$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/97341f8e-825c-3658-a5aa-76dd8e003791.roa File: 97341f8e-825c-3658-a5aa-76dd8e003791.roa (raw, json) Hash identifier: ZJSQVaUvVLF3jrqtKIaqLnqcdOpHBU7+OtcWq5fAkH4= Subject key identifier: E3:E5:02:94:66:7D:DB:55:FE:F4:75:04:46:52:BE:AE:56:4D:3F:DD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D02A77B5CF32330A44980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/97341f8e-825c-3658-a5aa-76dd8e003791.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 20337 IP address blocks: 205.232.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:02:a7:7b:5c:f3:23:30:a4:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=d5f89f5b-b167-48d9-9875-bd9df121d582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ff:95:c6:35:62:a0:bb:77:f9:7c:23:72:a9: ae:25:cd:e6:f8:65:62:92:b9:29:2a:68:89:90:70: ea:8d:da:2a:c6:9f:e3:41:5e:91:da:3a:35:e2:20: 00:a6:19:1d:e7:52:a5:39:53:4c:35:c9:3e:43:6d: f2:37:89:a5:1d:5f:a8:46:63:77:c5:8c:bb:a2:96: 65:4c:5b:eb:77:56:fe:7e:21:a4:f9:f9:55:d5:ec: 7f:98:59:40:79:59:70:24:5c:bb:ee:f0:73:ef:f2: 1b:2a:be:63:13:eb:11:87:c7:25:21:cc:81:67:6e: ee:8a:08:b5:85:ed:1f:cc:f6:28:48:6b:ed:53:10: fd:43:38:3e:c1:41:58:bf:ac:d3:5a:e6:dc:f8:de: 3c:ed:dc:b5:91:a0:c3:05:a8:b9:99:e5:0b:f1:f6: b4:b8:48:af:a7:93:b3:0e:bc:c4:b0:18:aa:38:9a: 20:26:94:90:1c:bb:3e:5d:bf:ee:4e:6b:90:94:d4: f5:4c:b8:fb:29:cd:b3:eb:f0:c0:be:25:4a:7f:89: 08:a8:dd:f9:e1:49:e3:49:ad:d7:4c:f4:81:f1:8a: 9c:cf:37:44:da:0e:63:86:42:2f:6c:a4:d8:c4:3d: 53:93:b3:36:ca:f0:70:d7:fa:d9:3a:d7:83:56:fa: be:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E5:02:94:66:7D:DB:55:FE:F4:75:04:46:52:BE:AE:56:4D:3F:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/97341f8e-825c-3658-a5aa-76dd8e003791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 205.232.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ed:a1:77:69:1c:90:29:13:87:77:93:a6:49:5f:41:ac:c0: cb:8d:47:d6:53:64:7e:4b:bf:f8:e3:d6:14:5e:86:93:9e:4d: 61:b4:0b:a4:49:83:97:b6:4f:a5:db:c5:92:f8:ae:25:c5:72: 93:8b:12:d5:67:67:f6:bd:17:3f:59:68:8c:6d:cf:b4:d5:b5: f9:fd:02:73:63:d0:ec:68:dd:1e:c7:5f:35:0c:61:e2:73:2b: 79:3b:0e:33:c4:0f:83:de:d7:a6:86:87:73:cf:8e:a4:3f:a8: aa:88:6d:7c:05:b0:02:51:52:1b:d6:7d:6f:c7:11:c7:b5:f3: c3:8b:e6:65:71:2d:b2:61:84:37:41:0b:81:ca:f7:65:ed:11: 90:e0:73:48:ce:ef:eb:3f:99:86:f1:55:02:bb:e7:3a:94:5b: 9b:68:5d:0c:30:7f:a8:c4:49:b3:9e:1d:23:fd:10:3d:02:5f: 28:54:da:54:8c:2d:33:1a:66:39:f2:73:ba:13:06:ae:5f:a1: b1:74:60:67:0a:f7:84:cf:8a:34:8f:f5:6d:f3:d0:f5:98:c2: 14:6b:86:e7:c3:5f:6b:b9:85:26:c2:2c:1e:2a:42:bd:57:9a: 4c:b5:0b:ab:f9:37:4c:06:6b:9d:9a:5d:8c:ee:1c:da:dd:68: db:2a:61:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQKne1zzIzCkSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZDVmODlmNWItYjE2Ny00OGQ5LTk4NzUtYmQ5ZGYxMjFkNTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/+VxjVioLt3+XwjcqmuJc3m+GVikrkpKmiJ kHDqjdoqxp/jQV6R2jo14iAAphkd51KlOVNMNck+Q23yN4mlHV+oRmN3xYy7opZl TFvrd1b+fiGk+flV1ex/mFlAeVlwJFy77vBz7/IbKr5jE+sRh8clIcyBZ27uigi1 he0fzPYoSGvtUxD9Qzg+wUFYv6zTWubc+N487dy1kaDDBai5meUL8fa0uEivp5Oz DrzEsBiqOJogJpSQHLs+Xb/uTmuQlNT1TLj7Kc2z6/DAviVKf4kIqN354UnjSa3X TPSB8YqczzdE2g5jhkIvbKTYxD1Tk7M2yvBw1/rZOteDVvq+nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPlApRmfdtV/vR1BEZSvq5WTT/dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTczNDFmOGUtODI1Yy0z NjU4LWE1YWEtNzZkZDhlMDAzNzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzegcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrtoXdpHJApE4d3k6ZJX0GswMuNR9ZTZH5Lv/jj1hRehpOeTWG0C6RJ g5e2T6XbxZL4riXFcpOLEtVnZ/a9Fz9ZaIxtz7TVtfn9AnNj0Oxo3R7HXzUMYeJz K3k7DjPED4Pe16aGh3PPjqQ/qKqIbXwFsAJRUhvWfW/HEce188OL5mVxLbJhhDdB C4HK92XtEZDgc0jO7+s/mYbxVQK75zqUW5toXQwwf6jESbOeHSP9ED0CXyhU2lSM LTMaZjnyc7oTBq5fobF0YGcK94TPijSP9W3z0PWYwhRrhufDX2u5hSbCLB4qQr1X mky1C6v5N0wGa52aXYzuHNrdaNsqYYw= -----END CERTIFICATE-----Generated at Fri Oct 10 20:08:43 2025 by rpki-client