f5:67:b0:73:32:4a:f1:4e:ef:26:56: 0c:68:41:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPwIWhHU1fNXQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZjI5ZDkxODEtZDE4NS00NmNjLThhNjgtYjY5MzgzOGU3MWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5trzL5SPp+jW3ipStnLh6pp7FCKWWCtTNhF HXYMcsX3o4ihg+KqJQHWPU0wg59UY7FGb4aFJ9Zlbpu44VsHG3/ZI6oGS+FoicUI /gntwiCb+Fko6EAmrPebCr68Ui54NTise41coV+0PMcp8mPRX35R4NH2lO5VQzPC JR46vHyfOwKY7BtsVKFhG/i99C9ZWDuWpz1Ao/Xna6/MlFAq3iIDGoOS3N5+Jz6l mLdBh0CrFuMowYMaFJLz5DVEGZP3C2u8GKEMxu07+Ekh2QF4ReykziXohKhpS27y mN8pS7FjvEUC1+4d+QHzr2GLSMzr/7/FML7LMDWnxCEnVUJVlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+t1gNwkE7ab2O8MkxFKgkqH9u9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODE0Y2JlNjctOWM2Ny0z NDIwLTgxZTYtMmI5YWNkZjA0MDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0GWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLb+5sWt1GP69B/iPXDAqUpfxdUuWKzs6uq7+vLKdCZawKjrRHY5xLe YZ4j4XaSH1DS+npvE61dSs/+BpLkY/80GFnOwTUvh2EpLXy+RHKOZcRuB2Rq2BpB RINXXN4MsTsGrLvs4U2lq4EmDe+Qk7b3uBO0NxWvGCDGaQIPAPM7unarHJfycm7z fDbY4ztc0GXNmpFktD5FeMzpUokpZI4gbCtiCMQE3qlVn7s3nbpScwrmdl6AgffC 5n9/ByQqpCvAvbU/ziTNtSHNNgSFvauVZcMp5mHOASy15n40p6I3raWMzNcd6Vvc +c+RfETIpO/1Z7BzMkrxTu8mVgxoQQU= -----END CERTIFICATE-----Generated at Fri Oct 10 17:57:17 2025 by rpki-client