$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5356367-625f-35f1-a378-86cbb89c2343.roa File: b5356367-625f-35f1-a378-86cbb89c2343.roa (raw, json) Hash identifier: NK0C4EoM5kUHw3dU7se6nyZChSlybPkx77Wdp+vVZl0= Subject key identifier: 30:D1:64:7C:61:DF:9E:32:56:33:66:E9:A3:27:7C:5B:4E:FE:66:5D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2C9FCD075846C19FE6AE00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5356367-625f-35f1-a378-86cbb89c2343.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 173.188.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:9f:cd:07:58:46:c1:9f:e6:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=4eae74ce-0c20-4e7f-a954-ebefbecea370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:14:1a:61:f2:2e:92:ef:76:a5:a4:03:e5:f4: 01:34:44:8e:bd:f4:76:6f:a0:3d:98:06:11:4d:66: ff:9a:92:69:10:76:1d:21:9e:5a:68:63:70:14:a7: 1b:21:0a:48:03:ce:49:8b:83:51:af:80:aa:72:33: 85:84:b3:1f:33:24:57:28:b3:c3:40:24:80:c0:45: c7:9a:c7:35:8d:40:87:b4:dd:f8:2f:d3:61:98:09: 62:d9:8b:bf:7d:d2:01:f0:26:ce:ea:31:59:b3:06: d9:5f:77:6e:3b:54:37:d2:fd:30:7f:5d:e9:75:6e: 54:1b:45:0c:69:a4:a8:4e:39:60:40:1c:c6:7b:8e: 81:69:8b:39:8f:79:c9:a3:4b:d7:8c:8d:8b:cc:c8: ea:8c:be:cf:fe:8d:f4:3e:01:d2:90:d5:c3:00:e6: 90:00:66:47:af:2b:54:67:70:cd:8a:1f:2e:22:f5: 05:31:af:95:37:2a:49:b5:dc:bf:a0:d6:30:0e:ad: 5c:73:8f:5a:cf:db:29:ea:17:ef:91:74:f2:33:74: cc:13:81:4d:7c:18:93:22:2f:25:94:71:12:66:4a: 6a:5f:cd:8e:e9:af:57:7d:c9:14:11:4d:cf:e7:df: 91:98:d8:bf:71:ec:32:bb:d2:13:08:07:94:d9:98: ef:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D1:64:7C:61:DF:9E:32:56:33:66:E9:A3:27:7C:5B:4E:FE:66:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5356367-625f-35f1-a378-86cbb89c2343.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:d5:df:79:c0:ed:25:2c:eb:6d:d7:c2:6b:37:83:2b:f9:72: 01:36:07:23:7d:38:2f:44:95:f2:03:44:d0:6d:b3:74:78:85: f1:42:b6:9b:6d:2e:5e:2f:c3:57:3d:00:95:c5:dd:00:9d:9a: cb:81:83:ea:05:80:b1:d4:e2:8e:70:6a:d4:6b:72:ad:24:b6: e8:38:24:e3:c7:f4:62:e6:93:19:fe:2e:42:92:95:0a:fb:2a: 65:a4:da:56:29:13:af:fa:91:04:39:20:14:75:51:fb:89:8d: 08:c6:7b:73:ec:ae:17:d2:d5:e4:ee:d5:eb:b3:f3:58:58:0e: 74:55:2f:34:d2:b9:38:55:54:4e:50:84:8a:e7:bc:54:83:31: 95:6a:90:7d:f2:1e:1f:e1:8a:ea:82:77:29:0e:e6:27:cf:21: cf:af:2a:a5:ea:52:45:6b:fa:88:9f:cd:77:40:9a:84:69:5a: 47:06:95:1d:e7:62:a2:70:eb:82:d8:7a:95:75:48:97:d7:5f: fe:f0:ae:77:44:25:8f:ba:8c:3e:46:57:10:8c:fa:9a:09:47: ef:7f:df:25:bc:d1:93:01:aa:1e:6f:7e:03:8e:df:40:9a:78: a3:e0:94:f0:c8:ad:a6:41:74:f0:46:25:34:3f:11:af:45:84: c2:fe:72:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLJ/NB1hGwZ/mrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NGVhZTc0Y2UtMGMyMC00ZTdmLWE5NTQtZWJlZmJlY2VhMzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhQaYfIuku92paQD5fQBNESOvfR2b6A9mAYR TWb/mpJpEHYdIZ5aaGNwFKcbIQpIA85Ji4NRr4CqcjOFhLMfMyRXKLPDQCSAwEXH msc1jUCHtN34L9NhmAli2Yu/fdIB8CbO6jFZswbZX3duO1Q30v0wf13pdW5UG0UM aaSoTjlgQBzGe46BaYs5j3nJo0vXjI2LzMjqjL7P/o30PgHSkNXDAOaQAGZHrytU Z3DNih8uIvUFMa+VNypJtdy/oNYwDq1cc49az9sp6hfvkXTyM3TME4FNfBiTIi8l lHESZkpqX82O6a9XfckUEU3P59+RmNi/cewyu9ITCAeU2ZjvlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDRZHxh354yVjNm6aMnfFtO/mZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjUzNTYzNjctNjI1Zi0z NWYxLWEzNzgtODZjYmI4OWMyMzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzV33nA7SUs623Xwms3gyv5cgE2ByN9OC9ElfIDRNBts3R4hfFCtptt Ll4vw1c9AJXF3QCdmsuBg+oFgLHU4o5watRrcq0ktug4JOPH9GLmkxn+LkKSlQr7 KmWk2lYpE6/6kQQ5IBR1UfuJjQjGe3PsrhfS1eTu1euz81hYDnRVLzTSuThVVE5Q hIrnvFSDMZVqkH3yHh/hiuqCdykO5ifPIc+vKqXqUkVr+oifzXdAmoRpWkcGlR3n YqJw64LYepV1SJfXX/7wrndEJY+6jD5GVxCM+poJR+9/3yW80ZMBqh5vfgOO30Ca eKPglPDIraZBdPBGJTQ/Ea9FhML+ckQ= -----END CERTIFICATE-----Generated at Sat Oct 11 00:22:51 2025 by rpki-client