$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b16c1dc2-a4ea-36f5-869e-8b0550b42112.roa File: b16c1dc2-a4ea-36f5-869e-8b0550b42112.roa (raw, json) Hash identifier: goVc9335htQJIWrgQcglTd3KJkUgKOHcSYpTAQSlUHc= Subject key identifier: C2:AC:BC:52:4A:AC:EA:EC:07:F1:EE:4F:10:F4:E1:51:B6:C7:43:0B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3F1C5A304411A2BCB59D5120 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b16c1dc2-a4ea-36f5-869e-8b0550b42112.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 174.130.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:5a:30:44:11:a2:bc:b5:9d:51:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=d3528f3f-d01b-4efb-bb8f-5bace48b4a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2c:c3:88:c9:8a:9b:cd:39:a5:ab:29:9e:03: 54:55:ce:f4:d7:84:17:97:a3:b3:29:a3:33:e4:c1: 9f:13:ae:75:b8:4f:81:f2:b7:56:e2:71:6b:fa:8f: ad:3e:0a:30:80:bc:71:e0:52:cc:fd:23:e3:97:cc: e1:ce:6e:e6:04:ad:23:c1:a7:93:63:58:0a:6a:ec: f9:51:fe:59:e2:8f:9e:1a:5a:4e:9c:02:75:1c:1b: d1:7b:04:55:00:de:aa:ae:4e:87:45:93:a1:d3:ed: ca:1a:7d:75:bb:07:ef:ea:de:72:5f:5a:fe:a3:ed: 09:de:9d:67:7d:4d:2c:80:07:c6:68:76:14:68:d4: cd:e7:51:ea:83:0d:e6:22:10:a2:ff:c0:f2:57:10: 03:9b:e4:37:02:33:cc:aa:55:d2:29:ae:bb:bf:7e: 09:95:28:56:aa:29:14:e6:66:b2:92:c1:bf:06:4f: 89:2f:b3:aa:07:16:70:d1:6b:70:d3:27:85:80:c3: 93:69:6d:5e:6d:f8:bb:91:f6:da:9b:da:49:c1:81: c0:b8:15:9b:14:a3:8a:00:af:0d:44:32:59:21:6a: e2:c1:d0:5f:58:2c:da:7e:59:be:18:2e:cf:d9:c9: 45:1a:66:4b:39:c9:d4:9b:3c:9a:03:79:74:09:d9: 66:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:AC:BC:52:4A:AC:EA:EC:07:F1:EE:4F:10:F4:E1:51:B6:C7:43:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b16c1dc2-a4ea-36f5-869e-8b0550b42112.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:53:ca:75:47:f1:13:99:43:e8:bc:f1:80:60:df:4e:de:d2: 18:3b:17:46:a2:54:ca:d4:fa:fb:8e:6e:f5:8d:25:65:c2:d5: 27:e1:09:60:e6:b4:dd:84:2a:a3:c1:b6:10:ca:41:bd:ab:04: 9d:a0:98:ba:1c:da:71:b9:4a:c1:40:8f:2b:10:b5:cd:87:10: 63:f1:b9:21:06:a9:3a:fb:01:2b:86:86:3b:90:4f:18:13:7b: d6:7f:ce:c2:67:19:1b:b0:60:ce:4d:6e:28:3f:d4:b3:47:00: 39:e0:92:c7:5d:5c:b0:c0:27:fd:2d:b3:7c:78:44:08:bc:a2: 88:0b:82:ec:b4:62:37:e7:c5:c8:e6:23:e5:85:10:ab:d5:1b: 6e:f1:6c:c9:a1:92:9e:e6:61:b8:2e:2e:99:e8:2c:21:47:0a: 3a:83:79:1d:44:63:26:97:6e:a2:fd:4f:d7:88:9b:8d:e5:80: 3b:07:c0:29:4a:05:9c:b9:f1:ed:cc:1f:71:fe:e5:85:e0:1a: 18:34:60:84:39:28:15:14:38:93:53:d2:36:c6:91:2f:0b:62: 86:55:14:cc:0f:98:98:03:55:09:fd:4a:6b:2f:05:3a:70:d6: 10:0f:94:cf:90:b3:c2:93:98:02:99:0e:37:95:cc:3c:f4:eb: 78:c8:1f:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HFowRBGivLWdUSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk ZDM1MjhmM2YtZDAxYi00ZWZiLWJiOGYtNWJhY2U0OGI0YTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCzDiMmKm805paspngNUVc7014QXl6OzKaMz 5MGfE651uE+B8rdW4nFr+o+tPgowgLxx4FLM/SPjl8zhzm7mBK0jwaeTY1gKauz5 Uf5Z4o+eGlpOnAJ1HBvRewRVAN6qrk6HRZOh0+3KGn11uwfv6t5yX1r+o+0J3p1n fU0sgAfGaHYUaNTN51Hqgw3mIhCi/8DyVxADm+Q3AjPMqlXSKa67v34JlShWqikU 5mayksG/Bk+JL7OqBxZw0Wtw0yeFgMOTaW1ebfi7kfbam9pJwYHAuBWbFKOKAK8N RDJZIWriwdBfWCzaflm+GC7P2clFGmZLOcnUmzyaA3l0CdlmdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKsvFJKrOrsB/HuTxD04VG2x0MLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjE2YzFkYzItYTRlYS0z NmY1LTg2OWUtOGIwNTUwYjQyMTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCroL8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5TynVH8ROZQ+i88YBg307e0hg7F0aiVMrU+vuObvWNJWXC1SfhCWDm tN2EKqPBthDKQb2rBJ2gmLoc2nG5SsFAjysQtc2HEGPxuSEGqTr7ASuGhjuQTxgT e9Z/zsJnGRuwYM5Nbig/1LNHADngksddXLDAJ/0ts3x4RAi8oogLguy0Yjfnxcjm I+WFEKvVG27xbMmhkp7mYbguLpnoLCFHCjqDeR1EYyaXbqL9T9eIm43lgDsHwClK BZy58e3MH3H+5YXgGhg0YIQ5KBUUOJNT0jbGkS8LYoZVFMwPmJgDVQn9SmsvBTpw 1hAPlM+Qs8KTmAKZDjeVzDz063jIHxA= -----END CERTIFICATE-----Generated at Fri Oct 10 22:19:13 2025 by rpki-client