$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c16413ed-6122-30f6-8082-e5b7db4dbf17.roa File: c16413ed-6122-30f6-8082-e5b7db4dbf17.roa (raw, json) Hash identifier: xrNbMXqINskFxi5TU7UOBkyX0w/aFUohDiQItAhRTTY= Subject key identifier: 72:F6:1C:CF:83:C1:39:A8:49:06:14:11:17:A5:CD:C0:19:5F:57:67 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D04977FA89AEC00A02040 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c16413ed-6122-30f6-8082-e5b7db4dbf17.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 32185 IP address blocks: 209.60.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:04:97:7f:a8:9a:ec:00:a0:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=b67565cd-793a-4d36-af27-dacbd25a6e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3f:75:07:bf:69:5b:d8:f5:de:09:fe:42:21: 44:62:23:0c:18:72:b0:05:3f:9a:18:65:a2:17:b4: 1b:f7:a9:3c:02:e1:c7:95:69:8e:22:e6:51:42:dd: 75:fb:c9:e8:b5:38:94:af:65:35:b3:bb:71:2c:11: 70:a7:01:08:09:0f:71:8a:5c:8a:d6:a3:47:93:c7: e1:47:f8:ef:d3:43:3f:d9:8a:83:ed:85:4f:43:0e: ea:f3:42:82:d4:02:89:48:70:6c:04:4e:8e:44:d6: 06:68:78:f6:82:bb:d1:d8:4a:4d:2e:9e:c0:46:51: 0c:a2:a2:c2:9a:f4:95:d0:4e:8b:bb:83:de:72:77: 64:48:b0:12:35:72:40:a6:18:02:aa:d8:1c:9b:d6: ac:bf:96:a6:5c:5c:50:bd:a6:87:d8:27:5d:b6:00: 94:29:2d:6d:79:d2:dd:e2:b9:aa:f7:c4:e1:21:ab: f5:0d:ac:97:e3:6f:b0:4d:7c:16:12:02:5c:66:c6: 41:2d:73:f1:57:27:91:2c:80:f0:d6:b8:a5:2c:18: d9:c4:67:5a:82:76:3b:59:2d:e3:21:b6:2b:c0:55: 57:bc:56:cb:e0:12:1b:b6:6c:20:9e:76:24:61:e9: c4:0c:fb:07:d7:05:3b:56:53:fb:ef:7c:1a:59:03: ce:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F6:1C:CF:83:C1:39:A8:49:06:14:11:17:A5:CD:C0:19:5F:57:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c16413ed-6122-30f6-8082-e5b7db4dbf17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.60.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:8e:e0:93:c5:e7:de:43:2f:27:d8:73:7d:a0:8e:7f:f5:2e: 37:9c:bf:7c:0b:b7:01:0d:01:28:03:9a:65:88:a7:d8:a8:b3: 5b:59:97:a8:c6:b0:1f:fb:54:d6:65:91:be:90:16:89:0c:03: 7f:86:c5:bf:ff:4a:12:d5:32:c0:c4:c6:3a:c9:61:a8:d4:1f: d4:10:04:9b:de:6f:43:9a:6b:6c:40:c4:55:87:13:b7:07:56: 0f:eb:48:b3:b8:61:4e:98:a5:a8:84:ed:53:50:3f:32:ef:93: 36:9b:e2:2f:ae:b7:ce:ff:e5:d4:be:c6:c6:23:24:16:27:75: 27:34:6b:cc:0d:f5:45:b0:4a:2b:3b:d2:f8:7c:dc:85:bf:a5: 33:b8:5b:9d:b0:b2:5c:ef:df:ab:8e:1b:e5:54:20:a2:8c:90: fc:2c:a3:68:6b:46:43:60:be:97:0a:81:f3:c5:57:4d:ab:ed: 8c:00:6a:06:b0:0d:b8:d9:d7:5a:aa:21:26:85:af:43:f3:59: c1:b0:00:b4:a8:85:e6:5d:7c:fc:69:3f:e6:9d:d6:47:fc:7b: 49:6f:16:d6:7b:b8:1a:25:77:f8:c8:32:ee:d2:84:61:27:cd: bd:2e:f6:71:31:52:93:e3:f2:a5:20:a8:44:66:b9:ef:b3:50: ef:65:9d:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQSXf6ia7ACgIEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YjY3NTY1Y2QtNzkzYS00ZDM2LWFmMjctZGFjYmQyNWE2ZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz91B79pW9j13gn+QiFEYiMMGHKwBT+aGGWi F7Qb96k8AuHHlWmOIuZRQt11+8notTiUr2U1s7txLBFwpwEICQ9xilyK1qNHk8fh R/jv00M/2YqD7YVPQw7q80KC1AKJSHBsBE6ORNYGaHj2grvR2EpNLp7ARlEMoqLC mvSV0E6Lu4PecndkSLASNXJAphgCqtgcm9asv5amXFxQvaaH2CddtgCUKS1tedLd 4rmq98ThIav1DayX42+wTXwWEgJcZsZBLXPxVyeRLIDw1rilLBjZxGdagnY7WS3j IbYrwFVXvFbL4BIbtmwgnnYkYenEDPsH1wU7VlP773waWQPOtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHL2HM+DwTmoSQYUERelzcAZX1dnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzE2NDEzZWQtNjEyMi0z MGY2LTgwODItZTViN2RiNGRiZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TzvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeO4JPF595DLyfYc32gjn/1Ljecv3wLtwENASgDmmWIp9ios1tZl6jG sB/7VNZlkb6QFokMA3+Gxb//ShLVMsDExjrJYajUH9QQBJveb0Oaa2xAxFWHE7cH Vg/rSLO4YU6YpaiE7VNQPzLvkzab4i+ut87/5dS+xsYjJBYndSc0a8wN9UWwSis7 0vh83IW/pTO4W52wslzv36uOG+VUIKKMkPwso2hrRkNgvpcKgfPFV02r7YwAagaw DbjZ11qqISaFr0PzWcGwALSoheZdfPxpP+ad1kf8e0lvFtZ7uBold/jIMu7ShGEn zb0u9nExUpPj8qUgqERmue+zUO9lnbE= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:48 2025 by rpki-client