$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abb74859-f7d9-3f80-ba20-7449911df681.roa File: abb74859-f7d9-3f80-ba20-7449911df681.roa (raw, json) Hash identifier: 94wS6xTsKHjTFFd3oa9D+KmcVBcCpOi5icNoLdPdpaY= Subject key identifier: CC:B3:EA:A5:6A:CA:78:23:CE:23:DD:46:63:42:56:B8:42:08:EC:CC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CD5BCF642FCBB72D64480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abb74859-f7d9-3f80-ba20-7449911df681.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 393238 IP address blocks: 209.252.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:d5:bc:f6:42:fc:bb:72:d6:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=fb34da02-f969-4a3e-a7e9-22ee4fc56f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:66:84:58:cd:b3:88:85:14:5d:bb:cb:ae:5d: c3:df:35:c4:37:b4:bf:5e:e5:d6:7b:df:be:44:25: f9:80:37:d1:af:b8:2c:ca:29:de:96:37:dc:d8:0f: 18:7a:21:39:be:bc:53:f6:ad:5e:c0:76:ea:83:f4: e3:b9:fe:21:74:78:5c:7f:17:57:89:6b:01:df:df: 95:be:26:f9:ca:05:88:7c:3f:59:78:01:85:45:45: bf:95:0b:7b:fd:24:6d:35:5f:25:8f:1a:ac:cf:bc: c3:3f:3c:72:97:8c:1c:19:c5:c0:7e:d7:b7:f5:d9: a1:7d:fd:0b:1d:5b:6d:9f:ba:08:7d:ab:b2:52:91: 25:c7:81:68:01:2d:99:72:91:88:98:a8:b0:44:8d: 2c:1c:15:7e:0e:eb:cd:33:e3:87:2d:55:a0:bf:a0: 12:02:9d:0b:89:d1:dd:97:38:c1:cc:1e:b0:d9:ea: 15:2b:a6:de:44:9c:9a:bc:3c:dc:b6:a4:7c:e3:7f: f4:20:ea:1e:49:19:d3:28:0b:cd:1c:db:fb:33:57: 22:9e:89:82:20:57:50:94:4a:53:69:c6:1c:29:ae: c4:3a:b3:0a:f3:37:32:1f:f9:57:78:5c:39:e8:a8: f5:8e:2c:30:75:c0:e3:15:00:70:a0:37:63:da:79: 2e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B3:EA:A5:6A:CA:78:23:CE:23:DD:46:63:42:56:B8:42:08:EC:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abb74859-f7d9-3f80-ba20-7449911df681.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.252.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:f6:24:c9:01:8a:43:15:19:bf:78:7b:7f:91:fd:5f:62:7a: 71:c4:a3:69:6e:80:0c:22:1f:3c:22:d6:0b:22:f9:61:92:42: e8:91:da:09:29:4a:a6:6d:3b:9d:93:0a:e4:bf:3f:70:d0:c5: fb:3e:31:ec:ff:84:35:5e:e1:ca:7e:5b:c2:98:f6:21:0d:cc: b6:d7:45:4b:2c:d3:44:37:66:c7:67:30:a1:8a:ff:95:90:07: 30:4d:c3:df:8a:5b:24:86:4f:0e:8d:bc:03:ab:45:b6:30:26: 87:90:3e:4e:49:bb:e2:7e:05:e5:3f:72:8c:5c:48:9e:80:da: 91:9b:e6:8c:e1:2e:e2:52:5f:dc:46:05:c6:97:36:96:32:7b: 82:cb:bb:56:a8:50:2a:a0:41:e7:56:48:e0:cf:5e:1f:1d:a6: 66:7a:aa:bc:a8:07:5b:31:fa:4a:65:03:e2:cd:53:9b:29:28: 6a:20:c9:28:8e:9b:0a:18:0c:57:65:ea:70:23:15:54:27:4c: 5d:7e:91:6c:e4:0b:32:96:f2:00:27:ea:0c:0b:ee:f7:66:b1: 2f:39:79:70:4b:da:62:8f:df:83:b7:e5:75:b3:b1:a3:af:06: 75:59:02:21:3d:22:eb:3d:ac:4d:12:67:70:51:e9:c8:e6:71: 17:d1:5c:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXNW89kL8u3LWRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZmIzNGRhMDItZjk2OS00YTNlLWE3ZTktMjJlZTRmYzU2ZjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGaEWM2ziIUUXbvLrl3D3zXEN7S/XuXWe9++ RCX5gDfRr7gsyineljfc2A8YeiE5vrxT9q1ewHbqg/Tjuf4hdHhcfxdXiWsB39+V vib5ygWIfD9ZeAGFRUW/lQt7/SRtNV8ljxqsz7zDPzxyl4wcGcXAfte39dmhff0L HVttn7oIfauyUpElx4FoAS2ZcpGImKiwRI0sHBV+DuvNM+OHLVWgv6ASAp0LidHd lzjBzB6w2eoVK6beRJyavDzctqR843/0IOoeSRnTKAvNHNv7M1cinomCIFdQlEpT acYcKa7EOrMK8zcyH/lXeFw56Kj1jiwwdcDjFQBwoDdj2nku2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyz6qVqyngjziPdRmNCVrhCCOzMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWJiNzQ4NTktZjdkOS0z ZjgwLWJhMjAtNzQ0OTkxMWRmNjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0fyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB72JMkBikMVGb94e3+R/V9ienHEo2lugAwiHzwi1gsi+WGSQuiR2gkp SqZtO52TCuS/P3DQxfs+Mez/hDVe4cp+W8KY9iENzLbXRUss00Q3ZsdnMKGK/5WQ BzBNw9+KWySGTw6NvAOrRbYwJoeQPk5Ju+J+BeU/coxcSJ6A2pGb5ozhLuJSX9xG BcaXNpYye4LLu1aoUCqgQedWSODPXh8dpmZ6qryoB1sx+kplA+LNU5spKGogySiO mwoYDFdl6nAjFVQnTF1+kWzkCzKW8gAn6gwL7vdmsS85eXBL2mKP34O35XWzsaOv BnVZAiE9Ius9rE0SZ3BR6cjmcRfRXCw= -----END CERTIFICATE-----Generated at Fri Oct 10 20:03:24 2025 by rpki-client