$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8683cdc2-c9f4-3377-88c3-f6b9038ca1f9.roa File: 8683cdc2-c9f4-3377-88c3-f6b9038ca1f9.roa (raw, json) Hash identifier: ZVp6AaTD7xaGsTETSvmcURo8GmY6QHupYoUj/VBgT5A= Subject key identifier: 48:0D:E3:BF:00:34:41:81:C9:DB:F3:F3:0B:36:31:09:98:10:E4:CD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC8F55EDB1C0D8F7E33B4 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8683cdc2-c9f4-3377-88c3-f6b9038ca1f9.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 209.2.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c8:f5:5e:db:1c:0d:8f:7e:33:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=b76a55c1-cc14-463d-80ab-50942c945e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7a:80:f9:7e:bf:71:75:1c:88:dc:42:c2:48: 76:c6:37:06:a9:7b:1b:59:54:05:cb:49:76:8d:23: 37:3b:69:25:25:40:f2:87:8f:7b:e1:5e:fc:41:61: 60:d7:78:27:20:9e:e6:27:79:e8:19:ed:cd:db:d3: ae:ab:5b:b0:c0:4d:f8:5c:48:9b:f0:fb:27:fe:d8: 53:c4:0a:5a:3d:93:de:fd:32:12:ea:42:23:23:90: f9:da:9d:fe:bf:9d:c2:e5:36:76:a2:30:59:2b:0c: dd:16:16:1f:a9:81:dd:25:05:81:fc:2c:92:8f:cb: 35:73:92:1e:1e:2f:cd:ed:4e:e2:2e:85:d3:b1:22: 3a:c1:ee:4b:1f:dc:87:d3:d8:21:21:92:04:a6:0c: f0:6b:34:6b:89:0f:a1:76:77:1e:a9:8a:4a:6a:be: 67:c2:37:15:49:8d:14:6b:a5:e7:4b:e0:24:09:7a: 72:6f:df:32:55:de:4b:ac:6f:80:a8:fe:8d:89:a2: 0c:43:e9:b1:3a:23:31:dc:ac:23:49:04:f6:b2:69: 2c:c0:48:06:91:b4:04:90:f4:af:ee:37:6f:d2:50: 03:a4:04:d4:54:11:61:4d:b1:b6:e8:68:da:e0:40: 15:70:1b:ab:e9:36:af:b7:5b:bb:df:eb:90:33:fa: 47:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0D:E3:BF:00:34:41:81:C9:DB:F3:F3:0B:36:31:09:98:10:E4:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8683cdc2-c9f4-3377-88c3-f6b9038ca1f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:19:58:bf:be:60:5f:f2:0c:e7:e6:5e:59:d6:6a:37:bc:91: 87:e2:ca:73:9e:9c:88:61:49:35:6f:ee:04:5a:d4:63:18:99: d3:da:e5:b5:b3:6d:90:72:15:ec:c4:0b:a3:45:44:4e:f7:53: 67:6a:9b:ae:90:b3:1e:f7:d9:b0:1d:b5:28:4a:5d:1f:6e:bc: 9a:6e:c5:39:5c:64:14:3b:fb:fc:62:95:95:14:9e:34:b8:db: 10:c6:1e:ad:f5:6e:c9:32:94:5b:bd:c5:a5:16:41:a3:d2:11: 4a:de:66:bd:c4:28:aa:f3:03:14:26:af:b4:e4:93:ec:90:8f: f2:7e:32:ba:37:93:a1:3f:c3:55:08:ea:96:0d:94:24:a7:c2: fe:61:f2:7c:54:c5:3a:ae:9c:bd:44:90:f0:f5:ad:2d:9f:eb: dc:8a:c2:8c:7a:b7:49:28:b1:1e:29:90:99:47:80:55:f7:04: 7f:4f:ac:83:7a:c2:5f:92:56:95:46:f8:b8:23:55:45:7a:9c: a1:c4:43:d1:17:9e:35:e4:0b:8a:c1:ce:07:e0:dd:d0:c7:3b: 1d:f0:02:76:70:43:78:a2:5c:eb:e6:08:b3:f4:3c:28:20:aa: 38:4d:e7:94:a9:a0:96:82:91:d1:a9:7c:7a:b5:2c:c1:27:37: 1f:7e:0c:97 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtxXMj1XtscDY9+M7QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk Yjc2YTU1YzEtY2MxNC00NjNkLTgwYWItNTA5NDJjOTQ1ZTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3qA+X6/cXUciNxCwkh2xjcGqXsbWVQFy0l2 jSM3O2klJUDyh4974V78QWFg13gnIJ7mJ3noGe3N29Ouq1uwwE34XEib8Psn/thT xApaPZPe/TIS6kIjI5D52p3+v53C5TZ2ojBZKwzdFhYfqYHdJQWB/CySj8s1c5Ie Hi/N7U7iLoXTsSI6we5LH9yH09ghIZIEpgzwazRriQ+hdnceqYpKar5nwjcVSY0U a6XnS+AkCXpyb98yVd5LrG+AqP6NiaIMQ+mxOiMx3KwjSQT2smkswEgGkbQEkPSv 7jdv0lADpATUVBFhTbG26Gja4EAVcBur6Tavt1u73+uQM/pHAwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEgN478ANEGBydvz8ws2MQmYEOTNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODY4M2NkYzItYzlmNC0z Mzc3LTg4YzMtZjZiOTAzOGNhMWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0QIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAOBlYv75gX/IM5+ZeWdZqN7yRh+LKc56ciGFJNW/uBFrUYxiZ09rltbNt kHIV7MQLo0VETvdTZ2qbrpCzHvfZsB21KEpdH268mm7FOVxkFDv7/GKVlRSeNLjb EMYerfVuyTKUW73FpRZBo9IRSt5mvcQoqvMDFCavtOST7JCP8n4yujeToT/DVQjq lg2UJKfC/mHyfFTFOq6cvUSQ8PWtLZ/r3IrCjHq3SSixHimQmUeAVfcEf0+sg3rC X5JWlUb4uCNVRXqcocRD0ReeNeQLisHOB+Dd0Mc7HfACdnBDeKJc6+YIs/Q8KCCq OE3nlKmgloKR0al8erUswSc3H34Mlw== -----END CERTIFICATE-----Generated at Fri Oct 10 20:06:37 2025 by rpki-client