$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9aa4f300-a17b-342b-9e82-bc41990922ff.roa File: 9aa4f300-a17b-342b-9e82-bc41990922ff.roa (raw, json) Hash identifier: jZWP0xHZkjvp1cSxO/ucDghsvDAdUnlwxZP3zUdx/dg= Subject key identifier: 22:FF:5F:83:93:88:F7:C2:E1:70:55:C1:5D:47:9B:3D:2F:C6:DC:7C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2CAA13DDA9C21B6CF413C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9aa4f300-a17b-342b-9e82-bc41990922ff.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 173.187.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:aa:13:dd:a9:c2:1b:6c:f4:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=61ce9dff-f335-4b85-84c6-adc3861def55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6c:1f:78:60:00:01:6f:54:ff:7f:e4:db:65: 5e:44:9e:85:57:92:cd:34:56:eb:c2:d8:d6:33:ac: 31:20:c2:ec:fb:49:ba:b7:ed:37:a2:fb:77:f2:11: 3a:12:d6:a9:91:d1:4a:b7:11:2f:da:8b:82:46:8c: 2b:74:7b:d9:e4:5b:7a:27:74:ab:67:61:f1:fe:8c: 7f:f3:45:c8:d5:d6:ed:9b:1c:0c:69:98:71:64:27: 80:6c:7b:84:a7:5b:04:15:96:2f:c4:1c:92:bf:51: 22:d0:16:67:a1:94:fa:25:00:90:3d:4d:79:ae:70: 6f:4c:3c:a3:7f:48:d1:19:4b:49:51:e6:3e:5f:30: 38:0d:73:3a:35:d6:18:77:57:b8:a3:1d:e6:8c:12: f0:a6:95:9b:e2:e8:45:84:25:14:95:12:29:96:80: d3:8e:9d:07:92:22:17:20:11:54:68:7f:a3:f5:b6: a8:09:af:3e:6e:56:1d:0e:f1:7f:44:5c:9b:5a:db: 41:82:2c:15:be:d4:16:de:78:bd:9f:b2:78:2d:f1: a2:16:59:fd:93:0c:a4:14:54:38:92:99:42:64:19: c3:f9:b8:51:70:66:94:5e:70:5d:37:0e:56:a6:80: 42:87:a6:3b:f3:95:d4:c5:63:7e:df:b3:96:fc:2a: 25:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FF:5F:83:93:88:F7:C2:E1:70:55:C1:5D:47:9B:3D:2F:C6:DC:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9aa4f300-a17b-342b-9e82-bc41990922ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:29:58:05:18:ab:44:05:52:1f:bc:e1:aa:5e:a2:f3:52:f2: c1:05:ae:38:e8:d6:57:b6:05:23:5d:21:fe:cc:ba:d0:0b:17: f9:1a:dc:13:79:4d:5b:6c:c5:a6:c5:67:25:ab:91:8f:93:51: eb:3c:60:e9:a1:1f:be:53:ea:1b:cd:d7:05:03:10:cc:7b:d3: a5:d8:b5:89:47:aa:3d:d4:59:b1:f5:fa:66:ae:a0:f3:c5:3e: b3:5e:90:90:ff:f6:1f:6b:fd:dd:93:4c:d0:5a:66:0b:73:4b: c8:de:f2:b3:0d:b7:81:c2:7c:db:33:8d:fb:c2:9b:0c:30:c5: 89:dc:40:fe:60:7a:51:ff:95:df:9b:73:be:c3:28:81:7e:20: d2:a1:13:3b:e3:5e:6e:53:37:07:da:bb:ac:31:82:ac:66:23: 12:25:3c:24:96:6e:18:12:db:b6:23:c5:40:32:96:be:a4:95: 53:29:13:49:0b:cb:d1:2f:be:e8:42:47:c3:c1:7c:87:98:1b: ea:b8:45:1b:32:57:6a:1f:1a:b1:c1:38:e5:fc:62:1d:63:20: 4b:65:1a:27:f3:ff:57:25:87:ed:92:0e:c7:71:06:09:e2:77: dd:d0:76:ae:71:2d:e4:f2:75:88:1c:58:65:ea:9a:62:5c:31: ca:44:27:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLKoT3anCG2z0E8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NjFjZTlkZmYtZjMzNS00Yjg1LTg0YzYtYWRjMzg2MWRlZjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWwfeGAAAW9U/3/k22VeRJ6FV5LNNFbrwtjW M6wxIMLs+0m6t+03ovt38hE6EtapkdFKtxEv2ouCRowrdHvZ5Ft6J3SrZ2Hx/ox/ 80XI1dbtmxwMaZhxZCeAbHuEp1sEFZYvxBySv1Ei0BZnoZT6JQCQPU15rnBvTDyj f0jRGUtJUeY+XzA4DXM6NdYYd1e4ox3mjBLwppWb4uhFhCUUlRIploDTjp0HkiIX IBFUaH+j9baoCa8+blYdDvF/RFybWttBgiwVvtQW3ni9n7J4LfGiFln9kwykFFQ4 kplCZBnD+bhRcGaUXnBdNw5WpoBCh6Y785XUxWN+37OW/ColZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCL/X4OTiPfC4XBVwV1Hmz0vxtx8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWFhNGYzMDAtYTE3Yi0z NDJiLTllODItYmM0MTk5MDkyMmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkpWAUYq0QFUh+84apeovNS8sEFrjjo1le2BSNdIf7MutALF/ka3BN5 TVtsxabFZyWrkY+TUes8YOmhH75T6hvN1wUDEMx706XYtYlHqj3UWbH1+mauoPPF PrNekJD/9h9r/d2TTNBaZgtzS8je8rMNt4HCfNszjfvCmwwwxYncQP5gelH/ld+b c77DKIF+INKhEzvjXm5TNwfau6wxgqxmIxIlPCSWbhgS27YjxUAylr6klVMpE0kL y9EvvuhCR8PBfIeYG+q4RRsyV2ofGrHBOOX8Yh1jIEtlGifz/1clh+2SDsdxBgni d93Qdq5xLeTydYgcWGXqmmJcMcpEJ4M= -----END CERTIFICATE-----Generated at Sat Oct 11 00:10:20 2025 by rpki-client