$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9acaaa3-7eb4-3f38-9029-164c7d5b621a.roa File: a9acaaa3-7eb4-3f38-9029-164c7d5b621a.roa (raw, json) Hash identifier: 3l3sr3Otsuvg7pEWPdbqQkgGTwOayPbG4UYVltuZ44A= Subject key identifier: 47:42:80:06:CE:4B:BD:5C:6D:5C:AD:8B:5F:14:D5:DE:A8:EC:8A:AD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CD55D92D13B1516283900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9acaaa3-7eb4-3f38-9029-164c7d5b621a.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 53478 IP address blocks: 207.59.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:d5:5d:92:d1:3b:15:16:28:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=0f48cf45-bbf5-490d-abcb-f48e05d645c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cb:61:bb:7d:38:84:54:24:0d:e2:b8:df:04: 91:ad:1e:23:c2:42:5a:f0:3b:25:2a:bb:52:2d:b2: 29:f5:f4:02:7b:37:d3:1c:81:c0:5b:45:23:18:18: ee:2d:2f:47:6b:f9:3c:55:07:2f:11:37:75:f7:b1: cb:89:96:99:44:94:11:e3:c9:0b:2c:47:22:bc:4d: 3d:00:70:c1:e5:62:ed:b9:20:d3:68:82:d2:16:38: 11:1d:68:78:0d:e6:05:f3:cf:ef:a6:7d:bb:95:ce: 27:d5:f7:bc:6f:1a:fa:23:03:e1:8d:d2:58:bc:2c: 9e:33:c0:fe:5f:13:ed:14:8f:25:93:92:79:b2:cb: 35:d0:d3:63:4d:9f:fe:13:37:2b:de:70:a0:91:86: 60:e9:df:21:e5:8d:2c:5d:e6:04:21:50:d6:fc:e9: 84:36:5d:5f:22:d1:e2:19:ed:0e:7f:25:ee:a4:43: 25:45:62:1e:97:2d:46:22:7b:88:37:01:24:e2:64: d5:ef:44:ce:63:3b:4c:8a:b8:7a:86:08:6f:c1:65: 62:e0:29:bf:42:bc:9b:c5:99:ae:a7:33:9d:dd:c9: 26:fb:56:0d:8c:ab:b2:13:38:76:4f:91:f5:0b:99: d3:82:ba:f0:41:57:5d:b4:16:1a:3e:d3:7d:a7:bc: 39:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:42:80:06:CE:4B:BD:5C:6D:5C:AD:8B:5F:14:D5:DE:A8:EC:8A:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9acaaa3-7eb4-3f38-9029-164c7d5b621a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.59.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:48:6a:f8:d2:7b:07:c0:12:0d:a7:05:58:1c:97:34:f7:4b: 25:57:4c:af:a4:10:20:0f:2d:a7:95:e9:3e:63:d7:f2:f5:15: 2c:52:2b:ad:4a:e4:03:7a:9f:39:d8:96:4e:71:e2:11:1a:f3: cc:21:ca:e4:48:74:7c:a9:94:85:96:be:3f:7c:32:7c:e0:8f: 8f:8f:dc:cf:d3:a5:52:88:31:e2:94:09:59:a5:47:74:fc:e3: 18:e7:95:b0:9a:ba:6f:09:67:53:32:d5:95:63:32:be:56:c8: 96:8d:09:2c:dd:9a:bd:92:04:db:4a:a2:82:ec:f2:09:42:9e: b7:e5:9f:46:68:3f:87:a0:cc:7b:2f:07:b3:af:12:c9:a9:06: 07:a9:d3:c7:e9:18:38:a6:41:52:30:1d:85:ac:7d:ef:6e:e4: a7:cc:17:0e:16:09:be:bf:35:c1:65:cb:f0:0f:7e:3d:1c:0f: b9:03:7a:80:bc:d9:97:41:b2:4c:4e:64:e7:a7:33:be:57:38: 58:51:89:96:9c:47:ff:56:93:72:bf:4a:b4:29:9f:a5:17:6e: e9:71:c0:2a:59:2b:b5:59:0d:ef:f9:79:60:40:c5:e0:db:85: d4:8c:e4:67:ca:10:1e:c4:02:71:6e:74:ef:d2:5f:d5:b5:1b: 0f:eb:c3:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXNVdktE7FRYoOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MGY0OGNmNDUtYmJmNS00OTBkLWFiY2ItZjQ4ZTA1ZDY0NWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsthu304hFQkDeK43wSRrR4jwkJa8DslKrtS LbIp9fQCezfTHIHAW0UjGBjuLS9Ha/k8VQcvETd197HLiZaZRJQR48kLLEcivE09 AHDB5WLtuSDTaILSFjgRHWh4DeYF88/vpn27lc4n1fe8bxr6IwPhjdJYvCyeM8D+ XxPtFI8lk5J5sss10NNjTZ/+Ezcr3nCgkYZg6d8h5Y0sXeYEIVDW/OmENl1fItHi Ge0OfyXupEMlRWIely1GInuINwEk4mTV70TOYztMirh6hghvwWVi4Cm/QrybxZmu pzOd3ckm+1YNjKuyEzh2T5H1C5nTgrrwQVddtBYaPtN9p7w5VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdCgAbOS71cbVyti18U1d6o7IqtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTlhY2FhYTMtN2ViNC0z ZjM4LTkwMjktMTY0YzdkNWI2MjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzshMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhIavjSewfAEg2nBVgclzT3SyVXTK+kECAPLaeV6T5j1/L1FSxSK61K 5AN6nznYlk5x4hEa88whyuRIdHyplIWWvj98Mnzgj4+P3M/TpVKIMeKUCVmlR3T8 4xjnlbCaum8JZ1My1ZVjMr5WyJaNCSzdmr2SBNtKooLs8glCnrfln0ZoP4egzHsv B7OvEsmpBgep08fpGDimQVIwHYWsfe9u5KfMFw4WCb6/NcFly/APfj0cD7kDeoC8 2ZdBskxOZOenM75XOFhRiZacR/9Wk3K/SrQpn6UXbulxwCpZK7VZDe/5eWBAxeDb hdSM5GfKEB7EAnFudO/SX9W1Gw/rw00= -----END CERTIFICATE-----Generated at Fri Oct 10 17:51:35 2025 by rpki-client