$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/85c9c65b-55a2-3974-a249-26d85ae95a34.roa File: 85c9c65b-55a2-3974-a249-26d85ae95a34.roa (raw, json) Hash identifier: Ec+nwKyr01U9yOxgZ96T91nnLC1gOL4ED2xnsS4Ce+0= Subject key identifier: 26:8D:C8:4F:BD:13:BE:EF:1C:A0:17:95:63:6C:1F:78:F4:B6:70:42 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D02820F14F711BE5BA380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/85c9c65b-55a2-3974-a249-26d85ae95a34.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 19674 IP address blocks: 207.106.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:02:82:0f:14:f7:11:be:5b:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=7596c620-bdc3-4f78-83ed-fdd496bb2e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:db:95:10:ca:59:28:14:8a:e2:52:08:b7:d6: f9:a7:00:17:db:4a:40:35:ac:ee:9f:70:42:81:09: 09:8c:08:fc:ad:f5:db:22:7e:bf:34:dc:47:ba:f4: 46:0f:4c:43:e1:1d:11:0e:a9:e6:99:04:d7:28:d4: 27:32:3c:bc:ab:0a:e0:ec:42:ed:20:cf:13:71:0c: 04:0f:fb:d2:9e:ec:19:37:2c:27:77:81:5b:b7:35: 6b:81:fc:a0:33:2f:dc:91:8d:f2:5e:58:75:18:7c: 15:fe:aa:ed:4b:94:e5:00:28:a2:a3:07:cb:70:8e: d9:02:2a:b8:af:54:a2:5b:c5:d5:6b:3c:e6:b9:69: bc:0f:7c:8b:b1:74:4c:b4:59:f1:74:92:f8:fb:31: 01:c5:99:90:48:42:1a:b6:a3:1f:6b:be:16:c5:a7: 26:15:68:87:59:ee:18:01:54:dd:ea:04:4b:a2:91: 01:e0:df:60:b2:a4:3d:2a:d9:2d:90:da:56:0b:53: ce:bc:85:3e:3f:ae:ea:6b:5a:9e:0f:0f:2b:87:0c: 35:2c:a4:06:10:8c:bd:d0:75:0c:9a:fa:3d:3f:fc: 01:75:12:74:c8:96:57:33:7e:f6:82:35:b2:3a:4b: 49:e4:4f:87:bb:e3:8d:e1:5d:75:e6:d1:9a:9e:43: 25:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8D:C8:4F:BD:13:BE:EF:1C:A0:17:95:63:6C:1F:78:F4:B6:70:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/85c9c65b-55a2-3974-a249-26d85ae95a34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.106.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:46:5e:14:7b:83:85:b5:f6:94:37:f4:2c:46:27:5d:aa:f1: 47:b0:ad:cc:79:23:05:a7:43:73:0c:e3:d9:27:01:87:0f:d7: ed:02:52:61:89:c3:b4:26:0e:62:c1:86:5e:1e:86:49:15:f1: f2:36:3f:d1:53:eb:4b:b1:e9:25:ed:40:18:5c:ad:0d:1a:fb: cb:57:e2:62:d4:d3:4b:b4:e1:ab:2f:9c:e3:73:b4:9e:21:33: 94:c8:a8:7b:51:0d:51:3f:2b:43:7a:42:e0:8c:a4:b3:9b:e4: 44:93:66:88:ef:5c:23:be:de:d2:3b:12:5f:54:d0:87:9f:fa: 9e:64:49:bd:1b:69:03:24:73:e7:cf:eb:95:2c:7e:0b:05:a7: a8:d7:71:78:62:59:6c:5e:ca:d9:e3:7f:fd:af:9a:d1:f1:4b: 40:c0:e0:07:3e:58:b6:60:12:80:e7:b3:62:c0:cc:b2:bb:e2: 80:66:20:f0:ba:05:eb:11:6c:8e:03:2e:86:df:f8:2b:45:d6: 72:32:93:e2:7b:70:28:d1:e7:66:c2:fd:69:0d:ab:ee:1c:33: 03:95:d4:a1:f8:85:73:24:45:b3:f8:dd:43:b4:9d:8a:57:94: 55:84:c5:3b:da:eb:ea:48:2f:3d:0c:eb:f9:d8:ae:44:ba:f7: 84:b6:62:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQKCDxT3Eb5bo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NzU5NmM2MjAtYmRjMy00Zjc4LTgzZWQtZmRkNDk2YmIyZTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtuVEMpZKBSK4lIIt9b5pwAX20pANazun3BC gQkJjAj8rfXbIn6/NNxHuvRGD0xD4R0RDqnmmQTXKNQnMjy8qwrg7ELtIM8TcQwE D/vSnuwZNywnd4FbtzVrgfygMy/ckY3yXlh1GHwV/qrtS5TlACiiowfLcI7ZAiq4 r1SiW8XVazzmuWm8D3yLsXRMtFnxdJL4+zEBxZmQSEIatqMfa74WxacmFWiHWe4Y AVTd6gRLopEB4N9gsqQ9KtktkNpWC1POvIU+P67qa1qeDw8rhww1LKQGEIy90HUM mvo9P/wBdRJ0yJZXM372gjWyOktJ5E+Hu+ON4V115tGankMl5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCaNyE+9E77vHKAXlWNsH3j0tnBCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODVjOWM2NWItNTVhMi0z OTc0LWEyNDktMjZkODVhZTk1YTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz2oqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZGXhR7g4W19pQ39CxGJ12q8Uewrcx5IwWnQ3MM49knAYcP1+0CUmGJ w7QmDmLBhl4ehkkV8fI2P9FT60ux6SXtQBhcrQ0a+8tX4mLU00u04asvnONztJ4h M5TIqHtRDVE/K0N6QuCMpLOb5ESTZojvXCO+3tI7El9U0Ief+p5kSb0baQMkc+fP 65UsfgsFp6jXcXhiWWxeytnjf/2vmtHxS0DA4Ac+WLZgEoDns2LAzLK74oBmIPC6 BesRbI4DLobf+CtF1nIyk+J7cCjR52bC/WkNq+4cMwOV1KH4hXMkRbP43UO0nYpX lFWExTva6+pILz0M6/nYrkS694S2Yns= -----END CERTIFICATE-----Generated at Fri Oct 10 22:06:51 2025 by rpki-client