$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba2d51e6-254f-3d1e-b335-a958b5d093e4.roa File: ba2d51e6-254f-3d1e-b335-a958b5d093e4.roa (raw, json) Hash identifier: FHAWom4EQAKoM8lmNLdJNW3henfiE9PoDzSjL/TcnoM= Subject key identifier: 41:20:76:92:67:AC:B3:41:0D:EA:08:57:44:E7:24:02:E9:8B:B2:13 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CFC591BD811DADEB6BBC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba2d51e6-254f-3d1e-b335-a958b5d093e4.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 209.60.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:fc:59:1b:d8:11:da:de:b6:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=3daf3ea7-e03f-40b3-bbfc-7a6c270d3f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6c:7e:6d:08:83:4d:dd:48:f6:cb:34:a3:45: 32:82:47:e5:60:c2:88:df:c6:8f:30:87:2e:a1:cf: e6:24:a5:5d:96:01:37:ac:57:12:ae:49:17:c8:b7: 64:f1:77:0f:18:68:22:23:8e:de:82:a4:18:85:b1: 1e:44:77:48:84:b0:3b:9b:09:65:95:2e:68:56:50: ca:dc:4b:95:4e:ce:59:4f:d4:ff:98:2d:c5:bc:4e: c7:9d:af:66:1f:90:6d:26:a5:75:97:34:53:d7:44: 95:29:cc:3e:4e:d1:7e:7e:da:b7:a9:27:41:7a:a8: 5d:53:29:cc:5c:39:77:bc:d7:8e:e1:8c:63:72:46: ae:38:88:ac:d6:9f:4d:31:69:f6:d0:18:f9:b2:39: 04:28:8b:b5:3e:40:ef:b5:59:ed:11:fc:5c:65:ca: 3f:b3:67:c3:c6:42:5f:ae:20:5f:c6:43:56:cf:f5: 56:22:b9:c1:6a:aa:e3:f6:c0:65:09:5b:7a:42:4f: b0:c1:ed:ba:c9:8c:29:10:1b:0f:2a:47:af:f7:0d: a1:5e:31:e9:79:30:b5:aa:ae:4a:3e:63:cd:6a:15: bf:3a:b6:11:80:28:55:df:0c:f9:de:3c:a5:4c:3c: 90:72:3f:1a:48:4b:e5:b6:70:cc:c5:a0:4f:7b:f0: 44:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:20:76:92:67:AC:B3:41:0D:EA:08:57:44:E7:24:02:E9:8B:B2:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba2d51e6-254f-3d1e-b335-a958b5d093e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.60.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:67:0a:ca:d3:ea:e7:1a:31:b6:de:e7:26:71:4e:79:a3:42: b7:56:82:6b:44:e7:00:ef:9c:ac:f4:2b:77:76:ba:5f:5a:b7: f4:ae:f5:df:b1:e8:77:3f:d0:ae:31:38:24:23:e5:70:d9:dd: 01:bd:ec:e6:57:b4:12:67:19:85:45:dc:b6:3e:ae:0f:82:52: 06:94:ca:9e:7d:12:48:c6:d4:75:2b:5a:95:60:c7:80:03:a5: 8d:51:c9:6d:97:5c:30:32:b7:a8:1c:75:61:8d:aa:02:d7:33: 78:95:da:f6:88:5c:65:f9:97:6c:d4:28:67:ee:5f:9b:a5:b5: 53:1f:ba:a8:c0:8a:1e:73:a2:3c:10:46:c9:6f:8f:ba:1d:e9: 76:e4:47:34:e8:d4:b7:c9:2b:2c:e6:16:29:63:ef:e0:9f:02: a2:80:3d:c3:03:99:0f:db:a3:ac:2f:1d:22:14:6f:d5:19:58: 3f:08:c7:b7:d5:f8:7b:33:a1:c0:f6:87:e5:ba:58:b7:6c:9a: 64:8d:9d:8e:0f:4b:11:30:ec:72:c9:9d:8d:16:70:b8:13:84: 75:68:a5:8b:e1:ff:fc:40:9a:7d:5b:0f:cb:0f:16:67:c8:b8: 09:d3:46:97:b2:45:26:84:4f:8d:f9:e3:a4:91:e1:93:17:da: fc:7e:11:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPxZG9gR2t62u8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk M2RhZjNlYTctZTAzZi00MGIzLWJiZmMtN2E2YzI3MGQzZjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGx+bQiDTd1I9ss0o0UygkflYMKI38aPMIcu oc/mJKVdlgE3rFcSrkkXyLdk8XcPGGgiI47egqQYhbEeRHdIhLA7mwlllS5oVlDK 3EuVTs5ZT9T/mC3FvE7Hna9mH5BtJqV1lzRT10SVKcw+TtF+ftq3qSdBeqhdUynM XDl3vNeO4YxjckauOIis1p9NMWn20Bj5sjkEKIu1PkDvtVntEfxcZco/s2fDxkJf riBfxkNWz/VWIrnBaqrj9sBlCVt6Qk+wwe26yYwpEBsPKkev9w2hXjHpeTC1qq5K PmPNahW/OrYRgChV3wz53jylTDyQcj8aSEvltnDMxaBPe/BEuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEgdpJnrLNBDeoIV0TnJALpi7ITMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmEyZDUxZTYtMjU0Zi0z ZDFlLWIzMzUtYTk1OGI1ZDA5M2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdnCsrT6ucaMbbe5yZxTnmjQrdWgmtE5wDvnKz0K3d2ul9at/Su9d+x 6Hc/0K4xOCQj5XDZ3QG97OZXtBJnGYVF3LY+rg+CUgaUyp59EkjG1HUrWpVgx4AD pY1RyW2XXDAyt6gcdWGNqgLXM3iV2vaIXGX5l2zUKGfuX5ultVMfuqjAih5zojwQ Rslvj7od6XbkRzTo1LfJKyzmFilj7+CfAqKAPcMDmQ/bo6wvHSIUb9UZWD8Ix7fV +HszocD2h+W6WLdsmmSNnY4PSxEw7HLJnY0WcLgThHVopYvh//xAmn1bD8sPFmfI uAnTRpeyRSaET43546SR4ZMX2vx+EXc= -----END CERTIFICATE-----Generated at Fri Oct 10 17:47:42 2025 by rpki-client