$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7c09719-8a7b-380d-b72e-f3a01bc2b650.roa File: c7c09719-8a7b-380d-b72e-f3a01bc2b650.roa (raw, json) Hash identifier: 4hQVx29/uHCTeTzkesHfOV7aIRazhFp500k57tJhFtk= Subject key identifier: 45:BF:1A:40:F4:AD:CA:AB:81:27:47:C0:A6:AA:1A:40:B8:EB:27:C1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC907486A60F81E5F6E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7c09719-8a7b-380d-b72e-f3a01bc2b650.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 209.92.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c9:07:48:6a:60:f8:1e:5f:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=80e2d714-59a5-4ef8-bf23-12eac14a41ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e6:56:ea:40:6a:17:a5:e7:f6:33:ef:e0:fc: c6:87:13:a7:cb:2a:8a:1e:a3:c4:14:39:9c:79:aa: 2c:45:95:80:e9:e5:d7:78:c4:aa:51:e3:c2:fb:0f: 4c:b5:d5:ed:65:94:11:a0:92:80:02:89:cf:6c:d4: 3b:a6:81:dd:a2:1e:df:1e:e0:29:e5:2a:2b:06:ea: 3d:f4:2d:e3:f8:3f:76:5d:8a:d5:9e:78:48:39:da: 8a:ff:f7:2a:c4:e5:1e:c5:4a:e2:ac:78:1e:39:c5: 87:5b:d1:f5:67:fa:32:b2:9a:19:f3:87:da:ed:a6: df:2d:cb:88:19:b3:1c:1c:38:fb:f3:2b:4f:7c:ec: 3d:48:e1:e1:b9:c7:03:ae:b8:41:41:be:da:bd:a7: 90:9f:48:ac:f7:85:9f:d3:31:61:17:99:3a:e4:8a: f7:5d:52:7d:20:d5:56:c7:60:d1:57:df:38:db:a9: 5a:3a:29:93:e5:84:6b:4a:2c:91:8a:e7:d7:f3:57: 08:c3:2f:12:eb:bb:23:fc:54:48:b4:84:59:13:56: 72:b7:4a:54:f5:fb:1e:09:d3:01:15:b0:e1:b9:e5: a9:ff:15:3b:55:a0:fa:19:fb:a3:46:79:1d:d3:c0: 97:39:e7:8d:22:2b:26:cc:6f:43:f4:a6:33:0c:1f: cf:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BF:1A:40:F4:AD:CA:AB:81:27:47:C0:A6:AA:1A:40:B8:EB:27:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7c09719-8a7b-380d-b72e-f3a01bc2b650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.92.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:22:95:1e:7f:98:0e:d5:c0:cf:fa:47:9c:e2:5c:6e:db:2f: 28:db:b9:0e:0e:75:e3:b0:3b:51:52:97:9a:c1:8d:6d:29:b5: 1f:31:f0:57:49:81:2d:2d:e5:f4:36:2b:b1:d6:20:a7:1e:e6: 32:2f:03:0a:af:f0:65:ab:64:16:2a:57:fb:c3:15:20:5d:12: 8a:05:56:fe:49:d5:d6:3e:c0:fb:8c:cd:b1:ee:c2:d7:23:26: cb:53:8a:e2:f5:ec:cb:fa:a0:35:3f:61:90:c2:8b:d2:df:12: 4d:14:e9:dc:ac:bc:e8:52:85:f5:3a:dc:e2:61:3e:71:c2:77: f7:da:74:13:9a:b0:43:ac:55:06:03:f6:31:68:ad:90:2b:3f: a7:94:8a:e9:92:47:03:01:cd:42:28:2a:b3:bf:27:c1:5c:2e: bd:d7:51:f7:d4:e6:7c:e7:80:98:80:75:21:9f:4a:8d:67:82: 2a:7f:19:74:1f:29:4d:66:91:e7:5a:1c:ea:21:0e:65:63:1a: ab:39:bc:91:03:6b:75:f7:99:cd:11:70:06:00:00:3a:8f:b3: 8a:78:75:3d:a7:f6:24:0b:37:83:45:8a:a8:07:00:a4:0f:8f: 56:4c:79:d8:1f:5b:5c:9e:f3:8d:be:c6:2c:6a:c8:d5:18:8b: b2:1f:5a:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMkHSGpg+B5fboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ODBlMmQ3MTQtNTlhNS00ZWY4LWJmMjMtMTJlYWMxNGE0MWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheZW6kBqF6Xn9jPv4PzGhxOnyyqKHqPEFDmc eaosRZWA6eXXeMSqUePC+w9MtdXtZZQRoJKAAonPbNQ7poHdoh7fHuAp5SorBuo9 9C3j+D92XYrVnnhIOdqK//cqxOUexUrirHgeOcWHW9H1Z/oyspoZ84fa7abfLcuI GbMcHDj78ytPfOw9SOHhuccDrrhBQb7avaeQn0is94Wf0zFhF5k65Ir3XVJ9INVW x2DRV98426laOimT5YRrSiyRiufX81cIwy8S67sj/FRItIRZE1Zyt0pU9fseCdMB FbDhueWp/xU7VaD6GfujRnkd08CXOeeNIismzG9D9KYzDB/P3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEW/GkD0rcqrgSdHwKaqGkC46yfBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzdjMDk3MTktOGE3Yi0z ODBkLWI3MmUtZjNhMDFiYzJiNjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0VwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkilR5/mA7VwM/6R5ziXG7bLyjbuQ4OdeOwO1FSl5rBjW0ptR8x8FdJ gS0t5fQ2K7HWIKce5jIvAwqv8GWrZBYqV/vDFSBdEooFVv5J1dY+wPuMzbHuwtcj JstTiuL17Mv6oDU/YZDCi9LfEk0U6dysvOhShfU63OJhPnHCd/fadBOasEOsVQYD 9jForZArP6eUiumSRwMBzUIoKrO/J8FcLr3XUffU5nzngJiAdSGfSo1ngip/GXQf KU1mkedaHOohDmVjGqs5vJEDa3X3mc0RcAYAADqPs4p4dT2n9iQLN4NFiqgHAKQP j1ZMedgfW1ye842+xixqyNUYi7IfWvo= -----END CERTIFICATE-----Generated at Fri Oct 10 22:03:21 2025 by rpki-client