$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aedfc36f-f9ab-38bc-8f1a-10883237ddc3.roa File: aedfc36f-f9ab-38bc-8f1a-10883237ddc3.roa (raw, json) Hash identifier: XePIYcPgaM+95vSkQWqMZ4vBfA8UtLDYm5I1HZCthw8= Subject key identifier: 2E:1A:17:61:20:1A:AA:A7:2E:7B:EA:42:E9:41:B1:6B:22:15:B8:31 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2C9DBD9057AA195C8B0680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aedfc36f-f9ab-38bc-8f1a-10883237ddc3.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 173.190.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:9d:bd:90:57:aa:19:5c:8b:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=6caedae3-4f02-413c-91da-bd5836ecafb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f2:f1:79:05:31:89:60:22:82:42:71:d6:f6: 5e:a2:fa:26:e6:96:85:f7:ad:0b:ec:72:f7:b0:02: 43:15:70:26:d0:95:2d:61:8d:40:db:63:04:5e:89: 97:a3:d1:41:fc:b0:b0:8c:ec:54:2e:75:e4:d7:30: ad:f4:2f:e5:0a:1a:47:77:5d:8f:ce:8f:4d:cd:32: 1e:30:dc:35:fd:e3:42:d1:f8:61:9f:ce:99:21:a1: 17:42:b5:35:f4:7d:c5:3b:a4:25:a9:b5:b2:32:0d: e6:74:75:28:86:4c:90:4d:c4:8d:aa:ea:a6:b7:37: f6:64:9a:11:e1:4b:07:16:a5:a5:0a:c0:ee:4a:cf: f5:e2:a9:a2:80:21:2f:9d:69:ad:b8:ab:08:27:7a: 56:20:50:15:71:1b:54:cb:f2:82:d8:78:6d:12:f2: 04:1b:95:d6:05:20:90:da:47:ba:d5:48:a2:38:08: 19:fb:02:49:c4:71:ed:67:05:fa:4e:10:fa:5b:50: 76:54:04:fd:b0:e1:aa:44:32:94:95:45:13:6a:a1: 47:53:88:2b:b8:56:42:1c:7c:af:0e:ca:85:57:7b: 88:d4:7d:e6:65:40:9f:b9:82:7c:f9:0d:e1:dd:66: b7:28:5b:e1:f4:03:4a:b1:86:76:bf:04:5e:a8:83: aa:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1A:17:61:20:1A:AA:A7:2E:7B:EA:42:E9:41:B1:6B:22:15:B8:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aedfc36f-f9ab-38bc-8f1a-10883237ddc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:bd:f8:46:1d:6e:fb:00:a7:3b:e0:54:39:6e:e1:a9:1b:48: bb:95:5d:02:77:f0:ce:f6:29:aa:d2:d3:7c:98:91:5d:2f:3f: 57:c0:3e:a2:4d:42:10:29:ba:dc:14:12:46:2f:48:30:b3:d5: 23:fb:0c:c3:36:59:9c:31:e7:77:c3:a7:a7:40:53:8f:de:3e: 21:08:01:74:2d:47:8d:35:92:c9:45:3a:34:04:ec:69:68:c7: b7:b2:13:0f:72:b9:fc:a2:bc:87:6b:7a:b3:78:72:86:46:21: 5d:61:2e:12:18:8e:b9:6f:37:38:77:70:fa:a6:e0:d8:a4:b6: ec:d8:5f:bd:4a:bd:b0:70:42:03:44:7a:a7:d5:30:98:42:6c: 75:71:1b:9c:72:e7:9e:5e:d6:a7:eb:97:55:39:c1:1e:3a:7a: 0d:7c:55:7a:40:c6:3c:63:cb:42:9d:4b:74:0e:8a:92:98:2e: a1:13:4c:ab:b9:b4:29:97:7b:4e:fb:ca:6d:3d:d0:96:c3:5e: f0:90:19:70:fc:df:c5:ea:8f:27:32:6a:9a:86:c9:32:e1:6d: 5d:a9:82:6a:2b:f3:e6:d2:cc:f3:a6:ea:6b:7f:9a:bd:fb:34: d5:ca:90:b1:55:8a:a4:09:04:ac:c8:f6:63:a8:86:f5:5c:76: a2:57:2b:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLJ29kFeqGVyLBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NmNhZWRhZTMtNGYwMi00MTNjLTkxZGEtYmQ1ODM2ZWNhZmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvLxeQUxiWAigkJx1vZeovom5paF960L7HL3 sAJDFXAm0JUtYY1A22MEXomXo9FB/LCwjOxULnXk1zCt9C/lChpHd12Pzo9NzTIe MNw1/eNC0fhhn86ZIaEXQrU19H3FO6QlqbWyMg3mdHUohkyQTcSNquqmtzf2ZJoR 4UsHFqWlCsDuSs/14qmigCEvnWmtuKsIJ3pWIFAVcRtUy/KC2HhtEvIEG5XWBSCQ 2ke61UiiOAgZ+wJJxHHtZwX6ThD6W1B2VAT9sOGqRDKUlUUTaqFHU4gruFZCHHyv DsqFV3uI1H3mZUCfuYJ8+Q3h3Wa3KFvh9ANKsYZ2vwReqIOqWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4aF2EgGqqnLnvqQulBsWsiFbgxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWVkZmMzNmYtZjlhYi0z OGJjLThmMWEtMTA4ODMyMzdkZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErb6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACO9+EYdbvsApzvgVDlu4akbSLuVXQJ38M72KarS03yYkV0vP1fAPqJN QhAputwUEkYvSDCz1SP7DMM2WZwx53fDp6dAU4/ePiEIAXQtR401kslFOjQE7Glo x7eyEw9yufyivIdrerN4coZGIV1hLhIYjrlvNzh3cPqm4NiktuzYX71KvbBwQgNE eqfVMJhCbHVxG5xy555e1qfrl1U5wR46eg18VXpAxjxjy0KdS3QOipKYLqETTKu5 tCmXe077ym090JbDXvCQGXD838XqjycyapqGyTLhbV2pgmor8+bSzPOm6mt/mr37 NNXKkLFViqQJBKzI9mOohvVcdqJXK1Y= -----END CERTIFICATE-----Generated at Fri Oct 10 20:08:21 2025 by rpki-client