$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b87d8c86-75bb-339b-8fd8-3d7173a88cc5.roa File: b87d8c86-75bb-339b-8fd8-3d7173a88cc5.roa (raw, json) Hash identifier: vCnmRcG/WVdf463taijBEhq5mSrf+H4hWvvONK8xmco= Subject key identifier: 89:BF:E9:20:1B:F6:59:05:35:C3:29:CD:E4:00:F5:0F:F1:A6:54:F3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3F1C598468FA7755C85106C8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b87d8c86-75bb-339b-8fd8-3d7173a88cc5.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 174.130.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:59:84:68:fa:77:55:c8:51:06:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=360f56af-f1b9-4362-939d-e31e46413ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b1:d0:7e:72:33:ce:06:6b:e4:2d:38:53:ad: f1:20:15:c1:1f:ba:9d:33:c1:9d:34:3b:c9:59:4f: 2d:31:e0:3a:b9:aa:74:eb:e2:34:e6:b0:93:54:8b: 2b:11:3c:c1:e2:34:9f:c2:4c:bb:fc:8e:4b:2c:ef: 6d:ee:96:93:a7:2f:8a:d0:7f:09:bb:23:e3:f2:5c: 03:8c:93:1c:7f:c6:07:f1:48:02:b3:ba:70:8b:90: b9:13:77:ea:ab:dd:70:6d:71:50:bb:2a:26:f6:96: f5:1c:b9:21:03:10:db:ff:77:3d:80:fc:09:96:b4: 5b:dc:df:3a:d6:be:55:7e:f5:99:5d:b9:33:ad:ad: 5f:d3:ac:be:c5:02:07:13:39:7f:ca:17:fb:68:ef: f1:d0:07:86:b8:3b:d9:9f:86:50:c8:d1:6b:eb:fb: 63:a0:29:1d:de:0a:38:e4:a7:26:e4:21:84:7c:16: 49:b3:3a:40:88:58:78:dc:62:8d:6d:4a:3a:c7:d5: 32:f7:cf:7f:7d:da:59:8f:f7:66:d9:f1:42:b2:ff: f7:fc:50:08:c3:5a:83:5f:ed:dc:e3:ec:d0:b6:28: e7:82:57:82:f9:55:05:64:a9:7b:7a:b0:b7:be:5a: f8:92:69:d5:27:d8:1e:14:fc:1b:7f:09:f6:da:c3: b9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BF:E9:20:1B:F6:59:05:35:C3:29:CD:E4:00:F5:0F:F1:A6:54:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b87d8c86-75bb-339b-8fd8-3d7173a88cc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:d1:69:db:a7:bf:74:c8:4e:56:4a:0b:e8:5c:91:43:96:58: 5e:5c:8a:d4:9d:b8:46:31:3c:f0:bf:92:5d:d0:5d:4c:e8:0b: bd:00:b2:2c:ba:83:16:4d:55:bf:c7:da:ca:25:98:3f:b1:e6: e2:a5:a2:f2:95:16:2c:42:91:25:c6:33:28:c4:c9:ce:36:45: e6:17:35:2b:65:78:45:4d:22:55:ee:0c:2c:2a:1c:70:0a:a5: 3e:5f:20:c8:13:00:2b:59:72:ff:0d:1a:70:cc:16:66:c0:76: f8:93:14:5e:18:80:f8:25:bc:08:a8:30:32:87:4c:0e:f2:84: d3:92:07:ea:a3:3c:6f:bc:a2:26:7c:15:e1:6b:60:2b:38:ef: 9e:84:ac:76:76:a4:dc:92:9e:d3:36:3c:54:4e:a5:2f:1b:e4: 89:4c:0a:2b:a1:6e:75:bf:c9:d8:80:18:40:e2:1f:b3:80:82: 57:d4:a8:7c:a7:cc:c1:ae:42:3c:25:f1:e6:09:cb:1f:d4:eb: b6:95:ff:06:8b:0e:91:bc:38:8e:90:07:1c:95:b4:67:95:a1: dd:3b:70:2a:0a:59:3e:00:84:7f:06:82:ba:e9:df:b7:74:4e: ec:5a:14:1f:e7:d7:22:49:0c:46:4d:44:cb:58:bb:aa:f1:0d: 32:0e:07:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HFmEaPp3VchRBsgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk MzYwZjU2YWYtZjFiOS00MzYyLTkzOWQtZTMxZTQ2NDEzZWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7HQfnIzzgZr5C04U63xIBXBH7qdM8GdNDvJ WU8tMeA6uap06+I05rCTVIsrETzB4jSfwky7/I5LLO9t7paTpy+K0H8JuyPj8lwD jJMcf8YH8UgCs7pwi5C5E3fqq91wbXFQuyom9pb1HLkhAxDb/3c9gPwJlrRb3N86 1r5VfvWZXbkzra1f06y+xQIHEzl/yhf7aO/x0AeGuDvZn4ZQyNFr6/tjoCkd3go4 5Kcm5CGEfBZJszpAiFh43GKNbUo6x9Uy989/fdpZj/dm2fFCsv/3/FAIw1qDX+3c 4+zQtijngleC+VUFZKl7erC3vlr4kmnVJ9geFPwbfwn22sO5kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIm/6SAb9lkFNcMpzeQA9Q/xplTzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjg3ZDhjODYtNzViYi0z MzliLThmZDgtM2Q3MTczYTg4Y2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBroKUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/Radunv3TITlZKC+hckUOWWF5citSduEYxPPC/kl3QXUzoC70Asiy6 gxZNVb/H2solmD+x5uKlovKVFixCkSXGMyjEyc42ReYXNStleEVNIlXuDCwqHHAK pT5fIMgTACtZcv8NGnDMFmbAdviTFF4YgPglvAioMDKHTA7yhNOSB+qjPG+8oiZ8 FeFrYCs4756ErHZ2pNySntM2PFROpS8b5IlMCiuhbnW/ydiAGEDiH7OAglfUqHyn zMGuQjwl8eYJyx/U67aV/waLDpG8OI6QBxyVtGeVod07cCoKWT4AhH8Ggrrp37d0 TuxaFB/n1yJJDEZNRMtYu6rxDTIOB4E= -----END CERTIFICATE-----Generated at Fri Oct 10 20:00:13 2025 by rpki-client