$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/acc98a9d-f047-3806-b8a4-f122b0c49d7b.roa File: acc98a9d-f047-3806-b8a4-f122b0c49d7b.roa (raw, json) Hash identifier: 9Pest0nxV4eIUZ5nIEG9U0JstiCNCdMwLkWdv+FrHsA= Subject key identifier: 65:3E:BC:FC:41:CF:84:BA:96:80:AA:31:CF:0C:15:7E:B4:7B:B4:0A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC0FC5CC954818C387FC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/acc98a9d-f047-3806-b8a4-f122b0c49d7b.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 64.196.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c0:fc:5c:c9:54:81:8c:38:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=b38a9a31-0675-4128-916f-9acd23141dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:55:f7:44:de:40:6c:62:84:16:42:c7:61:62: 43:ae:1c:8a:4a:c0:f7:12:79:7d:6a:6e:15:96:37: c0:f2:19:d5:f5:35:de:0c:8c:6a:fd:e6:3d:19:e9: 78:ac:51:90:ab:df:ab:5f:76:36:18:eb:54:7f:4f: 3f:4f:be:9f:c6:03:66:7e:17:33:32:51:77:12:7d: f6:67:2c:fb:0a:3a:43:62:98:bb:9f:a6:e0:00:a9: 91:ae:f0:3d:c9:6d:4a:ba:da:0e:df:47:c7:8b:f5: 92:94:93:aa:ef:4a:3d:f3:31:a2:9f:ae:32:5f:90: f5:fd:78:67:8e:91:0e:29:62:21:98:9e:b5:1a:ad: 34:f1:4d:b0:df:16:98:5c:c4:f8:4a:98:28:c6:2b: 2c:20:d7:ba:ff:c3:2f:a3:8d:03:63:a0:89:c5:8c: 5d:61:1d:1c:af:fa:91:21:e0:f4:b0:55:8b:ba:2b: 90:19:0a:8d:d0:21:33:32:cf:44:2b:97:0d:87:35: 52:73:2a:0d:16:f4:f2:8a:7c:7d:5b:e4:ec:d4:b3: a5:bf:20:ec:3a:7d:29:bf:bd:e7:c5:26:c4:a9:25: db:51:4f:9a:21:cc:70:ad:f1:99:96:1a:60:7e:dc: f0:97:b6:8d:1b:d2:82:ee:de:a6:06:80:dd:c6:07: dd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3E:BC:FC:41:CF:84:BA:96:80:AA:31:CF:0C:15:7E:B4:7B:B4:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/acc98a9d-f047-3806-b8a4-f122b0c49d7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.196.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:6b:fd:ce:27:40:54:18:24:3f:fd:ee:cb:9f:8e:2b:b4:1b: 1a:e6:bd:dc:f4:3a:b6:0f:a4:38:4a:7c:c9:81:c6:d9:2c:e4: 9e:cf:99:13:97:19:63:56:43:88:52:38:29:69:d2:4f:38:ba: a5:6b:09:01:46:e3:cc:93:ee:39:db:d3:40:c0:05:b0:98:7f: 4c:af:42:7e:a2:f2:7c:0b:7b:8f:ee:88:02:0d:36:3c:83:8c: bf:5f:ee:41:a7:66:16:1e:fe:5d:ae:5d:c0:48:e5:47:da:51: 41:4c:ee:55:de:4f:6a:90:be:d5:40:40:38:34:82:89:70:75: be:87:57:4c:f2:54:e7:e2:96:25:38:42:7c:01:95:80:0c:17: 6e:16:83:9b:c7:87:66:17:a8:8d:3a:43:8b:7a:57:3e:c1:95: 95:a9:29:fa:74:6b:b1:38:4e:c0:34:3a:dc:a9:13:1d:cc:45: 7f:83:0b:55:b1:54:d3:91:29:d4:33:65:25:8b:06:52:55:87: c4:ca:91:64:75:cd:5d:c8:9b:70:d6:9a:cf:41:22:67:a5:b7: b2:c8:2e:9d:20:51:9b:56:f0:37:df:37:91:03:8f:c3:b1:77: 52:a2:ef:13:17:ca:a7:35:69:3a:57:53:09:dc:41:4a:c9:03: c9:13:8a:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMD8XMlUgYw4f8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YjM4YTlhMzEtMDY3NS00MTI4LTkxNmYtOWFjZDIzMTQxZGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFX3RN5AbGKEFkLHYWJDrhyKSsD3Enl9am4V ljfA8hnV9TXeDIxq/eY9Gel4rFGQq9+rX3Y2GOtUf08/T76fxgNmfhczMlF3En32 Zyz7CjpDYpi7n6bgAKmRrvA9yW1KutoO30fHi/WSlJOq70o98zGin64yX5D1/Xhn jpEOKWIhmJ61Gq008U2w3xaYXMT4SpgoxissINe6/8Mvo40DY6CJxYxdYR0cr/qR IeD0sFWLuiuQGQqN0CEzMs9EK5cNhzVScyoNFvTyinx9W+Ts1LOlvyDsOn0pv73n xSbEqSXbUU+aIcxwrfGZlhpgftzwl7aNG9KC7t6mBoDdxgfd2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGU+vPxBz4S6loCqMc8MFX60e7QKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWNjOThhOWQtZjA0Ny0z ODA2LWI4YTQtZjEyMmIwYzQ5ZDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMTHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtr/c4nQFQYJD/97sufjiu0Gxrmvdz0OrYPpDhKfMmBxtks5J7PmROX GWNWQ4hSOClp0k84uqVrCQFG48yT7jnb00DABbCYf0yvQn6i8nwLe4/uiAINNjyD jL9f7kGnZhYe/l2uXcBI5UfaUUFM7lXeT2qQvtVAQDg0golwdb6HV0zyVOfiliU4 QnwBlYAMF24Wg5vHh2YXqI06Q4t6Vz7BlZWpKfp0a7E4TsA0OtypEx3MRX+DC1Wx VNORKdQzZSWLBlJVh8TKkWR1zV3Im3DWms9BImelt7LILp0gUZtW8DffN5EDj8Ox d1Ki7xMXyqc1aTpXUwncQUrJA8kTivw= -----END CERTIFICATE-----Generated at Fri Oct 10 22:04:32 2025 by rpki-client