$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ba6d7d2-c75a-3636-a5c5-2e757fcaa28b.roa File: 9ba6d7d2-c75a-3636-a5c5-2e757fcaa28b.roa (raw, json) Hash identifier: Bxa9+cuKjU+uC1PPtHKtQFtteiJRfT4ghpKxCG24rFk= Subject key identifier: 96:16:03:81:7B:58:DB:37:45:34:01:C3:80:57:E1:11:5E:29:65:C1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC9732AEB2DCD085A6D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ba6d7d2-c75a-3636-a5c5-2e757fcaa28b.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 209.165.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c9:73:2a:eb:2d:cd:08:5a:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=c2942ccf-6403-47e1-848f-faaed0005932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a6:f2:e2:ff:43:ac:9b:cd:f6:60:de:ff:da: 9e:9e:e2:88:ef:b3:16:45:c0:30:90:5a:07:64:2a: 97:e6:f8:da:d7:02:74:d8:92:10:05:11:c6:3c:26: fb:d2:f8:f2:36:7c:f2:b0:1b:7e:1e:0b:14:e6:c3: 8c:bc:b2:29:dc:e7:55:70:f6:22:7a:a8:83:1a:4f: db:69:65:21:6a:e1:97:09:4e:37:61:25:96:5b:68: be:01:f1:79:96:df:4d:f5:8c:85:07:25:0e:fd:68: fd:84:f7:23:b2:39:8c:15:f5:0e:60:6b:15:37:d5: 07:17:17:ab:54:6f:e2:56:54:59:cd:fd:cd:8f:f1: 0f:f0:4e:c2:61:7c:fa:67:66:15:3e:cd:14:3e:c5: 00:db:7c:03:83:9c:a6:42:59:da:f4:55:bf:35:86: 95:c0:de:d9:2f:ea:5d:6a:e9:3d:fa:32:07:c1:bc: 46:ff:cf:0b:78:47:6c:c2:c8:f8:78:a4:11:74:87: cd:32:c4:ff:52:ab:98:c2:99:00:b2:b8:03:a7:98: d9:86:f0:61:d8:7c:59:0c:05:ad:62:2f:a4:4f:73: 7c:be:59:5c:82:68:95:5b:44:f0:32:c8:f8:69:55: 38:15:ef:4f:ef:22:e8:26:90:92:99:8f:dd:50:6c: a0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:16:03:81:7B:58:DB:37:45:34:01:C3:80:57:E1:11:5E:29:65:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ba6d7d2-c75a-3636-a5c5-2e757fcaa28b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.165.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:37:56:bf:1b:ff:30:5f:f3:17:61:2c:b3:bc:f7:64:8b:54: 0d:96:3b:24:ba:e3:5a:4b:43:c8:e6:33:d9:cf:f4:dc:c7:9d: f1:0c:9d:ea:fb:d2:94:7e:49:ce:0c:46:4a:27:f2:63:74:85: 42:6a:f8:a6:49:e6:c6:ea:76:3e:e9:75:fd:03:1c:a1:a7:00: 73:41:1b:b9:c4:7b:ef:52:0e:a8:51:c3:97:d0:2d:ed:e6:72: be:50:f7:f7:8b:b6:3c:40:ad:53:d4:46:be:eb:78:96:74:12: 03:80:99:4c:0d:fd:d7:6c:af:44:22:ac:b1:04:ff:de:d8:a1: e3:99:9b:3e:b4:fc:6a:c1:c1:05:53:d1:50:6b:8e:9b:f1:18: a8:a7:5f:52:7d:17:29:7b:7c:c1:0e:0e:59:8c:4a:3e:44:a0: 17:f7:f6:bb:2b:a5:6b:3c:7e:84:8b:39:eb:3b:66:1f:05:03: 92:cb:7a:df:e5:79:f4:82:bc:60:dc:75:4c:1e:55:b2:95:35: 93:86:a6:a4:11:b2:aa:5c:41:00:6a:1b:7f:35:67:a4:b7:7c: f9:5f:61:9a:2e:b7:bb:c0:3e:55:b3:ae:bf:c3:d4:31:1c:77: 54:b2:98:9a:0f:ef:ad:18:97:45:b4:14:15:e5:93:a3:62:1c: 1e:d5:4d:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMlzKustzQhabQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YzI5NDJjY2YtNjQwMy00N2UxLTg0OGYtZmFhZWQwMDA1OTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6by4v9DrJvN9mDe/9qenuKI77MWRcAwkFoH ZCqX5vja1wJ02JIQBRHGPCb70vjyNnzysBt+HgsU5sOMvLIp3OdVcPYieqiDGk/b aWUhauGXCU43YSWWW2i+AfF5lt9N9YyFByUO/Wj9hPcjsjmMFfUOYGsVN9UHFxer VG/iVlRZzf3Nj/EP8E7CYXz6Z2YVPs0UPsUA23wDg5ymQlna9FW/NYaVwN7ZL+pd auk9+jIHwbxG/88LeEdswsj4eKQRdIfNMsT/UquYwpkAsrgDp5jZhvBh2HxZDAWt Yi+kT3N8vllcgmiVW0TwMsj4aVU4Fe9P7yLoJpCSmY/dUGygUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYWA4F7WNs3RTQBw4BX4RFeKWXBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWJhNmQ3ZDItYzc1YS0z NjM2LWE1YzUtMmU3NTdmY2FhMjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAc3Vr8b/zBf8xdhLLO892SLVA2WOyS641pLQ8jmM9nP9NzHnfEMner7 0pR+Sc4MRkon8mN0hUJq+KZJ5sbqdj7pdf0DHKGnAHNBG7nEe+9SDqhRw5fQLe3m cr5Q9/eLtjxArVPURr7reJZ0EgOAmUwN/ddsr0QirLEE/97YoeOZmz60/GrBwQVT 0VBrjpvxGKinX1J9Fyl7fMEODlmMSj5EoBf39rsrpWs8foSLOes7Zh8FA5LLet/l efSCvGDcdUweVbKVNZOGpqQRsqpcQQBqG381Z6S3fPlfYZout7vAPlWzrr/D1DEc d1SymJoP760Yl0W0FBXlk6NiHB7VTTY= -----END CERTIFICATE-----Generated at Sat Oct 11 06:15:29 2025 by rpki-client