$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2f2da6c-e558-3154-bb71-4b2a8c0a0762.roa File: d2f2da6c-e558-3154-bb71-4b2a8c0a0762.roa (raw, json) Hash identifier: tR6fFD+BgoGFvnDbHyOBK0527TjybOg6zBTXFrJTdkc= Subject key identifier: 18:22:36:B9:72:25:D8:45:DF:19:3A:D2:5C:CF:4F:01:5E:0F:B2:74 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B28C6E7F768BFF174D036B000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2f2da6c-e558-3154-bb71-4b2a8c0a0762.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 27338 IP address blocks: 74.9.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:e7:f7:68:bf:f1:74:d0:36:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=ebbb9f74-f56e-4e41-9549-fce7a8446058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ef:cb:e6:e4:1a:df:09:8a:78:c4:05:b7:b8: 70:7d:8f:cd:41:c3:fa:03:87:51:6f:dd:90:f8:15: 13:1a:ee:bc:1b:f0:b8:ef:5f:5b:83:ba:0b:3f:3d: bd:3d:38:58:83:84:d6:b9:63:cb:cb:12:24:18:ce: 88:6e:3f:c6:93:71:7b:ab:5e:30:47:f7:5c:47:0d: c0:f4:78:3c:a8:ae:f6:cc:c9:ef:b2:64:44:18:df: 4e:df:0a:07:1c:63:b2:24:ca:e8:ec:64:e9:9c:71: 1e:24:04:af:89:4f:4e:f8:08:9a:b4:09:72:28:8b: 71:6a:6b:b3:8a:1d:18:8a:f0:ea:83:01:e4:d1:5b: e2:a4:57:27:7a:b6:be:0b:65:4e:3d:2f:f1:2a:5f: 0d:05:e6:52:03:8f:d2:16:5d:ea:55:0c:49:d0:f3: f6:8f:d5:51:e2:af:c0:a3:61:fd:83:78:c5:b0:c0: 04:24:71:4e:d4:25:3c:80:bc:e6:57:4c:62:8a:94: 39:84:58:ca:bd:28:db:54:be:0c:53:0c:c1:f5:0d: ff:2b:70:e1:e1:54:72:e0:d5:be:60:81:2d:4f:c1: fb:4e:8a:66:ba:36:ed:98:08:4d:9b:f0:c2:f5:b7: 73:42:a4:41:fb:2b:46:e1:34:fb:56:0e:a5:84:20: c0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:22:36:B9:72:25:D8:45:DF:19:3A:D2:5C:CF:4F:01:5E:0F:B2:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2f2da6c-e558-3154-bb71-4b2a8c0a0762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.9.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:a4:9e:fb:8a:0f:83:f7:f6:f3:96:85:d1:0a:76:e1:c0:68: 66:26:e0:3d:c0:98:61:26:1b:74:0a:5a:30:b5:41:0c:24:91: 90:ee:a9:83:c5:6f:f1:f5:87:6d:50:7e:0f:0f:11:eb:f8:2b: 73:59:6d:4c:a2:86:85:1f:66:21:e5:2a:95:5d:aa:c1:54:f1: 73:a7:97:72:51:c7:9f:1d:09:88:da:5e:f5:7a:78:84:65:c9: 05:eb:33:26:1a:49:39:91:ae:e1:94:27:25:b4:49:a4:4e:42: dd:52:c8:74:e9:ab:44:f0:61:79:62:fb:f9:8f:b4:a9:da:fe: ad:d3:ec:dc:5a:c1:84:c1:89:6d:c0:71:4d:59:35:cb:6f:fe: 3c:2f:a4:f1:01:f2:2f:c7:3f:3a:58:22:30:0e:ea:f6:8d:7c: 1e:41:69:19:ae:4a:80:e9:a4:68:8e:ee:9c:8c:68:59:00:db: 3c:04:d2:08:a7:17:61:67:41:d9:8b:a2:a5:a0:d9:ba:5c:35: 8e:ee:73:89:15:cf:9b:bf:68:27:57:17:56:2f:bf:00:be:49: 24:0a:5f:8c:b8:b0:68:95:e9:01:f0:b5:e0:67:ed:fb:e5:93: 38:c1:a2:e7:37:7e:cf:d8:17:fe:70:12:39:85:4c:1e:d5:a0: 2e:ae:49:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxuf3aL/xdNA2sAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk ZWJiYjlmNzQtZjU2ZS00ZTQxLTk1NDktZmNlN2E4NDQ2MDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+/L5uQa3wmKeMQFt7hwfY/NQcP6A4dRb92Q +BUTGu68G/C4719bg7oLPz29PThYg4TWuWPLyxIkGM6Ibj/Gk3F7q14wR/dcRw3A 9Hg8qK72zMnvsmREGN9O3woHHGOyJMro7GTpnHEeJASviU9O+AiatAlyKItxamuz ih0YivDqgwHk0VvipFcnera+C2VOPS/xKl8NBeZSA4/SFl3qVQxJ0PP2j9VR4q/A o2H9g3jFsMAEJHFO1CU8gLzmV0xiipQ5hFjKvSjbVL4MUwzB9Q3/K3Dh4VRy4NW+ YIEtT8H7TopmujbtmAhNm/DC9bdzQqRB+ytG4TT7Vg6lhCDAuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgiNrlyJdhF3xk60lzPTwFeD7J0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDJmMmRhNmMtZTU1OC0z MTU0LWJiNzEtNGIyYThjMGEwNzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgkGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2knvuKD4P39vOWhdEKduHAaGYm4D3AmGEmG3QKWjC1QQwkkZDuqYPF b/H1h21Qfg8PEev4K3NZbUyihoUfZiHlKpVdqsFU8XOnl3JRx58dCYjaXvV6eIRl yQXrMyYaSTmRruGUJyW0SaROQt1SyHTpq0TwYXli+/mPtKna/q3T7NxawYTBiW3A cU1ZNctv/jwvpPEB8i/HPzpYIjAO6vaNfB5BaRmuSoDppGiO7pyMaFkA2zwE0gin F2FnQdmLoqWg2bpcNY7uc4kVz5u/aCdXF1YvvwC+SSQKX4y4sGiV6QHwteBn7fvl kzjBouc3fs/YF/5wEjmFTB7VoC6uSaY= -----END CERTIFICATE-----Generated at Fri Oct 10 19:55:06 2025 by rpki-client