$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95ebfcdd-e246-31f5-bf4c-227b2114b836.roa File: 95ebfcdd-e246-31f5-bf4c-227b2114b836.roa (raw, json) Hash identifier: w0exqxAqObKisbbOCrctjaRkig4+RJKplQBqGUNGor0= Subject key identifier: 41:34:6D:E6:D8:E9:C8:D1:BA:3B:E8:57:7D:B7:ED:81:D6:7F:F2:EA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B21CC3E4907E1297AF52FEF80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95ebfcdd-e246-31f5-bf4c-227b2114b836.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 209.253.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:3e:49:07:e1:29:7a:f5:2f:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=a9f43cbd-b9a0-4f55-b5e6-51464a76fb41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:08:e8:77:ee:70:8b:c3:71:b9:a4:fb:e8:64: e7:44:fc:af:ad:39:be:3f:2d:2b:ad:46:2d:35:37: f7:26:72:d0:ae:f1:3c:71:7f:2c:33:0e:9b:79:2d: 98:2b:28:2c:ea:88:6f:a5:92:02:c7:92:84:23:87: 31:65:2a:dd:45:a8:90:02:b3:ed:45:30:0d:3d:67: de:46:a8:f2:ee:15:17:91:1a:11:83:76:b3:b7:e6: f1:f7:47:d5:a6:6c:63:47:4c:1c:fa:61:79:00:c1: 06:01:e4:82:c0:75:93:6f:b7:92:c9:bc:b0:ca:15: 9a:48:57:1d:de:f0:f9:db:37:b6:a8:c9:7a:c3:2b: 0d:1b:35:79:71:3f:8c:81:03:27:87:3e:f4:e4:a3: d7:96:aa:49:d8:ff:1e:35:58:cb:f4:93:a6:3d:b9: 75:52:7a:01:8f:89:e4:3f:27:1c:78:43:14:95:16: 25:69:48:90:43:f8:85:0e:16:ee:49:99:f7:93:95: 1b:7f:da:a8:47:e8:86:35:49:d1:85:8e:65:ac:7c: 16:6e:08:39:5d:03:a7:fc:e8:25:ef:9a:c2:13:e8: 8b:93:f6:ef:eb:b1:8b:94:7b:2b:c9:ce:fc:08:2f: 23:a4:c2:a3:8b:8b:88:3f:30:97:a3:bf:61:5c:89: 2c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:34:6D:E6:D8:E9:C8:D1:BA:3B:E8:57:7D:B7:ED:81:D6:7F:F2:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95ebfcdd-e246-31f5-bf4c-227b2114b836.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.253.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:95:c5:e0:8f:a7:d4:97:a7:0a:35:be:c6:35:de:36:47:e4: 83:08:ed:3f:80:fc:68:40:d7:b7:42:03:6e:fb:4a:ad:ea:11: a0:e9:83:8e:0a:e9:25:ae:82:9c:34:52:60:63:0f:61:ff:4a: 84:19:39:ad:57:34:88:c1:e9:0a:87:bf:23:eb:19:a2:ec:79: 20:71:d9:ab:20:ef:2e:34:0c:e7:d6:00:a2:16:da:d1:bd:32: 74:8b:f8:65:66:8d:7a:ff:a6:b1:bc:a3:c1:06:36:0b:4e:1b: b1:ca:ec:b2:cb:cc:ac:82:ed:f1:44:fb:f2:5d:6b:61:67:78: 2a:b5:93:72:01:fc:df:96:0a:dd:99:bd:27:97:41:4c:bd:5a: 21:5a:d2:d5:9e:c7:7a:f4:02:e6:17:6c:6d:67:e6:68:5b:d3: c5:23:74:17:42:63:cc:0c:06:01:45:81:44:27:e4:db:ee:bb: 9d:30:bb:8e:d7:39:1a:33:87:5d:01:08:6e:df:18:6a:49:25: b5:86:ec:e0:bb:00:a3:d4:7b:58:cd:6e:ba:1d:81:83:c2:81: 05:21:e5:6c:75:8d:57:35:9e:c5:4f:f4:46:b4:94:a0:4c:a0: c5:45:f9:d6:56:f4:7c:ed:85:2d:28:6c:77:44:ea:91:70:d7: 67:75:1c:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzD5JB+EpevUv74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk YTlmNDNjYmQtYjlhMC00ZjU1LWI1ZTYtNTE0NjRhNzZmYjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAjod+5wi8NxuaT76GTnRPyvrTm+Py0rrUYt NTf3JnLQrvE8cX8sMw6beS2YKygs6ohvpZICx5KEI4cxZSrdRaiQArPtRTANPWfe Rqjy7hUXkRoRg3azt+bx90fVpmxjR0wc+mF5AMEGAeSCwHWTb7eSybywyhWaSFcd 3vD52ze2qMl6wysNGzV5cT+MgQMnhz705KPXlqpJ2P8eNVjL9JOmPbl1UnoBj4nk PycceEMUlRYlaUiQQ/iFDhbuSZn3k5Ubf9qoR+iGNUnRhY5lrHwWbgg5XQOn/Ogl 75rCE+iLk/bv67GLlHsryc78CC8jpMKji4uIPzCXo79hXIks+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEE0bebY6cjRujvoV3237YHWf/LqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTVlYmZjZGQtZTI0Ni0z MWY1LWJmNGMtMjI3YjIxMTRiODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0f3qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaVxeCPp9SXpwo1vsY13jZH5IMI7T+A/GhA17dCA277Sq3qEaDpg44K 6SWugpw0UmBjD2H/SoQZOa1XNIjB6QqHvyPrGaLseSBx2asg7y40DOfWAKIW2tG9 MnSL+GVmjXr/prG8o8EGNgtOG7HK7LLLzKyC7fFE+/Jda2FneCq1k3IB/N+WCt2Z vSeXQUy9WiFa0tWex3r0AuYXbG1n5mhb08UjdBdCY8wMBgFFgUQn5Nvuu50wu47X ORozh10BCG7fGGpJJbWG7OC7AKPUe1jNbrodgYPCgQUh5Wx1jVc1nsVP9Ea0lKBM oMVF+dZW9HzthS0obHdE6pFw12d1HNc= -----END CERTIFICATE-----Generated at Fri Oct 10 20:06:48 2025 by rpki-client