$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c5c84ef7-1b9a-3132-a3a6-742a0ac581c1.roa File: c5c84ef7-1b9a-3132-a3a6-742a0ac581c1.roa (raw, json) Hash identifier: nsFnEzM/JPt3pItT9BaEG44gMMuDRdPaXMzpwpfLp18= Subject key identifier: 6E:DE:01:29:AD:71:1C:51:91:60:28:95:A9:E0:A4:6F:5C:22:61:27 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B79BCB0804C6655B0592C7300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c5c84ef7-1b9a-3132-a3a6-742a0ac581c1.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 151.213.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b0:80:4c:66:55:b0:59:2c:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=1e4ebbd0-59ad-42ec-b85e-fc3caf997e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4f:85:3d:48:90:09:57:eb:d2:5d:6c:80:cf: fd:24:a4:33:27:f5:43:53:c9:86:8c:09:66:d4:bf: 7a:71:b5:72:74:a2:cb:11:51:cd:82:c8:e0:d4:e3: d0:23:07:2d:e3:4a:8a:c4:c2:11:21:69:e7:42:72: a9:2b:1c:32:69:8e:15:b6:0f:d2:40:90:d5:a0:14: 74:68:13:b4:7e:03:18:80:56:e2:c2:a4:cf:e2:8e: a8:aa:5c:d6:ee:a8:80:f6:69:08:96:e9:6e:9c:89: 9b:62:23:44:c7:e3:00:4c:de:0a:41:71:17:43:00: 73:4b:0c:6a:09:e6:86:20:47:91:5d:de:b1:9b:d1: 0b:b5:0b:9d:77:d3:fe:1c:51:7e:83:73:ea:f0:b6: ea:ce:73:82:8b:72:a3:38:85:84:00:f0:6b:57:52: 8e:86:df:f1:ed:11:8a:ab:3b:fb:2a:13:9e:f5:99: c6:d6:b5:1c:e0:92:fb:3b:31:b8:53:88:e4:f7:0d: fa:30:52:f7:b3:88:fd:71:1d:9d:08:3e:b4:b8:b6: cd:a1:83:e3:ff:cc:30:d7:55:4e:03:75:13:2e:02: d1:5d:d5:88:c4:12:82:a1:89:4c:42:83:42:0a:f1: 09:41:10:ae:38:2e:15:8a:8c:d9:54:17:5b:4d:d1: 4b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:DE:01:29:AD:71:1C:51:91:60:28:95:A9:E0:A4:6F:5C:22:61:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c5c84ef7-1b9a-3132-a3a6-742a0ac581c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:04:36:ed:58:3c:c7:96:c3:5c:b9:05:05:e4:b7:ac:63:40: 68:96:d7:d2:6b:82:ec:e9:c7:bf:ad:48:c0:99:a2:14:94:75: 61:a1:6c:a0:f9:fa:f2:05:d7:76:18:06:24:cd:26:81:11:23: 46:82:ff:04:52:93:01:43:e1:8a:7a:71:ca:b1:98:a5:31:3a: 2a:09:22:04:0d:0c:2f:39:b1:63:6f:aa:49:4d:1b:a7:37:7e: 36:49:df:04:18:c6:5b:0b:15:99:03:eb:aa:55:92:ca:14:70: 8d:95:25:57:9d:9b:74:cc:fa:12:14:13:3b:1c:0f:fd:5c:ec: 6a:63:8d:e2:dc:4f:16:9c:6e:5e:fc:cf:08:fc:52:fb:b0:39: 52:a8:1a:80:db:c3:b5:97:b0:ad:8b:5e:a9:19:a0:f0:20:43: 15:3c:39:7b:45:30:45:e6:9d:92:82:ac:72:36:db:31:51:e4: 88:ff:4c:43:34:bb:6a:b6:85:fa:2f:70:27:a7:51:ac:1e:65: b0:a6:fe:03:bd:6d:e9:27:7f:c0:38:eb:02:30:7d:51:a0:9c: 3f:de:30:9f:76:3c:4f:0b:25:6e:de:b1:a7:05:00:65:1b:ff: 91:83:ba:27:e2:52:da:68:17:95:14:0b:78:6b:8f:b9:53:8b: 01:08:65:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLCATGZVsFkscwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk MWU0ZWJiZDAtNTlhZC00MmVjLWI4NWUtZmMzY2FmOTk3ZTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE+FPUiQCVfr0l1sgM/9JKQzJ/VDU8mGjAlm 1L96cbVydKLLEVHNgsjg1OPQIwct40qKxMIRIWnnQnKpKxwyaY4Vtg/SQJDVoBR0 aBO0fgMYgFbiwqTP4o6oqlzW7qiA9mkIlulunImbYiNEx+MATN4KQXEXQwBzSwxq CeaGIEeRXd6xm9ELtQudd9P+HFF+g3Pq8LbqznOCi3KjOIWEAPBrV1KOht/x7RGK qzv7KhOe9ZnG1rUc4JL7OzG4U4jk9w36MFL3s4j9cR2dCD60uLbNoYPj/8ww11VO A3UTLgLRXdWIxBKCoYlMQoNCCvEJQRCuOC4ViozZVBdbTdFLUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7eASmtcRxRkWAolangpG9cImEnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzVjODRlZjctMWI5YS0z MTMyLWEzYTYtNzQyYTBhYzU4MWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl9VyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsENu1YPMeWw1y5BQXkt6xjQGiW19Jrguzpx7+tSMCZohSUdWGhbKD5 +vIF13YYBiTNJoERI0aC/wRSkwFD4Yp6ccqxmKUxOioJIgQNDC85sWNvqklNG6c3 fjZJ3wQYxlsLFZkD66pVksoUcI2VJVedm3TM+hIUEzscD/1c7GpjjeLcTxacbl78 zwj8UvuwOVKoGoDbw7WXsK2LXqkZoPAgQxU8OXtFMEXmnZKCrHI22zFR5Ij/TEM0 u2q2hfovcCenUaweZbCm/gO9beknf8A46wIwfVGgnD/eMJ92PE8LJW7esacFAGUb /5GDuifiUtpoF5UUC3hrj7lTiwEIZcE= -----END CERTIFICATE-----Generated at Fri Oct 10 19:57:36 2025 by rpki-client