$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8899b6b-9fa9-3914-bf61-b1d21a0e7524.roa File: b8899b6b-9fa9-3914-bf61-b1d21a0e7524.roa (raw, json) Hash identifier: T3FHAqeBNxAnwmyltinDkVaMK+DWFij39M/dVzWTP4M= Subject key identifier: 0A:32:C3:77:DE:AE:ED:38:9D:B0:B8:AC:D3:05:11:76:82:A5:F2:42 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CD0839BD5D6260C236240 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8899b6b-9fa9-3914-bf61-b1d21a0e7524.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 14455 IP address blocks: 67.151.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:d0:83:9b:d5:d6:26:0c:23:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=8c37a6d3-0e2b-4f3e-97cf-5a2233329b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4f:02:36:13:bd:cb:ef:03:5d:4b:00:de:3a: 1f:1c:97:ad:98:d4:43:1a:cb:07:a9:21:6d:35:06: e2:fe:de:7d:10:df:0d:e4:85:a8:cb:1c:bd:98:14: 54:9e:45:8c:57:ac:5e:7e:ec:62:34:c5:e8:ac:31: 02:e9:14:46:d6:94:f2:75:00:2d:6b:37:ff:43:28: 44:33:df:72:0c:7e:96:67:7d:27:20:06:8c:02:80: 71:fd:2f:6e:03:9c:94:87:04:d1:a8:c6:4c:80:b8: 8f:f1:c3:6f:a4:9e:eb:0c:fc:35:9c:80:4d:6d:2e: 48:08:b6:a0:df:a6:ff:de:c3:8d:60:58:7f:20:e2: 3e:af:4b:7c:75:da:69:ad:03:dc:27:59:85:19:0b: c4:38:4e:8c:17:01:44:de:d1:ac:d5:fc:50:1a:e5: a8:72:64:30:a6:30:ad:50:f5:28:5d:dc:6a:7c:7f: f4:2b:25:41:b5:ea:b8:af:79:1d:65:17:14:20:ff: aa:22:18:22:12:29:d3:46:9b:2f:3f:4b:55:82:b2: bc:47:10:90:f7:8c:6f:d4:1c:de:ac:13:61:2f:a7: 33:e0:26:1b:55:be:b7:4c:08:10:86:cd:e4:64:57: 12:52:56:e9:32:15:bc:c3:64:e1:f5:58:74:d9:43: 57:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:32:C3:77:DE:AE:ED:38:9D:B0:B8:AC:D3:05:11:76:82:A5:F2:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8899b6b-9fa9-3914-bf61-b1d21a0e7524.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.151.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:7c:af:4f:21:77:0d:72:6b:17:b6:a5:8a:75:5a:f9:f0:0c: 2a:d9:f2:5b:e6:7c:44:40:65:37:8b:9a:98:ba:b2:bc:91:2f: e0:f7:1a:15:be:81:c0:95:6b:2f:2b:fe:25:ea:5f:45:4a:80: 08:cd:5f:94:62:49:87:73:39:0a:51:49:f4:d1:c4:10:5a:ed: 92:02:cf:4f:97:f0:e2:a3:22:75:67:b4:4f:44:a1:11:75:e6: fe:40:48:a9:da:fa:b9:85:ea:c6:42:2f:c7:3b:ed:84:10:c2: ac:1a:26:5a:cb:d3:07:eb:a0:f6:06:d5:2c:e5:89:90:b8:3e: 5c:b8:c5:67:d4:f5:59:24:a3:8b:42:50:85:34:16:ea:64:2e: ae:03:f5:4f:4d:ef:40:cf:78:6b:0a:d2:6c:b9:e2:b7:c9:91: b1:c1:92:7c:da:08:07:82:50:b2:bf:b6:20:95:4b:b7:79:97: 5c:71:1e:d6:e0:5f:8d:85:20:5a:d5:8b:4a:32:46:96:3f:20: 94:2d:23:1c:4f:73:95:f5:a6:28:37:15:88:c0:5a:67:60:b5: 56:59:28:10:b4:67:b2:ad:89:fe:64:c0:97:4e:77:ab:23:5d: 07:3a:98:a4:14:9a:03:a1:b9:2f:7a:62:ee:81:c2:8d:4c:c5: e6:d0:2b:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXNCDm9XWJgwjYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk OGMzN2E2ZDMtMGUyYi00ZjNlLTk3Y2YtNWEyMjMzMzI5Yjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk8CNhO9y+8DXUsA3jofHJetmNRDGssHqSFt NQbi/t59EN8N5IWoyxy9mBRUnkWMV6xefuxiNMXorDEC6RRG1pTydQAtazf/QyhE M99yDH6WZ30nIAaMAoBx/S9uA5yUhwTRqMZMgLiP8cNvpJ7rDPw1nIBNbS5ICLag 36b/3sONYFh/IOI+r0t8ddpprQPcJ1mFGQvEOE6MFwFE3tGs1fxQGuWocmQwpjCt UPUoXdxqfH/0KyVBteq4r3kdZRcUIP+qIhgiEinTRpsvP0tVgrK8RxCQ94xv1Bze rBNhL6cz4CYbVb63TAgQhs3kZFcSUlbpMhW8w2Th9Vh02UNXgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoyw3feru04nbC4rNMFEXaCpfJCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjg4OTliNmItOWZhOS0z OTE0LWJmNjEtYjFkMjFhMGU3NTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ5fzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACt8r08hdw1yaxe2pYp1WvnwDCrZ8lvmfERAZTeLmpi6sryRL+D3GhW+ gcCVay8r/iXqX0VKgAjNX5RiSYdzOQpRSfTRxBBa7ZICz0+X8OKjInVntE9EoRF1 5v5ASKna+rmF6sZCL8c77YQQwqwaJlrL0wfroPYG1SzliZC4Ply4xWfU9Vkko4tC UIU0FupkLq4D9U9N70DPeGsK0my54rfJkbHBknzaCAeCULK/tiCVS7d5l1xxHtbg X42FIFrVi0oyRpY/IJQtIxxPc5X1pig3FYjAWmdgtVZZKBC0Z7Ktif5kwJdOd6sj XQc6mKQUmgOhuS96Yu6Bwo1MxebQK8I= -----END CERTIFICATE-----Generated at Sat Oct 11 00:19:24 2025 by rpki-client