$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8fe85862-c43f-3109-ac36-36ce14128779.roa File: 8fe85862-c43f-3109-ac36-36ce14128779.roa (raw, json) Hash identifier: gPvpUgTFth5UG3LMspX23U/Q5l5bmOYveVCoXkRNwOY= Subject key identifier: 04:27:25:3B:28:C9:C5:84:84:1F:9E:3B:10:BB:37:B5:3B:61:73:69 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC59CDBF4D8EA39C19B40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8fe85862-c43f-3109-ac36-36ce14128779.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 139.55.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c5:9c:db:f4:d8:ea:39:c1:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=0c8d7f5f-25ac-4c1c-93c8-64f74359da59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:55:2a:ef:cc:f3:bf:b6:ff:16:90:e0:ed:b1: cf:13:be:31:5f:45:74:a4:f4:86:93:d1:79:95:0f: c3:08:5c:84:10:64:6d:1c:23:a4:17:9e:b7:e7:2a: b8:d3:59:94:0c:64:07:01:ca:71:24:44:b4:e6:d9: ab:b3:09:ef:6b:92:05:83:c2:3b:79:06:82:15:9f: 64:58:85:1c:23:cd:ff:d0:a1:e0:b7:54:74:96:91: b9:b8:93:b1:0c:6c:86:77:cb:62:a4:3e:eb:31:c9: 7b:52:b0:c0:91:77:b8:8d:fd:da:37:ee:41:f8:ac: 3a:a1:20:a2:4a:80:f6:dc:44:19:20:40:78:be:a9: 95:98:37:62:d8:77:7f:a8:b5:69:c4:72:6f:4a:9d: 62:f3:e2:2e:34:0e:6a:44:dc:bc:e2:c9:57:44:4d: 34:4f:c3:a4:05:23:ad:a4:db:e0:ba:4b:6f:79:3e: e0:fd:75:c6:1e:80:aa:8d:39:ff:97:32:4e:4e:b5: aa:68:ec:d2:41:4e:9d:ee:67:7d:23:fe:a5:57:e3: 17:1b:63:41:88:8f:5c:f5:4f:42:52:f9:f6:3b:d4: a9:a1:fe:e0:ed:bd:9d:b1:ed:64:82:7c:6f:30:c8: 0f:d0:64:ef:06:4b:35:cc:f7:23:24:b1:6e:74:0d: 5e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:27:25:3B:28:C9:C5:84:84:1F:9E:3B:10:BB:37:B5:3B:61:73:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8fe85862-c43f-3109-ac36-36ce14128779.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 139.55.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:8b:fe:e4:11:34:29:17:63:ff:8a:fe:21:db:58:51:09:d6: 9f:5d:a1:0c:52:6c:6c:94:f7:a4:95:8a:1f:6a:65:1c:85:3a: 44:d6:e9:d4:6e:54:4a:99:a8:76:ef:71:de:06:4f:88:41:4b: 51:db:d1:8b:87:6f:60:68:96:38:db:84:38:36:ce:de:d7:1c: 39:c4:48:fb:96:17:2a:9d:78:e3:2c:80:38:22:f0:4d:66:76: 3b:7d:5a:5f:aa:7b:1b:b2:b3:37:1d:8a:e4:9b:f3:90:11:16: c5:cf:c9:66:42:96:13:b4:31:25:40:d2:10:8c:47:83:0a:94: 1c:b8:a3:d2:51:b3:c9:da:cd:2e:e3:37:63:7d:b7:5a:03:3c: a3:60:6e:1b:43:21:9b:02:fb:46:a9:98:ea:73:ef:99:75:61: 92:a0:52:07:7d:80:34:8b:ee:78:12:80:cc:66:d9:1f:40:7c: 4c:ef:9d:bc:5d:d4:0c:6d:44:1a:48:e9:98:bf:a2:98:32:ca: 1e:f3:5c:8d:d8:38:3b:b2:25:7c:96:6c:6a:c0:3c:f5:57:e1: 3b:0a:dc:b9:19:d6:96:02:8f:91:4b:6d:a3:a4:bd:9b:12:69: 4f:b5:45:59:a7:b9:46:2d:81:30:dd:a0:3c:e0:dc:83:ee:be: e4:f9:34:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMWc2/TY6jnBm0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MGM4ZDdmNWYtMjVhYy00YzFjLTkzYzgtNjRmNzQzNTlkYTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlUq78zzv7b/FpDg7bHPE74xX0V0pPSGk9F5 lQ/DCFyEEGRtHCOkF5635yq401mUDGQHAcpxJES05tmrswnva5IFg8I7eQaCFZ9k WIUcI83/0KHgt1R0lpG5uJOxDGyGd8tipD7rMcl7UrDAkXe4jf3aN+5B+Kw6oSCi SoD23EQZIEB4vqmVmDdi2Hd/qLVpxHJvSp1i8+IuNA5qRNy84slXRE00T8OkBSOt pNvguktveT7g/XXGHoCqjTn/lzJOTrWqaOzSQU6d7md9I/6lV+MXG2NBiI9c9U9C Uvn2O9Spof7g7b2dse1kgnxvMMgP0GTvBks1zPcjJLFudA1eHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQnJTsoycWEhB+eOxC7N7U7YXNpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGZlODU4NjItYzQzZi0z MTA5LWFjMzYtMzZjZTE0MTI4Nzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBizeuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGL/uQRNCkXY/+K/iHbWFEJ1p9doQxSbGyU96SVih9qZRyFOkTW6dRu VEqZqHbvcd4GT4hBS1Hb0YuHb2BoljjbhDg2zt7XHDnESPuWFyqdeOMsgDgi8E1m djt9Wl+qexuyszcdiuSb85ARFsXPyWZClhO0MSVA0hCMR4MKlBy4o9JRs8nazS7j N2N9t1oDPKNgbhtDIZsC+0apmOpz75l1YZKgUgd9gDSL7ngSgMxm2R9AfEzvnbxd 1AxtRBpI6Zi/opgyyh7zXI3YODuyJXyWbGrAPPVX4TsK3LkZ1pYCj5FLbaOkvZsS aU+1RVmnuUYtgTDdoDzg3IPuvuT5NOY= -----END CERTIFICATE-----Generated at Fri Oct 10 17:50:54 2025 by rpki-client