$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c3503e4d-f8af-3c8f-9581-42da4ef0073e.roa File: c3503e4d-f8af-3c8f-9581-42da4ef0073e.roa (raw, json) Hash identifier: yDPxOgb7bWkOeDYwvx9Hgfjbmzlrfyc1jjyfSaH4eeQ= Subject key identifier: 29:23:57:1B:AD:C0:8A:25:FD:89:54:FB:87:40:F2:B3:45:BD:E6:F9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2A2C486BADEB97B631566380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c3503e4d-f8af-3c8f-9581-42da4ef0073e.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 151.213.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:48:6b:ad:eb:97:b6:31:56:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=338c9377-bd0c-408b-b79a-4bc6f37710d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:db:e9:2e:fe:57:e9:71:a9:40:91:0c:10:6b: f2:c1:41:57:92:6a:aa:d8:60:aa:3f:05:6b:01:68: 19:ca:e0:73:f3:d6:b2:82:5e:f3:5c:57:fa:26:68: 3d:54:f6:e5:b4:0e:a1:24:3d:b5:c4:c7:65:7b:b2: c1:65:6b:9d:e5:c6:86:c9:ab:d5:4d:c7:2b:14:62: fc:84:5d:de:7c:e0:58:ae:88:cd:4e:55:ae:4d:3c: 36:8f:4a:2c:4e:60:03:59:84:3e:49:b8:a1:48:b9: b9:34:ea:88:e8:82:31:d4:ce:5b:66:03:c7:9b:4a: bb:95:ca:78:26:57:b5:76:87:9e:48:ae:ba:97:ff: aa:31:14:87:c9:da:5e:cd:34:5e:09:92:a0:de:de: 82:a7:ae:f4:bd:21:59:b0:ee:c1:53:fc:9c:1f:66: 64:7d:0f:de:73:bf:85:bc:15:87:1d:90:29:3a:67: 23:46:3f:e7:ed:56:b5:a7:29:60:93:9f:41:df:89: 39:ad:53:15:fe:ac:98:81:3b:46:a6:db:ed:4c:de: f3:42:f4:9a:a7:c9:bf:36:f7:f8:80:4e:a0:34:bc: 25:2f:73:f1:ce:e8:dc:2c:a6:53:5f:a1:53:b8:f4: c4:de:09:d8:70:77:ac:c7:09:cd:f9:c1:a0:1c:99: bd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:23:57:1B:AD:C0:8A:25:FD:89:54:FB:87:40:F2:B3:45:BD:E6:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c3503e4d-f8af-3c8f-9581-42da4ef0073e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:6c:42:fe:72:3b:cd:7c:ea:d8:82:b3:a1:59:12:1b:9d:04: f3:3c:68:f5:68:78:48:b6:00:cc:51:8c:3a:3f:23:e1:b6:b1: 13:b3:16:e3:a7:1c:3e:fa:7f:2e:67:b7:c6:24:8f:1d:b3:dd: 21:25:07:21:b6:a1:e0:83:ba:50:06:47:eb:12:16:3b:32:35: 83:bb:ba:51:c2:cf:cf:32:9b:23:28:f2:73:b0:3d:f3:b3:9a: 7f:08:19:74:65:26:b2:11:81:b1:90:de:65:03:ae:ad:cc:30: ca:ed:95:25:ec:15:d6:79:bd:d5:f8:b9:69:2f:2a:5d:23:9e: e9:8f:ed:7c:3c:c3:0b:f5:1f:ca:90:4b:4b:15:7e:86:d4:bd: 20:52:c5:c4:11:0b:14:f8:99:29:f3:0a:ba:08:d9:41:6a:b3: ac:fb:a5:68:1f:62:86:2e:c7:d4:28:d6:b5:23:df:38:b4:20: c7:8e:83:8f:72:5d:77:f0:3b:45:48:91:b4:95:31:17:df:06: 5a:ee:f9:11:d7:c1:67:81:97:c1:f0:9d:35:ab:f5:a8:3c:51: a8:ca:76:20:cf:63:7c:c4:b3:64:0f:4f:0c:b1:bf:19:cd:19: f6:1d:45:c4:ea:84:eb:a6:6d:50:91:9e:5a:4e:83:63:96:cc: 5b:ef:f7:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEhrreuXtjFWY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk MzM4YzkzNzctYmQwYy00MDhiLWI3OWEtNGJjNmYzNzcxMGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNvpLv5X6XGpQJEMEGvywUFXkmqq2GCqPwVr AWgZyuBz89aygl7zXFf6Jmg9VPbltA6hJD21xMdle7LBZWud5caGyavVTccrFGL8 hF3efOBYrojNTlWuTTw2j0osTmADWYQ+SbihSLm5NOqI6IIx1M5bZgPHm0q7lcp4 Jle1doeeSK66l/+qMRSHydpezTReCZKg3t6Cp670vSFZsO7BU/ycH2ZkfQ/ec7+F vBWHHZApOmcjRj/n7Va1pylgk59B34k5rVMV/qyYgTtGptvtTN7zQvSap8m/Nvf4 gE6gNLwlL3PxzujcLKZTX6FTuPTE3gnYcHesxwnN+cGgHJm9iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkjVxutwIol/YlU+4dA8rNFveb5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzM1MDNlNGQtZjhhZi0z YzhmLTk1ODEtNDJkYTRlZjAwNzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl9UAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZsQv5yO8186tiCs6FZEhudBPM8aPVoeEi2AMxRjDo/I+G2sROzFuOn HD76fy5nt8Ykjx2z3SElByG2oeCDulAGR+sSFjsyNYO7ulHCz88ymyMo8nOwPfOz mn8IGXRlJrIRgbGQ3mUDrq3MMMrtlSXsFdZ5vdX4uWkvKl0jnumP7Xw8wwv1H8qQ S0sVfobUvSBSxcQRCxT4mSnzCroI2UFqs6z7pWgfYoYux9Qo1rUj3zi0IMeOg49y XXfwO0VIkbSVMRffBlru+RHXwWeBl8HwnTWr9ag8UajKdiDPY3zEs2QPTwyxvxnN GfYdRcTqhOumbVCRnlpOg2OWzFvv9yg= -----END CERTIFICATE-----Generated at Fri Oct 10 17:49:13 2025 by rpki-client