$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/880f3735-f73d-3dab-8ba3-3dc57da7e499.roa File: 880f3735-f73d-3dab-8ba3-3dc57da7e499.roa (raw, json) Hash identifier: 4LFImKxdsZNLw5VUg+2Ub5U/5gSVz4KtOjVbR8LInJk= Subject key identifier: 02:2A:87:41:F0:16:8F:CC:39:74:70:E6:6D:23:C9:51:6F:D2:D3:FF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CD15A4382AE372CDC17D0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/880f3735-f73d-3dab-8ba3-3dc57da7e499.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 22904 IP address blocks: 67.217.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:d1:5a:43:82:ae:37:2c:dc:17:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=67e01109-5381-45b4-9a7f-ac379ea14f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fa:c7:24:cb:d7:73:9c:0f:2c:5c:b3:c5:1a: 87:95:83:d0:53:fc:94:12:9c:ec:8e:ca:4f:07:53: 09:7c:8c:e3:c9:36:6f:88:bf:65:2c:f8:4b:75:30: 6e:e6:60:a4:af:31:dc:ee:37:2c:dc:ad:26:a9:da: 35:8c:50:00:d9:cb:91:0a:2f:c8:54:ae:5d:57:60: b4:3f:65:26:65:61:80:ea:6f:17:36:2b:12:2d:ee: 65:98:c4:41:51:30:55:ed:0e:fb:80:9b:dd:3d:45: 8a:ac:97:d6:ba:38:5d:c4:69:9c:d6:06:43:11:c7: 8c:63:5c:d4:88:1a:cf:c4:04:18:d0:b4:4e:25:a8: 8e:6a:89:d4:c7:09:de:ba:1f:44:7a:51:81:46:15: ce:90:ab:ab:02:cb:7c:6f:66:f9:ac:67:16:ca:24: 1e:f9:1b:91:17:c4:4c:39:b1:23:4e:38:05:51:b3: db:bb:5a:a6:10:12:65:a1:9f:2c:18:bf:86:77:be: 70:17:03:a7:dd:db:fb:ca:1d:82:56:7f:9a:61:c2: 15:e1:83:10:7c:77:9c:24:98:7c:95:3b:37:13:18: 25:dd:dc:4c:ce:b6:04:a3:ca:ae:c9:ec:a0:e7:9b: 69:b3:c9:16:71:3b:7f:56:dd:e4:a5:de:cc:fc:bf: 2c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2A:87:41:F0:16:8F:CC:39:74:70:E6:6D:23:C9:51:6F:D2:D3:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/880f3735-f73d-3dab-8ba3-3dc57da7e499.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.217.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:01:45:8b:79:3c:c3:ad:f2:14:e3:e6:f7:59:6c:c4:74:d4: 77:81:b4:62:d0:b1:4c:60:c2:84:78:ea:4f:c0:a7:c2:fa:1b: f9:ab:52:df:a0:07:6c:c3:86:79:ff:53:f1:55:dc:ab:5b:9e: 12:02:0c:fd:dc:9c:36:07:75:14:c2:c3:4a:df:33:41:90:ae: 89:46:47:f8:49:68:ee:36:59:9c:e1:a7:04:45:5d:30:5b:34: 26:93:68:0c:4d:3f:6c:7d:8b:62:f4:7e:37:b0:ad:8d:e9:58: ab:b0:8d:c4:fd:e4:f2:51:07:06:6b:ce:57:f5:27:45:fb:6e: ff:85:e6:79:03:b8:91:dc:65:81:3c:b4:b1:5c:49:34:c7:e2: b7:45:06:59:e9:9f:8c:91:83:80:c5:22:1d:91:5e:e5:e0:4f: 0a:44:ad:29:33:51:6b:e4:99:c8:0f:9a:c2:19:d0:80:ae:2e: 64:8f:1b:72:5a:fd:56:cf:dd:97:5a:79:6d:38:73:15:98:54: 23:b9:ad:a7:ad:e7:ca:a0:60:1d:4e:61:b4:2e:00:ea:24:4f: b6:58:32:81:34:f5:ac:88:89:f9:1b:c0:c7:e2:5a:e4:a6:4e: 5c:cb:26:7a:dc:32:a6:fb:e9:d3:3c:a4:06:fb:80:22:f4:8c: 07:48:fd:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXNFaQ4KuNyzcF9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NjdlMDExMDktNTM4MS00NWI0LTlhN2YtYWMzNzllYTE0ZjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvrHJMvXc5wPLFyzxRqHlYPQU/yUEpzsjspP B1MJfIzjyTZviL9lLPhLdTBu5mCkrzHc7jcs3K0mqdo1jFAA2cuRCi/IVK5dV2C0 P2UmZWGA6m8XNisSLe5lmMRBUTBV7Q77gJvdPUWKrJfWujhdxGmc1gZDEceMY1zU iBrPxAQY0LROJaiOaonUxwneuh9EelGBRhXOkKurAst8b2b5rGcWyiQe+RuRF8RM ObEjTjgFUbPbu1qmEBJloZ8sGL+Gd75wFwOn3dv7yh2CVn+aYcIV4YMQfHecJJh8 lTs3Exgl3dxMzrYEo8quyeyg55tps8kWcTt/Vt3kpd7M/L8sVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIqh0HwFo/MOXRw5m0jyVFv0tP/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODgwZjM3MzUtZjczZC0z ZGFiLThiYTMtM2RjNTdkYTdlNDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9mNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwBRYt5PMOt8hTj5vdZbMR01HeBtGLQsUxgwoR46k/Ap8L6G/mrUt+g B2zDhnn/U/FV3KtbnhICDP3cnDYHdRTCw0rfM0GQrolGR/hJaO42WZzhpwRFXTBb NCaTaAxNP2x9i2L0fjewrY3pWKuwjcT95PJRBwZrzlf1J0X7bv+F5nkDuJHcZYE8 tLFcSTTH4rdFBlnpn4yRg4DFIh2RXuXgTwpErSkzUWvkmcgPmsIZ0ICuLmSPG3Ja /VbP3ZdaeW04cxWYVCO5raet58qgYB1OYbQuAOokT7ZYMoE09ayIifkbwMfiWuSm TlzLJnrcMqb76dM8pAb7gCL0jAdI/Rc= -----END CERTIFICATE-----Generated at Fri Oct 10 17:50:45 2025 by rpki-client