$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9741def-cfc6-31d1-9955-5fb8d7bac79f.roa File: a9741def-cfc6-31d1-9955-5fb8d7bac79f.roa (raw, json) Hash identifier: zyBNlW7H6TCU2IwB9hj0K+iwdNyviAHz+zj8TIgDYEY= Subject key identifier: 4B:19:9E:98:3A:47:12:A8:C6:56:A8:1D:9D:E2:44:F5:D6:CB:1B:A0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF81C55B3CB61A1481DFD Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9741def-cfc6-31d1-9955-5fb8d7bac79f.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 166.102.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f8:1c:55:b3:cb:61:a1:48:1d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=470f4677-8ac9-4db1-9c9f-80f42ef68494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:d6:c1:de:b6:29:bb:fd:52:b6:5c:30:bb:86: 5a:10:a1:dd:4c:d6:94:bc:ff:15:32:23:42:7e:e7: 2e:25:ba:4c:42:d4:b5:74:f2:c9:38:93:dd:81:34: 44:6a:56:a6:96:d7:50:78:1a:90:21:e8:ab:e9:3a: d6:1f:43:52:ed:8b:53:6c:62:98:9f:59:c1:b3:40: b0:da:5e:fa:94:21:91:2c:75:a5:ac:ca:53:72:a0: d9:fd:39:81:e9:23:87:d1:96:d9:5f:75:a0:54:b6: 27:9e:d6:e6:33:99:b1:09:2d:f0:62:61:ea:ee:7f: 49:6e:11:48:69:b0:ca:78:ef:65:09:c4:33:83:8a: bf:7e:4f:37:d3:f8:e3:36:fb:55:f7:cc:75:3e:58: 52:ff:14:1d:2c:29:1e:b3:2d:63:1c:b3:18:29:4c: 09:7f:a7:c8:e9:98:68:9b:98:89:02:b2:f4:57:e4: 4b:27:ee:3f:bf:61:b9:fe:ea:25:ee:38:72:37:db: c7:6a:b0:05:2b:82:04:ef:82:f0:27:86:ba:9c:21: 4f:73:87:f4:ac:24:4c:6f:84:1d:e8:94:70:45:fe: 1c:10:cc:3d:be:97:7a:dc:1d:08:2a:a3:f6:b9:24: 88:28:11:80:1c:06:d8:c1:5e:04:7c:aa:87:f9:1d: 07:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:19:9E:98:3A:47:12:A8:C6:56:A8:1D:9D:E2:44:F5:D6:CB:1B:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9741def-cfc6-31d1-9955-5fb8d7bac79f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.102.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:bf:53:52:ca:e1:62:55:cd:46:8b:08:f2:76:19:97:80:95: 1c:21:15:0d:bc:e9:e7:d9:00:4d:cd:27:05:29:5d:99:4e:12: 3b:eb:39:15:11:42:f9:d5:fc:55:c9:1d:bc:c0:2e:dc:ab:f9: 24:1a:72:97:f0:a7:6c:d2:5c:07:dd:88:f5:60:3e:3b:3d:6d: c2:32:ee:e0:d7:5e:8d:2c:11:d1:9a:ad:e3:ae:28:7b:f3:ed: 31:51:8b:23:b3:b9:8e:2d:eb:b4:46:19:9e:68:dd:9f:b0:89: ad:4e:9b:c3:e2:b9:5b:1c:c6:c8:c0:ea:cd:dc:f9:3b:d6:7e: 6e:49:12:53:29:bd:56:b6:8f:2c:58:9a:39:04:8f:77:15:47: 80:71:6a:d9:e7:90:d4:3b:60:2b:48:1b:7a:65:37:3b:0f:f5: e3:80:b0:21:2a:a8:fa:bd:d2:a4:af:b8:4f:84:08:bb:83:a8: ab:a6:d5:22:c7:d2:fb:d6:55:34:e5:d0:74:6b:b0:fd:e7:a0: 49:f3:30:9f:c9:7d:71:91:2b:8c:13:37:fd:4d:63:1e:cf:d0: 4d:98:aa:58:78:78:3d:7f:0d:11:6a:e8:35:98:ea:ff:b0:61: 38:c2:8a:18:d4:7e:73:75:96:65:9e:87:c6:a6:ce:54:3e:44: 8f:52:1b:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPgcVbPLYaFIHf0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NDcwZjQ2NzctOGFjOS00ZGIxLTljOWYtODBmNDJlZjY4NDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+NbB3rYpu/1Stlwwu4ZaEKHdTNaUvP8VMiNC fucuJbpMQtS1dPLJOJPdgTREalamltdQeBqQIeir6TrWH0NS7YtTbGKYn1nBs0Cw 2l76lCGRLHWlrMpTcqDZ/TmB6SOH0ZbZX3WgVLYnntbmM5mxCS3wYmHq7n9JbhFI abDKeO9lCcQzg4q/fk830/jjNvtV98x1PlhS/xQdLCkesy1jHLMYKUwJf6fI6Zho m5iJArL0V+RLJ+4/v2G5/uol7jhyN9vHarAFK4IE74LwJ4a6nCFPc4f0rCRMb4Qd 6JRwRf4cEMw9vpd63B0IKqP2uSSIKBGAHAbYwV4EfKqH+R0HvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsZnpg6RxKoxlaoHZ3iRPXWyxugMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTk3NDFkZWYtY2ZjNi0z MWQxLTk5NTUtNWZiOGQ3YmFjNzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpmaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACa/U1LK4WJVzUaLCPJ2GZeAlRwhFQ286efZAE3NJwUpXZlOEjvrORUR QvnV/FXJHbzALtyr+SQacpfwp2zSXAfdiPVgPjs9bcIy7uDXXo0sEdGareOuKHvz 7TFRiyOzuY4t67RGGZ5o3Z+wia1Om8PiuVscxsjA6s3c+TvWfm5JElMpvVa2jyxY mjkEj3cVR4BxatnnkNQ7YCtIG3plNzsP9eOAsCEqqPq90qSvuE+ECLuDqKum1SLH 0vvWVTTl0HRrsP3noEnzMJ/JfXGRK4wTN/1NYx7P0E2Yqlh4eD1/DRFq6DWY6v+w YTjCihjUfnN1lmWeh8amzlQ+RI9SG64= -----END CERTIFICATE-----Generated at Fri Oct 10 19:54:19 2025 by rpki-client