$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8aada01-f195-3c39-b506-9b9140b28ba2.roa File: d8aada01-f195-3c39-b506-9b9140b28ba2.roa (raw, json) Hash identifier: RIuRh2okcm9gJydQ+xt3YQDu2WldOyfMd/xKa3mYYd8= Subject key identifier: BE:C7:95:BC:49:5C:B8:CF:97:14:8E:C3:8D:56:F7:D1:63:92:AC:61 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D0309121EBC85044C5280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8aada01-f195-3c39-b506-9b9140b28ba2.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 22773 IP address blocks: 151.213.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:03:09:12:1e:bc:85:04:4c:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=046c6f6a-4e2d-404b-abea-3062c88b8d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6b:86:a6:2f:35:6d:5a:10:76:74:2a:c3:ac: f1:a6:1d:a2:c0:ae:5b:59:51:93:bd:be:ac:77:fb: bf:cb:74:e2:05:0b:4b:bc:af:ed:fb:5c:e8:5b:65: 4a:00:ea:db:6d:5f:3d:20:e7:bc:67:c0:f1:05:e1: 91:c5:99:44:1b:06:bf:26:14:1c:31:62:69:ae:50: 57:a0:ef:a2:3f:67:b4:07:ab:fa:ad:01:dc:2c:33: 47:3c:ee:61:24:9d:b4:fd:e7:86:f5:b4:86:bf:af: bd:75:45:48:81:84:24:67:01:70:f2:7d:46:27:3d: 0a:9e:69:df:88:02:8a:a9:2e:47:ec:61:f8:78:55: 21:d9:5e:ea:b8:d6:76:67:1e:82:ee:4d:a3:b1:0a: c3:ca:48:09:eb:fa:57:36:bb:88:3f:1d:29:ab:38: b9:62:be:e6:c4:33:05:9d:b6:bf:88:ff:dc:9e:28: dd:85:8f:f4:8e:4a:4e:34:01:43:8f:bf:36:3e:a4: ac:ad:bd:53:38:50:b5:99:77:03:4c:4e:22:6e:25: 31:f5:39:ee:c9:65:49:d5:e4:47:52:67:20:68:a9: e8:da:50:63:23:46:e5:24:51:aa:c6:fd:05:1a:f0: 75:d9:b7:9a:64:6e:9d:b3:b6:73:66:5b:b2:84:83: 8a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C7:95:BC:49:5C:B8:CF:97:14:8E:C3:8D:56:F7:D1:63:92:AC:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8aada01-f195-3c39-b506-9b9140b28ba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ee:a8:04:af:4b:4c:4d:a1:1a:7b:bc:bf:5d:bf:8f:fa:27: 84:2b:20:82:38:6b:7d:4a:dc:25:02:f6:45:2d:10:e0:35:e5: ee:30:12:3e:30:dc:0b:9a:fe:d5:8a:27:93:d9:a5:5d:ed:b1: 1f:8d:6c:c9:86:31:a0:8f:ed:f9:ae:ac:c0:64:93:34:ac:9d: b0:2f:f3:0b:65:c2:c8:6d:13:41:63:63:5c:a1:ad:64:a2:ad: a3:85:c6:4e:a6:cf:e6:fd:ad:2e:27:1b:75:89:39:18:07:b2: 4b:5c:8b:97:b6:9b:97:5e:f0:38:02:b0:5d:38:32:3d:08:4e: a2:b8:92:89:f5:f9:d0:8c:a7:ed:80:1a:ad:16:ff:0b:e5:74: 30:7a:fa:4a:3f:fc:a3:84:a8:c0:ad:d8:a9:68:e4:5f:61:f3: 2b:59:9f:67:2e:39:df:10:73:ba:27:ad:b6:7b:e7:f7:fa:b3: 7f:ce:b0:d5:ac:bb:b3:2f:88:75:9b:80:02:b9:29:e2:38:39: 34:c0:c3:1b:ec:f5:75:da:97:17:44:ac:92:f3:5d:1d:21:89: 3f:05:8a:9b:0a:70:48:19:9d:64:b5:78:ef:c2:84:19:2e:67: 4b:85:7c:76:ce:61:d2:3a:32:4c:d0:69:c1:6f:37:2a:c0:7f: bd:5d:7f:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQMJEh68hQRMUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MDQ2YzZmNmEtNGUyZC00MDRiLWFiZWEtMzA2MmM4OGI4ZDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2uGpi81bVoQdnQqw6zxph2iwK5bWVGTvb6s d/u/y3TiBQtLvK/t+1zoW2VKAOrbbV89IOe8Z8DxBeGRxZlEGwa/JhQcMWJprlBX oO+iP2e0B6v6rQHcLDNHPO5hJJ20/eeG9bSGv6+9dUVIgYQkZwFw8n1GJz0Knmnf iAKKqS5H7GH4eFUh2V7quNZ2Zx6C7k2jsQrDykgJ6/pXNruIPx0pqzi5Yr7mxDMF nba/iP/cnijdhY/0jkpONAFDj782PqSsrb1TOFC1mXcDTE4ibiUx9TnuyWVJ1eRH UmcgaKno2lBjI0blJFGqxv0FGvB12beaZG6ds7ZzZluyhIOKLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7HlbxJXLjPlxSOw41W99FjkqxhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDhhYWRhMDEtZjE5NS0z YzM5LWI1MDYtOWI5MTQwYjI4YmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl9V+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETuqASvS0xNoRp7vL9dv4/6J4QrIII4a31K3CUC9kUtEOA15e4wEj4w 3Aua/tWKJ5PZpV3tsR+NbMmGMaCP7fmurMBkkzSsnbAv8wtlwshtE0FjY1yhrWSi raOFxk6mz+b9rS4nG3WJORgHsktci5e2m5de8DgCsF04Mj0ITqK4kon1+dCMp+2A Gq0W/wvldDB6+ko//KOEqMCt2Klo5F9h8ytZn2cuOd8Qc7onrbZ75/f6s3/OsNWs u7MviHWbgAK5KeI4OTTAwxvs9XXalxdErJLzXR0hiT8FipsKcEgZnWS1eO/ChBku Z0uFfHbOYdI6MkzQacFvNyrAf71df3s= -----END CERTIFICATE-----Generated at Fri Oct 10 20:08:46 2025 by rpki-client