$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d71ca4f8-f024-3d90-8332-332656656afc.roa File: d71ca4f8-f024-3d90-8332-332656656afc.roa (raw, json) Hash identifier: gjBokyIFaS5mptr9zIyxzQIlDZ66v/APMqncPdHuRwY= Subject key identifier: 5C:D7:3F:04:10:8D:23:4B:8E:4B:A7:DD:43:9B:0E:12:EF:60:40:4E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2A2C48C6C0996DF564D79E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d71ca4f8-f024-3d90-8332-332656656afc.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 151.213.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:48:c6:c0:99:6d:f5:64:d7:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=f0677350-879d-467d-b9e0-d1eec06023a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ad:c4:71:45:85:44:8f:00:e2:ff:1e:05:f5: bb:f7:e0:09:b5:a5:df:82:90:0b:2f:13:02:a0:b6: 2a:bb:17:85:a1:50:2a:03:3b:d4:f7:88:0e:a1:55: ac:11:65:e2:5e:e3:3b:8f:a1:88:04:99:c9:6a:4e: 53:bf:26:f2:fc:e6:91:fa:d3:3e:cc:7d:90:95:7c: bb:a1:3f:10:f9:cc:23:a7:00:f1:77:87:e1:cb:b4: 3c:34:8b:74:b7:95:71:6f:eb:c4:e2:fb:ec:15:c5: 2f:cc:d2:31:0f:ba:50:40:18:2d:1e:e3:bc:65:56: 08:53:a6:7d:b5:70:1b:cf:d1:c1:97:15:14:b4:1d: 45:b1:84:2d:e8:6f:1f:fc:b8:28:3e:a3:22:f6:e4: 11:ac:6d:7d:64:78:d6:ba:d7:e1:e6:2a:6b:7d:28: 2f:8a:6a:1f:52:fc:11:44:f1:d8:8a:1d:1a:c9:0e: e9:78:5f:ff:f7:c0:f3:f8:b4:58:a5:c0:6f:4f:e0: 18:98:ae:36:9a:65:56:d3:ab:3e:37:c6:9c:99:b3: 1c:f2:36:a4:95:2a:5b:ef:67:eb:30:81:72:45:be: 85:c3:68:02:b3:30:2d:98:90:2c:41:86:29:1c:92: f7:dd:1c:55:da:45:82:d2:08:a8:e4:bf:f3:bd:73: 54:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D7:3F:04:10:8D:23:4B:8E:4B:A7:DD:43:9B:0E:12:EF:60:40:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d71ca4f8-f024-3d90-8332-332656656afc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:68:d7:d6:87:b5:32:c0:5f:1e:07:ef:52:e4:b0:9b:14:4b: ba:07:d4:55:0d:82:d6:e7:09:6e:6b:27:f0:3e:18:08:ef:57: 99:dd:24:96:0f:07:a9:02:0e:88:fd:18:07:ba:91:ef:36:2c: 29:36:55:94:f8:24:0e:e7:49:b0:00:d0:9e:0f:44:11:f3:e8: e3:60:bc:81:a5:69:bb:00:e7:b7:16:eb:8f:b6:3b:59:08:b7: fb:2f:9f:05:25:e2:fb:3d:12:24:f6:62:eb:c8:2a:ef:08:47: 4d:6e:c6:77:19:9d:2d:5f:c0:da:15:b8:e6:65:1c:2c:bd:58: 72:ee:0f:81:4f:71:c8:26:10:a8:ad:3a:a1:e6:a4:2a:00:06: c3:0f:69:f3:a3:35:d7:a5:b0:4d:d1:3c:60:00:ed:45:f7:2f: e7:5f:1f:d7:75:97:52:12:19:94:ff:0d:46:d7:d4:b3:66:19: 63:14:ff:3b:fa:44:1a:da:27:df:6c:1c:17:61:c1:65:e2:e3: 8c:1e:9d:9a:28:ad:36:51:0a:b5:a7:75:5b:a8:f9:d3:0f:e1: 5a:76:8f:de:d5:75:13:90:5c:fc:27:e0:b4:5e:dc:1c:45:24: a6:45:d5:c7:fb:79:a9:0d:b1:39:61:16:ad:f4:06:79:2e:5d: 33:22:e1:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEjGwJlt9WTXnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ZjA2NzczNTAtODc5ZC00NjdkLWI5ZTAtZDFlZWMwNjAyM2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK3EcUWFRI8A4v8eBfW79+AJtaXfgpALLxMC oLYquxeFoVAqAzvU94gOoVWsEWXiXuM7j6GIBJnJak5Tvyby/OaR+tM+zH2QlXy7 oT8Q+cwjpwDxd4fhy7Q8NIt0t5Vxb+vE4vvsFcUvzNIxD7pQQBgtHuO8ZVYIU6Z9 tXAbz9HBlxUUtB1FsYQt6G8f/LgoPqMi9uQRrG19ZHjWutfh5iprfSgvimofUvwR RPHYih0ayQ7peF//98Dz+LRYpcBvT+AYmK42mmVW06s+N8acmbMc8jaklSpb72fr MIFyRb6Fw2gCszAtmJAsQYYpHJL33RxV2kWC0gio5L/zvXNUxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzXPwQQjSNLjkun3UObDhLvYEBOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDcxY2E0ZjgtZjAyNC0z ZDkwLTgzMzItMzMyNjU2NjU2YWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl9XAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHho19aHtTLAXx4H71LksJsUS7oH1FUNgtbnCW5rJ/A+GAjvV5ndJJYP B6kCDoj9GAe6ke82LCk2VZT4JA7nSbAA0J4PRBHz6ONgvIGlabsA57cW64+2O1kI t/svnwUl4vs9EiT2YuvIKu8IR01uxncZnS1fwNoVuOZlHCy9WHLuD4FPccgmEKit OqHmpCoABsMPafOjNdelsE3RPGAA7UX3L+dfH9d1l1ISGZT/DUbX1LNmGWMU/zv6 RBraJ99sHBdhwWXi44wenZoorTZRCrWndVuo+dMP4Vp2j97VdROQXPwn4LRe3BxF JKZF1cf7eakNsTlhFq30BnkuXTMi4d8= -----END CERTIFICATE-----Generated at Fri Oct 10 22:09:30 2025 by rpki-client