$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bcc0d9b-2e88-3b4a-8bc5-72a66c617059.roa File: 8bcc0d9b-2e88-3b4a-8bc5-72a66c617059.roa (raw, json) Hash identifier: xV0u8HSN6OxJbBoy+6F9HU3kNXTAi0IFCxrmY5oM3xk= Subject key identifier: 8F:D6:9C:36:3A:35:BF:B3:6E:F5:78:E3:2A:5F:79:CB:8D:FB:DC:E7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D03183A4BE8B97901F760 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bcc0d9b-2e88-3b4a-8bc5-72a66c617059.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 22773 IP address blocks: 151.213.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:03:18:3a:4b:e8:b9:79:01:f7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=3279c076-2c80-4234-87c8-46d986ad01d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d7:f5:47:03:5d:a2:c8:33:9e:74:71:43:da: 96:83:ff:7e:1d:da:5b:9f:66:fb:f2:9a:56:eb:63: b9:b9:1e:95:64:57:2f:41:7b:e5:fb:45:7f:de:58: c4:30:35:10:18:3c:8c:07:6c:91:d9:7a:8f:fe:69: a7:af:97:20:94:81:ff:2f:cd:d6:06:9c:e8:8b:d3: a6:84:93:14:bc:cf:b9:a5:1c:b5:f0:41:9f:3c:c3: b3:86:4b:c5:8a:aa:ca:d3:74:38:f4:ef:1e:2f:2b: 45:b8:17:91:dd:7a:07:35:e6:12:f8:47:56:d5:63: ab:96:8c:00:c7:af:f8:a8:06:cb:74:a4:bd:77:1a: b1:11:be:d4:84:0c:e5:3e:76:42:0b:95:62:4d:f3: 2c:c9:46:bd:05:14:29:fa:04:6f:4f:92:88:77:bf: 47:e3:ca:01:f7:5d:a1:61:0a:05:5c:e8:29:cd:9c: 92:4b:d7:c9:34:df:12:e9:f4:90:c8:e1:f4:22:2f: a7:25:07:fe:32:a8:7a:d4:d4:ff:ba:0f:9a:f5:ef: 3e:f2:94:0e:00:ff:83:dd:d2:97:0c:0c:39:04:cf: f4:b3:4d:bd:b0:d1:f5:de:3f:52:74:9d:0d:36:f3: 99:d1:03:38:67:ff:f6:ad:f9:84:a9:f1:f3:57:6d: b8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D6:9C:36:3A:35:BF:B3:6E:F5:78:E3:2A:5F:79:CB:8D:FB:DC:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bcc0d9b-2e88-3b4a-8bc5-72a66c617059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:08:0b:71:8c:f4:d3:6e:2d:3e:7b:c3:1a:82:fd:11:30:bc: f4:73:e5:01:14:b8:95:97:a3:e4:ef:41:65:b6:1e:a1:3f:d6: 79:f5:55:47:7d:7b:da:dc:f3:8c:33:28:87:ed:21:61:12:9e: a7:af:d9:d5:6a:36:e3:61:38:7d:a2:98:70:89:40:0e:48:5a: 2f:61:87:34:40:b7:bf:a5:f3:a9:82:41:ba:13:d4:2f:c9:c1: 28:4c:d4:f6:f2:ee:20:f7:54:f0:19:6f:68:b5:5f:72:32:8c: 07:38:de:97:60:b2:0e:0f:9d:4d:d0:50:6b:d9:05:5d:25:f2: d9:3b:15:2f:eb:6b:c0:1e:ff:c9:be:af:a3:94:63:4e:f7:d2: d8:bc:d0:5f:64:23:8e:99:2d:97:ea:b2:d5:3b:6c:2c:33:a9: 07:a9:4a:59:7d:38:10:7c:7b:55:42:2e:67:6b:ab:d5:a4:da: f6:df:80:4d:50:86:3a:c1:92:bb:75:71:9c:6e:ff:4c:84:a0: 67:ed:14:53:df:f6:15:63:24:1b:6d:9b:ab:81:44:fa:82:0d: 57:f7:cc:1c:7b:69:37:84:dd:83:dc:8c:a4:03:91:61:3f:46: 30:93:02:fd:57:70:56:3c:9d:37:14:23:99:7b:b8:7f:0a:be: d2:6d:c7:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQMYOkvouXkB92AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MzI3OWMwNzYtMmM4MC00MjM0LTg3YzgtNDZkOTg2YWQwMWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdf1RwNdosgznnRxQ9qWg/9+Hdpbn2b78ppW 62O5uR6VZFcvQXvl+0V/3ljEMDUQGDyMB2yR2XqP/mmnr5cglIH/L83WBpzoi9Om hJMUvM+5pRy18EGfPMOzhkvFiqrK03Q49O8eLytFuBeR3XoHNeYS+EdW1WOrlowA x6/4qAbLdKS9dxqxEb7UhAzlPnZCC5ViTfMsyUa9BRQp+gRvT5KId79H48oB912h YQoFXOgpzZySS9fJNN8S6fSQyOH0Ii+nJQf+Mqh61NT/ug+a9e8+8pQOAP+D3dKX DAw5BM/0s029sNH13j9SdJ0NNvOZ0QM4Z//2rfmEqfHzV224qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/WnDY6Nb+zbvV44ypfecuN+9znMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGJjYzBkOWItMmU4OC0z YjRhLThiYzUtNzJhNjZjNjE3MDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl9V/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQIC3GM9NNuLT57wxqC/REwvPRz5QEUuJWXo+TvQWW2HqE/1nn1VUd9 e9rc84wzKIftIWESnqev2dVqNuNhOH2imHCJQA5IWi9hhzRAt7+l86mCQboT1C/J wShM1Pby7iD3VPAZb2i1X3IyjAc43pdgsg4PnU3QUGvZBV0l8tk7FS/ra8Ae/8m+ r6OUY0730ti80F9kI46ZLZfqstU7bCwzqQepSll9OBB8e1VCLmdrq9Wk2vbfgE1Q hjrBkrt1cZxu/0yEoGftFFPf9hVjJBttm6uBRPqCDVf3zBx7aTeE3YPcjKQDkWE/ RjCTAv1XcFY8nTcUI5l7uH8KvtJtx74= -----END CERTIFICATE-----Generated at Fri Oct 10 17:57:19 2025 by rpki-client