$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca89145a-e83c-386d-ad0b-887d862762e0.roa File: ca89145a-e83c-386d-ad0b-887d862762e0.roa (raw, json) Hash identifier: tRwB6WunB7VtffE58LIj6ovKW1+r7ABGUHEK5MI+jWo= Subject key identifier: 62:1B:C1:EB:66:1C:9E:7E:7B:58:CE:FD:15:30:C0:35:3A:66:80:2F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC09931DF2B3A99E5DA80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca89145a-e83c-386d-ad0b-887d862762e0.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 64.61.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c0:99:31:df:2b:3a:99:e5:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=e127dca2-d8f6-450b-a0c8-8a48ef1546d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ad:38:d5:53:1f:49:99:cf:d8:30:3a:03:93: 63:0d:03:d4:07:e7:83:ed:ad:6f:1a:9e:ad:c1:a6: 08:dd:b4:ca:13:50:63:d6:56:87:97:71:48:ee:79: b4:b7:b3:e2:a9:63:f4:64:fd:e8:f3:57:ea:cb:78: dd:66:3d:c8:49:75:86:93:70:52:4b:78:2a:d3:0d: a7:a9:21:aa:4c:b0:49:1c:9f:0c:4e:d5:79:03:3a: 7b:d6:5d:79:7a:1d:e8:80:8c:76:3b:03:14:c2:02: b7:8e:4e:98:e3:c3:25:f4:26:36:1e:01:9b:83:3a: 18:a2:7a:d9:ba:5d:c8:7e:b8:e7:54:5e:82:91:e1: 77:75:45:8f:b5:63:8b:c5:12:2c:9a:5a:1d:ed:d0: 2c:8b:62:39:a6:f3:00:b6:49:17:b9:60:a7:55:28: 91:3b:a3:97:c7:a4:3a:94:db:ae:0d:db:2f:54:11: 47:f0:9b:82:cf:d1:84:7d:78:f0:ec:e8:74:e7:c7: da:78:62:b7:19:7e:00:92:60:35:03:0e:9a:b9:fb: 23:7a:e4:f9:de:af:49:38:c6:41:b3:1e:c0:ba:6e: 6a:bd:31:59:5b:66:ca:61:af:da:8f:82:b1:d1:46: 65:5d:9a:de:72:99:5a:98:42:89:99:ff:ec:4d:2b: 74:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1B:C1:EB:66:1C:9E:7E:7B:58:CE:FD:15:30:C0:35:3A:66:80:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca89145a-e83c-386d-ad0b-887d862762e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.61.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:33:55:1c:93:e4:4c:db:8e:eb:23:50:ef:46:4c:67:77:6f: 87:5b:a0:1f:85:86:76:15:87:62:5c:2d:87:f7:28:b8:18:a0: 95:24:62:6d:7e:be:e3:f2:0d:98:ef:88:18:e3:f0:9a:70:f4: 89:db:ba:ee:b3:9f:3a:23:01:a0:a7:67:bc:99:37:1c:83:5e: c2:bb:64:9a:99:e3:70:fe:fc:7d:a0:9e:9a:d1:b2:be:7f:96: cc:7a:5e:81:bb:9f:7d:8a:ed:34:13:e4:50:14:09:33:e4:d1: 35:c7:a5:1f:eb:aa:01:a1:1d:28:cc:66:31:c5:72:0f:0c:92: f0:52:c4:c2:97:61:57:89:80:21:26:98:c7:b8:67:17:57:b3: d1:51:f5:d8:ad:1a:f7:bb:7c:c0:aa:7b:a9:7a:8d:7d:1a:82: d6:82:4a:9b:a7:2d:31:18:3f:bc:65:94:76:6b:12:c1:8e:e3: e3:33:4e:50:9a:b1:5b:ba:21:62:b5:28:ea:c0:5e:31:38:56: 32:13:bd:e0:36:23:d6:5b:06:c1:13:60:99:96:4b:d5:ec:e4: 26:8e:d7:49:10:43:f7:8c:b6:d1:b3:4d:f1:bd:72:ce:d7:f7: 86:97:bc:20:63:bf:2f:a5:b4:1f:f0:90:b9:f2:a8:1e:3c:67: 81:47:29:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMCZMd8rOpnl2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZTEyN2RjYTItZDhmNi00NTBiLWEwYzgtOGE0OGVmMTU0NmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgK041VMfSZnP2DA6A5NjDQPUB+eD7a1vGp6t waYI3bTKE1Bj1laHl3FI7nm0t7PiqWP0ZP3o81fqy3jdZj3ISXWGk3BSS3gq0w2n qSGqTLBJHJ8MTtV5Azp71l15eh3ogIx2OwMUwgK3jk6Y48Ml9CY2HgGbgzoYonrZ ul3IfrjnVF6CkeF3dUWPtWOLxRIsmlod7dAsi2I5pvMAtkkXuWCnVSiRO6OXx6Q6 lNuuDdsvVBFH8JuCz9GEfXjw7Oh058faeGK3GX4AkmA1Aw6aufsjeuT53q9JOMZB sx7Aum5qvTFZW2bKYa/aj4Kx0UZlXZrecplamEKJmf/sTSt0awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIbwetmHJ5+e1jO/RUwwDU6ZoAvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2E4OTE0NWEtZTgzYy0z ODZkLWFkMGItODg3ZDg2Mjc2MmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQD0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0zVRyT5EzbjusjUO9GTGd3b4dboB+FhnYVh2JcLYf3KLgYoJUkYm1+ vuPyDZjviBjj8Jpw9Inbuu6znzojAaCnZ7yZNxyDXsK7ZJqZ43D+/H2gnprRsr5/ lsx6XoG7n32K7TQT5FAUCTPk0TXHpR/rqgGhHSjMZjHFcg8MkvBSxMKXYVeJgCEm mMe4ZxdXs9FR9ditGve7fMCqe6l6jX0agtaCSpunLTEYP7xllHZrEsGO4+MzTlCa sVu6IWK1KOrAXjE4VjITveA2I9ZbBsETYJmWS9Xs5CaO10kQQ/eMttGzTfG9cs7X 94aXvCBjvy+ltB/wkLnyqB48Z4FHKeo= -----END CERTIFICATE-----Generated at Fri Oct 10 22:04:33 2025 by rpki-client