$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9118ec86-ecfb-368d-a110-dbd439c0a3f7.roa File: 9118ec86-ecfb-368d-a110-dbd439c0a3f7.roa (raw, json) Hash identifier: Xm0awqqY0YlF2OhIMT+42gR4xfYRvsYd5/04182frHw= Subject key identifier: 74:1B:E5:9B:89:FC:5E:A3:A6:F4:EA:DC:D9:6E:6F:06:41:30:E4:29 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CD4DBFCFECF9BA82ADEE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9118ec86-ecfb-368d-a110-dbd439c0a3f7.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 40399 IP address blocks: 205.232.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:d4:db:fc:fe:cf:9b:a8:2a:de:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=3a90bf91-6de2-42e3-abf7-f772b7b299e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:66:85:2d:c7:82:4e:8f:4e:4f:ad:dd:eb:c1: 27:b9:c4:5f:85:aa:92:0d:f7:2f:ce:65:c6:8e:af: c7:4a:5e:6f:ad:40:d6:3a:6f:b3:96:c8:6f:63:1a: 10:d0:f5:59:53:20:20:9d:8e:4b:21:90:07:12:fb: a4:12:f1:4e:a8:25:a7:80:15:02:a3:73:59:66:11: f2:69:62:06:c7:eb:dd:5a:96:f5:04:41:db:6d:8b: a9:d0:06:5f:43:89:81:81:05:4f:c6:47:ba:3a:55: cf:3d:6e:d7:3a:6f:ce:2f:b7:ad:22:c2:bc:dc:80: 3b:7b:cc:e9:fe:97:6e:a3:53:ae:65:7a:26:99:9c: 3a:1f:3f:1d:9d:8d:c3:40:78:6d:1e:52:22:75:8a: af:66:03:4c:d6:76:f6:66:8d:3a:de:95:12:17:28: 91:aa:61:b6:16:06:ef:bd:94:e6:ad:d8:22:c9:e1: 1c:38:49:05:94:73:15:8f:dd:ff:e9:d4:7b:db:30: 25:c2:e7:8c:1e:89:1c:8a:d4:35:ae:cb:08:5a:7c: 79:f7:75:f6:29:8a:18:70:15:e8:01:46:d6:e2:cc: bc:e6:17:97:a4:2c:87:68:c2:75:c8:13:13:e4:f7: 11:8c:ee:04:93:7d:d2:99:6f:6c:27:9c:dc:bb:a0: 34:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:1B:E5:9B:89:FC:5E:A3:A6:F4:EA:DC:D9:6E:6F:06:41:30:E4:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9118ec86-ecfb-368d-a110-dbd439c0a3f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 205.232.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:3b:f0:5a:a6:b2:5d:13:ed:f9:29:b6:ea:74:de:d1:af:0e: 35:91:9f:98:32:6d:95:b3:35:cb:53:9d:5a:5d:40:b4:cc:20: 84:d5:83:75:ae:7b:65:ff:79:15:36:3f:2c:74:e3:06:f8:7d: d4:12:09:ee:1e:c6:50:4f:22:b8:92:7f:39:c7:79:04:28:0c: fc:14:87:f8:a2:c2:74:d1:15:24:0d:63:a0:84:48:68:82:92: dd:d6:7a:92:47:86:42:f8:54:8d:12:23:00:ca:ac:8f:08:2c: 8b:3b:95:ab:77:0f:75:26:42:3a:3b:bb:79:8e:d1:55:75:8f: ed:12:cd:2c:a6:57:07:f9:c8:14:76:6e:76:b7:ba:c1:d4:96: bc:81:8f:04:75:25:a3:cf:83:f6:ad:dd:ab:78:0b:44:d3:cc: 4a:27:f5:4a:7c:b0:ab:04:54:c9:cf:8f:5c:be:89:8b:19:18: dc:a5:0a:62:b1:ba:94:0e:3e:3a:05:0d:95:dd:a0:ca:cc:8f: 4b:35:5a:c1:da:b9:43:ca:8a:ee:a3:d8:05:67:63:d8:e2:ae: fb:d0:b2:a9:06:df:d9:85:fa:2f:02:7b:fc:28:7c:39:9a:7a: 88:71:0c:e0:96:db:ae:69:fe:82:76:7a:98:40:86:82:fa:da: 21:3e:b7:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXNTb/P7Pm6gq3uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk M2E5MGJmOTEtNmRlMi00MmUzLWFiZjctZjc3MmI3YjI5OWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGaFLceCTo9OT63d68EnucRfhaqSDfcvzmXG jq/HSl5vrUDWOm+zlshvYxoQ0PVZUyAgnY5LIZAHEvukEvFOqCWngBUCo3NZZhHy aWIGx+vdWpb1BEHbbYup0AZfQ4mBgQVPxke6OlXPPW7XOm/OL7etIsK83IA7e8zp /pduo1OuZXommZw6Hz8dnY3DQHhtHlIidYqvZgNM1nb2Zo063pUSFyiRqmG2Fgbv vZTmrdgiyeEcOEkFlHMVj93/6dR72zAlwueMHokcitQ1rssIWnx593X2KYoYcBXo AUbW4sy85heXpCyHaMJ1yBMT5PcRjO4Ek33SmW9sJ5zcu6A0DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQb5ZuJ/F6jpvTq3NlubwZBMOQpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTExOGVjODYtZWNmYi0z NjhkLWExMTAtZGJkNDM5YzBhM2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzeiMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEw78Fqmsl0T7fkptup03tGvDjWRn5gybZWzNctTnVpdQLTMIITVg3Wu e2X/eRU2Pyx04wb4fdQSCe4exlBPIriSfznHeQQoDPwUh/iiwnTRFSQNY6CESGiC kt3WepJHhkL4VI0SIwDKrI8ILIs7lat3D3UmQjo7u3mO0VV1j+0SzSymVwf5yBR2 bna3usHUlryBjwR1JaPPg/at3at4C0TTzEon9Up8sKsEVMnPj1y+iYsZGNylCmKx upQOPjoFDZXdoMrMj0s1WsHauUPKiu6j2AVnY9jirvvQsqkG39mF+i8Ce/wofDma eohxDOCW265p/oJ2ephAhoL62iE+t2k= -----END CERTIFICATE-----Generated at Fri Oct 10 19:48:39 2025 by rpki-client