$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2880666-4566-3c6f-8c7d-496e76f824a3.roa File: a2880666-4566-3c6f-8c7d-496e76f824a3.roa (raw, json) Hash identifier: 0tr4rN45cMIjTv/vNlQVHogRV9yiG48Kt6fjwnRLkyE= Subject key identifier: 77:05:25:06:AC:16:99:CA:91:4C:41:19:7B:66:9D:CE:B8:35:E2:CD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D0684CD9E0DFD509CCA80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2880666-4566-3c6f-8c7d-496e76f824a3.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 393238 IP address blocks: 64.199.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:06:84:cd:9e:0d:fd:50:9c:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=789c08ad-e108-4297-944b-6795c8cf32fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4f:7f:65:d8:1f:22:36:30:97:13:7f:7d:3c: c8:1b:bf:d5:e7:73:ee:be:27:95:96:d7:26:cc:24: 28:dc:b5:6b:76:75:aa:63:55:5e:72:bd:c4:a7:26: 9f:1c:a0:18:71:d3:f5:c4:e3:fb:5a:77:c0:d6:5b: 50:1a:f3:2b:86:43:c9:78:40:6c:b9:67:1c:ba:ea: 41:e8:e6:ad:29:01:cf:28:cb:ec:24:db:ad:d1:8d: 3b:86:a1:4c:7c:d1:58:32:c8:9e:28:2a:05:f8:c3: 68:ef:77:2c:98:2c:df:28:18:50:eb:48:ba:ae:ba: 8a:5c:e0:b4:32:bf:5b:d3:98:cd:62:f6:f6:59:11: 18:ae:d8:83:11:4d:6e:ee:21:5c:b8:8c:a9:0e:01: 57:13:54:9f:c4:bf:61:6a:24:5a:47:12:59:82:db: 74:09:0d:d8:53:c8:10:84:31:fb:d3:c0:58:be:98: c1:42:28:2d:81:02:3a:9a:53:ec:ef:5c:52:43:dd: ad:0c:8b:a3:f1:e8:c5:ed:fd:cc:3b:ee:3b:b8:9d: da:40:68:68:01:66:84:77:f6:99:39:2e:7f:2e:06: af:7d:0f:8b:13:36:06:eb:d7:ef:b6:d1:05:8a:71: 15:d1:93:b5:f9:8a:7e:65:66:2d:0b:1d:0b:a2:c3: 79:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:05:25:06:AC:16:99:CA:91:4C:41:19:7B:66:9D:CE:B8:35:E2:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2880666-4566-3c6f-8c7d-496e76f824a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.199.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:d4:51:cb:1f:3b:6d:3f:bf:0b:a8:57:84:99:a8:01:df:49: 47:6f:00:d4:51:b6:31:bd:01:f1:2f:35:b6:ef:aa:5d:7d:cb: ea:df:39:8d:5a:25:12:98:45:83:dd:f9:d7:35:94:02:ff:df: 02:28:09:7a:32:d3:31:1e:02:f0:bf:aa:46:35:93:ec:51:73: bd:33:98:94:06:6e:9a:a8:44:50:66:d1:ae:48:ea:1d:7c:26: 34:62:46:37:53:89:6e:68:79:65:89:ac:be:6d:a3:be:4c:a8: 3d:3e:a6:cf:21:28:bc:6a:67:5a:29:65:97:5a:4c:ba:40:bc: 29:46:c4:9e:2d:22:01:03:65:34:27:5e:a5:dc:99:68:14:50: c1:d5:e5:e2:04:7f:06:8a:4d:1c:15:fc:ff:eb:54:09:9c:d2: 09:07:f6:cb:e9:db:04:d1:89:d6:37:fa:e0:4e:6b:82:16:7b: 1d:6c:02:dc:77:45:64:85:93:40:ca:1c:48:12:48:26:5a:05: 64:8d:9a:12:dc:b6:1c:f0:61:2b:23:b6:d2:3d:b4:c2:df:9e: 0a:dc:ae:9e:4d:f5:bd:1e:87:d9:7f:05:aa:a2:26:90:ce:73: c8:fd:0e:61:6e:bb:3b:7a:cb:4a:8d:db:5a:5f:4b:a2:b0:d0: 2a:b0:76:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQaEzZ4N/VCcyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk Nzg5YzA4YWQtZTEwOC00Mjk3LTk0NGItNjc5NWM4Y2YzMmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU9/ZdgfIjYwlxN/fTzIG7/V53PuvieVltcm zCQo3LVrdnWqY1Vecr3EpyafHKAYcdP1xOP7WnfA1ltQGvMrhkPJeEBsuWccuupB 6OatKQHPKMvsJNut0Y07hqFMfNFYMsieKCoF+MNo73csmCzfKBhQ60i6rrqKXOC0 Mr9b05jNYvb2WREYrtiDEU1u7iFcuIypDgFXE1SfxL9haiRaRxJZgtt0CQ3YU8gQ hDH708BYvpjBQigtgQI6mlPs71xSQ92tDIuj8ejF7f3MO+47uJ3aQGhoAWaEd/aZ OS5/LgavfQ+LEzYG69fvttEFinEV0ZO1+Yp+ZWYtCx0LosN55QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcFJQasFpnKkUxBGXtmnc64NeLNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTI4ODA2NjYtNDU2Ni0z YzZmLThjN2QtNDk2ZTc2ZjgyNGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQMf+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPUUcsfO20/vwuoV4SZqAHfSUdvANRRtjG9AfEvNbbvql19y+rfOY1a JRKYRYPd+dc1lAL/3wIoCXoy0zEeAvC/qkY1k+xRc70zmJQGbpqoRFBm0a5I6h18 JjRiRjdTiW5oeWWJrL5to75MqD0+ps8hKLxqZ1opZZdaTLpAvClGxJ4tIgEDZTQn XqXcmWgUUMHV5eIEfwaKTRwV/P/rVAmc0gkH9svp2wTRidY3+uBOa4IWex1sAtx3 RWSFk0DKHEgSSCZaBWSNmhLcthzwYSsjttI9tMLfngrcrp5N9b0eh9l/BaqiJpDO c8j9DmFuuzt6y0qN21pfS6Kw0Cqwdjs= -----END CERTIFICATE-----Generated at Fri Oct 10 22:23:28 2025 by rpki-client