$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a19b8d1c-fd09-3ef6-ae5f-e6cf0a46e5d5.roa File: a19b8d1c-fd09-3ef6-ae5f-e6cf0a46e5d5.roa (raw, json) Hash identifier: LItALu/ooy4irSktC5QkdwTowa0iBox3N0RDfHdNQk0= Subject key identifier: 53:5B:5E:B1:6C:25:84:30:61:CA:E2:AF:DD:6D:9F:03:06:73:51:52 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2CA54069B1E593710C8440 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a19b8d1c-fd09-3ef6-ae5f-e6cf0a46e5d5.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 67.140.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:a5:40:69:b1:e5:93:71:0c:84:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=0dedf1d7-50cb-4b1f-af9d-3a9cf8227868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fe:80:97:13:17:46:28:f1:61:6f:ab:7a:4f: 70:cd:62:81:33:42:d8:2b:69:dc:fc:04:ca:0d:62: 76:58:e1:37:b5:f1:95:7d:75:30:48:dd:ec:b6:7a: 57:68:6d:fb:30:81:4d:c4:f4:2e:f3:76:3b:01:8e: 20:2c:47:4c:9d:a7:ac:e6:4b:1a:57:d2:dc:72:d4: 1f:bf:7b:31:7a:f7:0a:ee:a6:52:b1:da:7d:6a:30: 0b:3f:be:7f:d1:4b:29:57:2d:51:1b:93:b2:c9:f2: 00:50:bf:d0:04:79:46:13:0e:28:30:39:56:e3:43: 40:a9:b7:66:09:bf:e6:25:34:0b:49:51:da:e7:e8: 6c:bc:c7:e7:5e:ac:8a:db:20:3e:5d:23:7a:d1:87: aa:9d:d2:f0:99:69:8e:09:1d:b7:ca:d9:55:0c:fb: 35:75:fe:57:98:3d:66:b1:8f:0d:fe:91:63:7a:6d: 75:ef:07:eb:9d:6c:b2:eb:58:ac:42:f9:0f:11:bc: d4:87:3d:82:89:58:fa:90:ff:b1:f1:e7:4b:0d:2f: 46:c3:8a:bf:2d:b8:0d:a4:35:a1:a1:80:dc:4d:85: 51:19:27:91:80:7c:23:ed:27:33:a0:a4:66:d6:68: 97:3f:d0:64:a9:a5:90:df:33:9a:2d:a1:85:46:5c: 53:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5B:5E:B1:6C:25:84:30:61:CA:E2:AF:DD:6D:9F:03:06:73:51:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a19b8d1c-fd09-3ef6-ae5f-e6cf0a46e5d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:07:c7:52:54:3d:e7:62:5d:8c:c6:d1:50:f5:1a:46:c0:ea: 3b:af:65:11:cc:8f:bf:d4:9e:56:b6:2d:c2:f8:69:d9:31:f2: 0f:d5:6c:4b:d5:89:6c:19:93:7c:45:f6:d5:b7:e0:8e:d4:ff: a6:b7:18:9a:8a:3d:d7:c7:30:80:b8:9f:62:e5:ed:b8:e8:7b: e8:a3:d0:12:20:55:b1:85:25:01:c1:75:09:dd:76:20:ed:fc: fb:da:99:5d:de:94:61:e2:13:cb:30:27:5e:c5:5f:5b:d9:46: cc:a3:ca:da:7d:f0:ad:fc:ce:24:0f:83:89:5e:0d:14:f6:05: a0:aa:ce:82:4a:67:3c:21:31:32:6c:eb:e8:a8:d1:09:64:30: b2:18:59:95:fa:e0:e7:3f:b0:20:8a:04:dd:fe:4a:7d:79:c1: 5b:e8:b7:7a:59:4c:3c:91:7d:2e:79:52:64:f6:3e:b3:8c:a8: b5:16:65:5c:98:4c:a7:6c:0f:42:06:13:d2:86:8a:11:48:06: bc:bf:a7:20:a8:30:07:e1:5e:e3:54:2a:93:48:96:29:c6:7a: b9:58:41:31:49:1c:93:d2:04:8c:c1:52:19:12:f1:ff:2a:20: 19:03:2b:d7:78:bb:72:e3:d1:86:3d:cb:1a:31:a7:9c:11:71: dc:58:f4:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLKVAabHlk3EMhEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MGRlZGYxZDctNTBjYi00YjFmLWFmOWQtM2E5Y2Y4MjI3ODY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP6AlxMXRijxYW+rek9wzWKBM0LYK2nc/ATK DWJ2WOE3tfGVfXUwSN3stnpXaG37MIFNxPQu83Y7AY4gLEdMnaes5ksaV9LcctQf v3sxevcK7qZSsdp9ajALP75/0UspVy1RG5OyyfIAUL/QBHlGEw4oMDlW40NAqbdm Cb/mJTQLSVHa5+hsvMfnXqyK2yA+XSN60YeqndLwmWmOCR23ytlVDPs1df5XmD1m sY8N/pFjem117wfrnWyy61isQvkPEbzUhz2CiVj6kP+x8edLDS9Gw4q/LbgNpDWh oYDcTYVRGSeRgHwj7SczoKRm1miXP9BkqaWQ3zOaLaGFRlxTtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNbXrFsJYQwYcrir91tnwMGc1FSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTE5YjhkMWMtZmQwOS0z ZWY2LWFlNWYtZTZjZjBhNDZlNWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ4xYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0Hx1JUPediXYzG0VD1GkbA6juvZRHMj7/Unla2LcL4adkx8g/VbEvV iWwZk3xF9tW34I7U/6a3GJqKPdfHMIC4n2Ll7bjoe+ij0BIgVbGFJQHBdQnddiDt /PvamV3elGHiE8swJ17FX1vZRsyjytp98K38ziQPg4leDRT2BaCqzoJKZzwhMTJs 6+io0QlkMLIYWZX64Oc/sCCKBN3+Sn15wVvot3pZTDyRfS55UmT2PrOMqLUWZVyY TKdsD0IGE9KGihFIBry/pyCoMAfhXuNUKpNIlinGerlYQTFJHJPSBIzBUhkS8f8q IBkDK9d4u3Lj0YY9yxoxp5wRcdxY9Dc= -----END CERTIFICATE-----Generated at Fri Oct 10 19:56:07 2025 by rpki-client