$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d14864e2-0c04-30bd-aa58-ba30680b128d.roa File: d14864e2-0c04-30bd-aa58-ba30680b128d.roa (raw, json) Hash identifier: kBvzwRk/1uRy/Od5NHPVUgX/2yot7RREdjo9aoP015s= Subject key identifier: B9:29:32:92:65:72:DC:D9:1B:5C:78:4A:45:CC:CB:C6:05:3B:B7:BA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3F1C57DEB0A30578C8135380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d14864e2-0c04-30bd-aa58-ba30680b128d.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 173.187.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:57:de:b0:a3:05:78:c8:13:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=92111c95-633c-4259-91cc-e05c410f5888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:54:2f:14:54:3c:50:dd:42:36:e5:46:55:d9: 12:60:71:95:b7:5c:66:ac:3c:37:7d:46:40:36:3a: 01:01:c8:b9:71:79:be:e6:9e:d0:95:f9:5f:32:ec: e8:9a:23:2b:da:a0:36:b4:0e:9b:51:86:d7:58:40: 6f:38:45:d4:5c:4d:8f:36:2a:07:5b:94:12:83:94: 02:03:2c:23:b9:31:ba:ad:02:d7:85:cf:c1:7b:c4: 71:9b:02:5f:90:ad:42:aa:9a:da:51:a9:02:a7:5a: 77:e7:c2:f3:55:79:fb:8d:65:61:3f:4f:c1:12:b9: 64:0c:79:e1:0a:8d:50:e4:6a:b9:76:ee:93:c8:82: 3e:91:59:b7:e0:f3:1d:3b:f6:20:88:17:80:49:38: 07:ac:ad:2a:36:98:fd:d5:18:8f:c4:6a:c4:e1:ca: 42:83:da:34:07:c8:87:7b:51:8e:90:11:90:83:70: cf:0d:ae:83:b6:55:63:db:bd:1d:81:72:86:78:04: 7f:ac:ab:60:99:d1:b0:79:5a:ed:2c:7b:ab:57:ec: 75:ab:c1:df:d1:86:81:11:45:3d:70:b3:54:54:ad: 85:27:23:21:a5:5f:65:e1:a8:5f:96:d8:b2:25:f1: e8:50:a2:bb:17:56:30:d5:7c:bb:c4:53:be:ac:de: 85:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:29:32:92:65:72:DC:D9:1B:5C:78:4A:45:CC:CB:C6:05:3B:B7:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d14864e2-0c04-30bd-aa58-ba30680b128d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:77:16:a9:be:0e:6c:cb:eb:42:5c:fb:7e:8f:10:1e:4b:9a: d4:a9:aa:94:74:2d:17:d1:52:26:ae:2b:95:dd:ff:c9:7b:0d: 91:75:24:53:74:e4:99:84:98:36:29:27:86:d7:b9:ed:2d:b4: d3:88:0a:7d:dd:8b:6b:67:aa:a9:01:52:9f:4d:39:e3:7c:07: 1b:40:20:db:d0:3d:65:1b:78:39:ce:59:37:02:57:44:6c:82: af:c7:5d:36:61:2d:59:15:14:6e:78:10:42:40:2a:98:c7:a6: d4:0d:83:bc:b2:39:7b:0d:da:10:4f:f4:eb:ff:7f:dc:d1:eb: c1:be:1d:63:c7:ba:99:b4:23:9d:d6:a7:26:a1:d0:af:7e:4d: b1:01:4e:51:6b:b7:e6:29:8a:56:e7:43:af:bd:6a:84:ad:ca: 50:c7:36:68:ee:bb:ed:06:9b:0d:bf:28:14:cc:92:a2:86:25: 9f:2b:72:82:3d:1d:c4:1a:33:79:1e:bc:db:85:e6:32:00:d8: cd:79:e8:8d:27:05:ec:81:78:86:a0:35:d4:80:4f:45:d8:2b: 17:0f:5e:62:da:2a:54:7a:cf:30:f3:8d:ec:47:66:8e:75:34: 33:ac:9e:ed:1d:7e:48:dd:1c:a8:f4:fd:ba:53:7c:a7:3c:23: 24:fc:50:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HFfesKMFeMgTU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk OTIxMTFjOTUtNjMzYy00MjU5LTkxY2MtZTA1YzQxMGY1ODg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFQvFFQ8UN1CNuVGVdkSYHGVt1xmrDw3fUZA NjoBAci5cXm+5p7QlflfMuzomiMr2qA2tA6bUYbXWEBvOEXUXE2PNioHW5QSg5QC AywjuTG6rQLXhc/Be8RxmwJfkK1CqpraUakCp1p358LzVXn7jWVhP0/BErlkDHnh Co1Q5Gq5du6TyII+kVm34PMdO/YgiBeASTgHrK0qNpj91RiPxGrE4cpCg9o0B8iH e1GOkBGQg3DPDa6DtlVj270dgXKGeAR/rKtgmdGweVrtLHurV+x1q8Hf0YaBEUU9 cLNUVK2FJyMhpV9l4ahfltiyJfHoUKK7F1Yw1Xy7xFO+rN6FvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkpMpJlctzZG1x4SkXMy8YFO7e6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDE0ODY0ZTItMGMwNC0z MGJkLWFhNTgtYmEzMDY4MGIxMjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbsQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZ3Fqm+DmzL60Jc+36PEB5LmtSpqpR0LRfRUiauK5Xd/8l7DZF1JFN0 5JmEmDYpJ4bXue0ttNOICn3di2tnqqkBUp9NOeN8BxtAINvQPWUbeDnOWTcCV0Rs gq/HXTZhLVkVFG54EEJAKpjHptQNg7yyOXsN2hBP9Ov/f9zR68G+HWPHupm0I53W pyah0K9+TbEBTlFrt+YpilbnQ6+9aoStylDHNmjuu+0Gmw2/KBTMkqKGJZ8rcoI9 HcQaM3kevNuF5jIA2M156I0nBeyBeIagNdSAT0XYKxcPXmLaKlR6zzDzjexHZo51 NDOsnu0dfkjdHKj0/bpTfKc8IyT8UFU= -----END CERTIFICATE-----Generated at Sat Oct 11 00:15:34 2025 by rpki-client