$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d0b3cef1-00dd-3698-8e64-09f1b2164ce7.roa File: d0b3cef1-00dd-3698-8e64-09f1b2164ce7.roa (raw, json) Hash identifier: FTQf5+ioQOPhEcLssxrIDkPe9MQf0Bu3+jbsLaRekTY= Subject key identifier: 27:9E:24:A5:D5:AD:C1:BC:C2:85:1E:AC:26:71:FD:1A:78:82:49:21 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D06B36EFEA7E11C972100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d0b3cef1-00dd-3698-8e64-09f1b2164ce7.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 393344 IP address blocks: 209.255.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:06:b3:6e:fe:a7:e1:1c:97:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=7968f14b-ee9f-431d-bf82-c233dff0498e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:80:53:4f:8f:4d:e4:57:95:df:27:67:62:00: 14:9f:5f:11:9d:ab:2c:10:f2:4b:8f:4a:5c:14:17: b0:0e:2c:d4:a5:37:50:16:18:c5:c0:fd:57:c0:79: 9c:b8:fb:0b:66:4f:c4:f1:99:6a:82:eb:6d:f3:28: e6:25:44:fe:b2:95:a4:db:c7:18:9a:37:04:d5:fb: 9f:9d:b6:a6:69:a2:af:47:13:6d:76:ab:96:6a:48: dc:c4:fd:80:6c:e8:a1:0d:95:7f:55:b4:12:1f:1c: 01:51:c5:07:c6:30:4c:6b:92:f0:33:d0:4f:dc:84: f3:30:58:42:62:11:46:82:8f:b2:3c:f4:bc:c9:40: 3f:a7:e2:32:c4:26:4f:98:5b:c1:e3:2a:41:da:a8: eb:b1:52:7e:25:ff:3c:51:8c:f1:78:6f:17:0d:96: d1:5b:c3:73:8a:e2:bb:5a:f0:11:b3:28:ee:14:7f: 15:3f:2a:41:3c:72:8a:8b:46:4b:91:d2:9f:af:56: 11:f2:1a:a3:9e:b0:ff:e9:54:ed:c2:6a:b8:ac:b7: 4e:87:ba:91:3d:ee:c3:ab:61:b6:4f:34:04:bf:76: cc:9c:23:9a:06:73:af:8f:93:2e:42:8b:63:40:e4: 78:46:e0:93:ee:9c:4a:2a:b0:43:c3:4d:a5:f0:a9: 96:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:9E:24:A5:D5:AD:C1:BC:C2:85:1E:AC:26:71:FD:1A:78:82:49:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d0b3cef1-00dd-3698-8e64-09f1b2164ce7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.255.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:5b:36:79:4e:0d:6e:bc:93:72:f0:e9:d4:2f:95:98:27:86: e3:aa:15:6b:6e:95:b2:d6:3c:58:80:d3:b9:1a:92:bb:cb:d1: 13:bc:79:6b:ef:dc:45:98:89:e2:89:89:92:ed:2f:ac:bc:a7: 63:57:7e:0d:40:0b:2b:07:97:e7:b9:71:c5:8b:00:9d:85:5f: 65:c9:07:d0:32:95:d0:26:61:fc:d7:9e:74:4a:e0:a9:06:53: 16:47:09:2f:7d:cb:d0:76:d2:8c:c2:22:ba:7f:f9:f1:4d:e2: af:f8:06:cd:26:24:a9:ca:99:bf:dc:c5:be:38:95:04:db:03: bd:fb:6d:09:2d:b8:2a:e1:72:6b:b5:f1:7b:70:23:c9:46:c4: c7:ae:02:20:0b:3d:31:42:53:54:7e:19:1c:d7:c3:73:7c:50: c0:34:8d:80:7c:93:9f:93:51:b6:4a:ae:25:77:17:a7:88:f3: 68:94:13:c4:17:8e:c1:07:f6:5c:9a:66:8e:d8:e8:00:29:bf: 00:75:2f:8f:c3:3a:8d:9a:e4:ed:49:0e:8b:5f:87:5d:f3:ec: 2d:4f:76:c9:27:89:0b:4b:33:11:c8:50:f6:8a:e1:1d:6b:c5: 94:d5:56:32:cd:d7:9e:a5:d0:e6:da:a2:6b:65:ed:e8:2b:ad: eb:15:45:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQazbv6n4RyXIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk Nzk2OGYxNGItZWU5Zi00MzFkLWJmODItYzIzM2RmZjA0OThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIBTT49N5FeV3ydnYgAUn18RnassEPJLj0pc FBewDizUpTdQFhjFwP1XwHmcuPsLZk/E8Zlqgutt8yjmJUT+spWk28cYmjcE1fuf nbamaaKvRxNtdquWakjcxP2AbOihDZV/VbQSHxwBUcUHxjBMa5LwM9BP3ITzMFhC YhFGgo+yPPS8yUA/p+IyxCZPmFvB4ypB2qjrsVJ+Jf88UYzxeG8XDZbRW8NziuK7 WvARsyjuFH8VPypBPHKKi0ZLkdKfr1YR8hqjnrD/6VTtwmq4rLdOh7qRPe7Dq2G2 TzQEv3bMnCOaBnOvj5MuQotjQOR4RuCT7pxKKrBDw02l8KmWJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeeJKXVrcG8woUerCZx/Rp4gkkhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDBiM2NlZjEtMDBkZC0z Njk4LThlNjQtMDlmMWIyMTY0Y2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f/PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBbNnlODW68k3Lw6dQvlZgnhuOqFWtulbLWPFiA07kakrvL0RO8eWvv 3EWYieKJiZLtL6y8p2NXfg1ACysHl+e5ccWLAJ2FX2XJB9AyldAmYfzXnnRK4KkG UxZHCS99y9B20ozCIrp/+fFN4q/4Bs0mJKnKmb/cxb44lQTbA737bQktuCrhcmu1 8XtwI8lGxMeuAiALPTFCU1R+GRzXw3N8UMA0jYB8k5+TUbZKriV3F6eI82iUE8QX jsEH9lyaZo7Y6AApvwB1L4/DOo2a5O1JDotfh13z7C1PdskniQtLMxHIUPaK4R1r xZTVVjLN156l0Obaomtl7egrresVRZk= -----END CERTIFICATE-----Generated at Fri Oct 10 17:51:41 2025 by rpki-client