$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6f6e734-4ae6-3107-974a-3ed0e5c9d3d7.roa File: d6f6e734-4ae6-3107-974a-3ed0e5c9d3d7.roa (raw, json) Hash identifier: pSZBocwMzVDoi/I3KktmUHYohLTUx7lYpXXyiGv4Xvw= Subject key identifier: 25:B7:44:C4:22:90:25:25:4A:4D:02:C8:FC:D4:C2:55:65:21:26:E4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CFD142863FBD718800A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6f6e734-4ae6-3107-974a-3ed0e5c9d3d7.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 216.138.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:fd:14:28:63:fb:d7:18:80:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=6ceece5b-7f7e-4a86-b1b7-01b0b8a86842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:34:f1:c4:12:0d:d3:2f:c6:76:f3:13:ed:b0: ea:d6:af:e9:85:2c:95:cb:07:80:b2:1d:b7:ce:a0: 4e:1f:0b:50:ae:50:06:51:7f:b0:96:cc:31:a6:7a: 2f:91:fa:9b:60:f8:9c:fc:7e:0b:e1:e1:1a:cc:8d: 87:1b:1c:d0:3c:b3:4b:77:b2:f6:13:4a:70:1d:9d: e0:e4:86:75:68:85:b9:5f:39:b7:44:20:3b:a4:d8: 37:a9:01:51:46:09:68:f6:b6:b7:31:9a:d0:d1:e5: 51:90:30:e0:aa:13:f6:5d:db:96:2b:61:27:ac:0c: 1e:0b:1b:6c:d1:46:af:36:18:e7:3b:a1:d7:e1:b6: 30:d9:e1:87:d8:38:d7:47:b4:ee:23:de:cb:92:da: 2e:54:1c:5a:47:e1:b1:6e:99:0b:01:7b:52:e5:5d: e3:d4:2e:b9:e8:db:aa:e1:27:e0:a5:9f:fc:82:0f: 49:b3:7b:c4:07:c4:3e:21:69:10:38:3e:3b:55:f2: 85:55:ac:74:7c:42:c9:6c:a5:63:9b:c5:fa:07:5b: 11:22:fb:ad:ab:71:fb:82:d0:6e:03:42:42:86:ae: ba:98:f1:2c:9d:7f:99:a4:3e:45:b3:00:97:61:28: 1e:ff:ce:5f:d2:f9:ad:ed:3d:80:f4:7c:14:ee:e3: 73:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B7:44:C4:22:90:25:25:4A:4D:02:C8:FC:D4:C2:55:65:21:26:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6f6e734-4ae6-3107-974a-3ed0e5c9d3d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.138.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:2b:66:06:f8:9d:f4:a3:70:2b:35:8f:7b:3a:e7:6c:cb:79: 6d:5e:bc:8e:38:9e:0b:f6:8f:65:66:06:16:82:40:75:9a:d5: 45:42:59:ad:3c:bc:9d:87:62:2c:47:c3:57:25:9c:99:99:1f: 2d:5b:62:e3:02:93:f1:68:94:44:82:69:da:02:f2:76:80:5b: 3d:5f:5a:6a:e6:b6:0a:9f:53:73:14:bc:f8:05:d2:1c:2d:a8: 98:32:36:42:89:c8:63:3d:83:f5:dd:18:75:b1:ae:ef:23:29: e8:a4:c2:fb:8a:a8:fc:c5:f0:d6:29:24:5c:a2:67:33:d7:82: 22:fa:49:a7:1f:3e:83:68:67:7c:e2:41:d8:1e:f9:93:10:74: 2c:95:f5:a4:2f:20:a8:19:1f:ad:8a:41:f2:a2:85:53:9d:75: 2d:5b:ab:78:09:44:be:47:d5:1a:7a:3b:2d:fb:60:2e:32:9b: 85:52:1c:f1:8d:0c:fb:22:46:24:5d:14:59:c4:02:a7:7d:ba: 3f:82:cb:6c:d1:44:0d:18:c2:13:2e:ab:c8:05:37:2d:f1:7e: cf:ea:28:21:1a:4e:bd:02:5e:c9:3a:71:60:e4:c3:81:7c:7d: bc:b4:4f:02:50:09:bd:38:f1:4a:1b:d0:3c:24:7a:3d:d0:88: 68:97:9f:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXP0UKGP71xiACgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NmNlZWNlNWItN2Y3ZS00YTg2LWIxYjctMDFiMGI4YTg2ODQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTTxxBIN0y/GdvMT7bDq1q/phSyVyweAsh23 zqBOHwtQrlAGUX+wlswxpnovkfqbYPic/H4L4eEazI2HGxzQPLNLd7L2E0pwHZ3g 5IZ1aIW5Xzm3RCA7pNg3qQFRRglo9ra3MZrQ0eVRkDDgqhP2XduWK2EnrAweCxts 0UavNhjnO6HX4bYw2eGH2DjXR7TuI97LktouVBxaR+GxbpkLAXtS5V3j1C656Nuq 4SfgpZ/8gg9Js3vEB8Q+IWkQOD47VfKFVax0fELJbKVjm8X6B1sRIvutq3H7gtBu A0JChq66mPEsnX+ZpD5FswCXYSge/85f0vmt7T2A9HwU7uNzRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCW3RMQikCUlSk0CyPzUwlVlISbkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDZmNmU3MzQtNGFlNi0z MTA3LTk3NGEtM2VkMGU1YzlkM2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2IqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADorZgb4nfSjcCs1j3s652zLeW1evI44ngv2j2VmBhaCQHWa1UVCWa08 vJ2HYixHw1clnJmZHy1bYuMCk/FolESCadoC8naAWz1fWmrmtgqfU3MUvPgF0hwt qJgyNkKJyGM9g/XdGHWxru8jKeikwvuKqPzF8NYpJFyiZzPXgiL6SacfPoNoZ3zi Qdge+ZMQdCyV9aQvIKgZH62KQfKihVOddS1bq3gJRL5H1Rp6Oy37YC4ym4VSHPGN DPsiRiRdFFnEAqd9uj+Cy2zRRA0YwhMuq8gFNy3xfs/qKCEaTr0CXsk6cWDkw4F8 fby0TwJQCb048Uob0Dwkej3QiGiXnzI= -----END CERTIFICATE-----Generated at Fri Oct 10 20:06:51 2025 by rpki-client