$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb391dc9-1f19-3e65-be6c-947a5db5500a.roa File: bb391dc9-1f19-3e65-be6c-947a5db5500a.roa (raw, json) Hash identifier: /4iMUem5AWJlKkyJXMflP6k7zzxpEJTGKm38tHS001I= Subject key identifier: 00:1C:97:9D:60:3C:6F:D4:52:3A:08:D5:87:49:E9:3F:0B:5D:C3:8B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D03C97E027ED7A39DAF60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb391dc9-1f19-3e65-be6c-947a5db5500a.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 27338 IP address blocks: 209.192.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:03:c9:7e:02:7e:d7:a3:9d:af:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=638d243a-8c14-4117-a26d-34e160e5d4c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9a:52:3e:08:05:82:86:ea:c5:15:da:0e:a7: a5:f1:22:9f:ee:76:2c:2c:2a:77:20:8e:59:00:bc: 33:8f:fb:da:d3:b2:2c:ea:1b:dc:26:95:1b:55:44: 3b:9d:c3:5c:0a:8b:a6:9f:f7:b8:a3:f9:c3:9f:c7: 47:e2:af:73:10:7e:17:6b:b6:80:e7:9f:bf:be:b7: 04:55:66:39:a3:f1:a7:ff:f2:e2:07:23:b8:6f:4d: e6:b3:48:64:20:d9:24:92:3e:46:7d:40:b5:55:db: cd:19:d2:5f:c8:68:e8:6a:8d:9b:b4:38:1c:64:00: 27:9e:01:78:3d:c7:f9:ab:d9:a6:73:0e:69:08:8e: 4e:38:a4:d5:67:57:6e:7d:1d:11:7b:fa:2b:db:20: d8:53:73:a9:a1:b3:1a:01:74:cb:76:2f:64:e0:d4: 11:0b:ef:94:1b:89:cd:d8:e3:d0:1f:22:b2:64:cc: 36:01:c2:9d:7d:5d:dc:39:3f:7e:7a:35:2b:a3:41: 54:3d:bc:42:75:5d:37:e2:e6:c6:b8:1d:7a:35:8a: 12:a2:6d:85:83:6c:9f:cb:17:15:8e:25:0e:bc:ac: ad:93:12:dc:e3:bf:18:3e:72:89:7a:4c:a8:86:47: d3:77:c4:c8:be:49:d1:8e:20:c1:17:c9:4b:ef:35: 29:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1C:97:9D:60:3C:6F:D4:52:3A:08:D5:87:49:E9:3F:0B:5D:C3:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb391dc9-1f19-3e65-be6c-947a5db5500a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:e9:e0:a8:60:e8:95:c9:1d:20:d3:9f:d5:df:58:1e:53:82: 8f:2c:52:ed:43:87:67:d8:d6:cf:14:ae:9d:9e:58:89:25:63: b7:8e:bc:42:98:79:ec:ea:3d:8d:ad:35:6d:b7:7e:d0:e1:f5: 59:9b:6f:32:46:64:70:57:24:e5:31:f2:df:0f:ee:db:6e:8f: 76:6b:bc:14:c2:0e:1e:d7:86:c0:ec:9e:a0:e2:cb:c7:4f:78: 15:40:e3:7a:31:3a:3e:14:73:5f:1b:7f:29:3d:4b:5e:c9:50: c4:1f:c7:47:b2:30:a1:b6:21:cc:8e:a7:1f:fb:03:73:4e:d7: ce:ec:92:39:43:f3:c5:c1:25:46:35:c9:99:e5:3f:6e:d7:39: 31:e3:0c:99:b4:84:5a:6f:be:33:84:e1:79:9a:18:59:0f:3e: cb:ea:fd:a4:39:94:db:4f:e7:46:62:6c:6e:fc:95:98:de:43: f8:c4:4e:35:61:97:e9:8f:5c:13:ab:4d:70:49:e4:44:3b:02: ed:43:83:ad:20:26:55:48:0d:68:a0:b3:0e:91:a7:88:af:5a: 0f:4d:43:29:6a:3e:30:d9:32:67:7e:58:d2:65:b2:ca:04:04: bb:9f:84:7f:72:5f:22:56:34:c3:2e:df:d7:9c:75:53:7c:3b: 9b:ab:76:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQPJfgJ+16Odr2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NjM4ZDI0M2EtOGMxNC00MTE3LWEyNmQtMzRlMTYwZTVkNGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArppSPggFgobqxRXaDqel8SKf7nYsLCp3II5Z ALwzj/va07Is6hvcJpUbVUQ7ncNcCoumn/e4o/nDn8dH4q9zEH4Xa7aA55+/vrcE VWY5o/Gn//LiByO4b03ms0hkINkkkj5GfUC1VdvNGdJfyGjoao2btDgcZAAnngF4 Pcf5q9mmcw5pCI5OOKTVZ1dufR0Re/or2yDYU3OpobMaAXTLdi9k4NQRC++UG4nN 2OPQHyKyZMw2AcKdfV3cOT9+ejUro0FUPbxCdV034ubGuB16NYoSom2Fg2yfyxcV jiUOvKytkxLc478YPnKJekyohkfTd8TIvknRjiDBF8lL7zUpKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAcl51gPG/UUjoI1YdJ6T8LXcOLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmIzOTFkYzktMWYxOS0z ZTY1LWJlNmMtOTQ3YTVkYjU1MDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cB7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTp4Khg6JXJHSDTn9XfWB5Tgo8sUu1Dh2fY1s8Urp2eWIklY7eOvEKY eezqPY2tNW23ftDh9VmbbzJGZHBXJOUx8t8P7ttuj3ZrvBTCDh7XhsDsnqDiy8dP eBVA43oxOj4Uc18bfyk9S17JUMQfx0eyMKG2IcyOpx/7A3NO187skjlD88XBJUY1 yZnlP27XOTHjDJm0hFpvvjOE4XmaGFkPPsvq/aQ5lNtP50ZibG78lZjeQ/jETjVh l+mPXBOrTXBJ5EQ7Au1Dg60gJlVIDWigsw6Rp4ivWg9NQylqPjDZMmd+WNJlssoE BLufhH9yXyJWNMMu39ecdVN8O5urdtU= -----END CERTIFICATE-----Generated at Fri Oct 10 22:21:13 2025 by rpki-client