$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bb5bf8c-69c7-3fbf-b5b1-3538c4631572.roa File: 8bb5bf8c-69c7-3fbf-b5b1-3538c4631572.roa (raw, json) Hash identifier: ZJFtFJchLMNuJtUS1u1odTwFp/f4nzACxHBhKx4Kcfc= Subject key identifier: 8C:F0:76:5B:31:F8:4F:DD:DE:1C:0C:68:70:B7:C3:95:E1:04:5C:55 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3821B01A67248441B9568600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bb5bf8c-69c7-3fbf-b5b1-3538c4631572.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 72.16.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:b0:1a:67:24:84:41:b9:56:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=9577dc5f-dd44-4064-a7c9-a4ae7a719f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6b:04:67:9a:38:ce:b2:18:f7:9b:37:3d:d7: 6c:b3:7d:88:94:19:9e:55:d0:ad:77:b0:42:cf:f2: 0e:a0:61:46:86:01:a0:ec:8c:ce:a2:ec:6a:89:a5: c5:69:ec:40:ae:5d:63:c3:5b:2d:ee:05:19:15:f3: 53:da:c9:73:fe:d6:1f:eb:f0:e9:95:f7:57:7d:c4: fb:fc:3c:6c:c7:ad:f0:3d:68:11:87:b4:ea:29:4b: 0b:8b:f1:e9:e6:a1:15:23:2e:dd:7f:25:cb:70:68: 1a:42:a0:99:e4:b9:88:a1:c2:ed:13:63:86:af:b2: cf:e5:02:2a:bd:eb:24:db:d1:a9:38:22:83:25:8c: 19:c0:50:57:c2:a2:63:7a:47:54:32:d3:d9:65:3b: 7a:21:db:c2:3d:69:ac:b2:e5:8d:f7:b5:15:19:8d: 3e:a8:c3:5f:41:e3:8e:cb:ad:e0:ad:22:c3:7c:66: a1:f2:c2:2f:fd:b8:5e:90:1c:de:74:05:15:94:10: b3:99:f2:b0:c5:c3:1c:2f:3e:3d:f7:cc:bc:ff:a0: 9a:a2:c9:ab:e7:63:56:7a:12:e7:a2:45:d1:de:a7: 1c:7f:96:e2:a5:cf:1a:fa:fa:13:51:0f:27:ec:69: 67:b4:f2:fd:36:73:bd:f2:c5:25:d4:48:c0:6f:05: 7d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F0:76:5B:31:F8:4F:DD:DE:1C:0C:68:70:B7:C3:95:E1:04:5C:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bb5bf8c-69c7-3fbf-b5b1-3538c4631572.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:8a:97:74:91:33:cc:1b:00:7b:73:54:f7:db:2d:79:bf:e2: 8c:a8:ba:b1:b3:6d:ac:ef:9f:6a:14:94:20:45:42:35:32:66: e5:f9:35:4a:be:a9:b5:5f:24:8b:a7:83:b5:92:6e:82:78:be: 67:ce:34:65:26:b5:ef:a8:2c:45:95:56:0e:82:d7:88:5d:9d: 5d:25:38:27:35:99:23:fd:88:eb:c4:61:79:7c:ac:67:06:7a: ac:a0:96:99:5d:36:1d:3d:a1:45:2e:8a:9d:cb:7b:19:30:81: b0:0b:7a:88:65:9e:48:e2:cd:d0:82:92:05:6c:47:73:74:b6: b5:d0:69:6e:fe:e5:4c:26:49:82:00:9d:d6:19:48:2d:77:83: 9c:78:f8:27:72:3a:14:e4:f0:d5:3b:d2:78:98:5e:81:0c:f5: a4:0d:a6:62:e4:69:77:89:4a:fd:73:4f:26:38:85:1f:71:3b: fd:c4:83:b5:55:dc:4b:c0:28:b8:dd:2d:29:8c:35:e5:52:09: 45:2f:18:33:23:50:05:cd:6b:5a:25:f9:3e:de:5e:9f:80:5c: bd:fc:e2:98:c7:17:e9:8f:ee:f5:22:cd:49:be:7c:f9:e5:49: 15:d0:62:3d:7f:43:d7:6e:c9:24:5c:53:ad:f3:1e:23:c2:a2: 44:f5:75:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IbAaZySEQblWhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk OTU3N2RjNWYtZGQ0NC00MDY0LWE3YzktYTRhZTdhNzE5ZjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2sEZ5o4zrIY95s3Pddss32IlBmeVdCtd7BC z/IOoGFGhgGg7IzOouxqiaXFaexArl1jw1st7gUZFfNT2slz/tYf6/DplfdXfcT7 /Dxsx63wPWgRh7TqKUsLi/Hp5qEVIy7dfyXLcGgaQqCZ5LmIocLtE2OGr7LP5QIq vesk29GpOCKDJYwZwFBXwqJjekdUMtPZZTt6IdvCPWmssuWN97UVGY0+qMNfQeOO y63grSLDfGah8sIv/bhekBzedAUVlBCzmfKwxcMcLz4998y8/6Caosmr52NWehLn okXR3qccf5bipc8a+voTUQ8n7GlntPL9NnO98sUl1EjAbwV9swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzwdlsx+E/d3hwMaHC3w5XhBFxVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGJiNWJmOGMtNjljNy0z ZmJmLWI1YjEtMzUzOGM0NjMxNTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSBBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiKl3SRM8wbAHtzVPfbLXm/4oyourGzbazvn2oUlCBFQjUyZuX5NUq+ qbVfJIung7WSboJ4vmfONGUmte+oLEWVVg6C14hdnV0lOCc1mSP9iOvEYXl8rGcG eqyglpldNh09oUUuip3LexkwgbALeohlnkjizdCCkgVsR3N0trXQaW7+5UwmSYIA ndYZSC13g5x4+CdyOhTk8NU70niYXoEM9aQNpmLkaXeJSv1zTyY4hR9xO/3Eg7VV 3EvAKLjdLSmMNeVSCUUvGDMjUAXNa1ol+T7eXp+AXL384pjHF+mP7vUizUm+fPnl SRXQYj1/Q9duySRcU63zHiPCokT1deA= -----END CERTIFICATE-----Generated at Fri Oct 10 19:58:41 2025 by rpki-client