$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e1c1c622-d8f3-39d9-941c-1d272ecb2182.roa File: e1c1c622-d8f3-39d9-941c-1d272ecb2182.roa (raw, json) Hash identifier: 2S5c2RgRuu5/CrX679NN8vYs1BIBaHH07S20+HNsat4= Subject key identifier: FD:F6:C4:97:BC:88:16:23:1A:4F:20:B9:EA:B0:10:5C:BD:EC:8A:86 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B16A15DAFC07DEE6E0F0B4300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e1c1c622-d8f3-39d9-941c-1d272ecb2182.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 174.130.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:5d:af:c0:7d:ee:6e:0f:0b:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=d0ef3b81-6292-406f-be0c-d2958b4c76a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e9:32:c7:47:fb:a5:d1:1c:ad:0c:75:c3:99: 80:b0:c7:4e:57:41:ca:c0:95:70:af:80:45:02:d6: 3b:8d:f0:a0:07:ce:b8:5d:73:72:f4:21:c3:08:91: 93:1b:af:79:86:ef:a0:f0:19:8c:44:5b:7f:57:55: 46:7d:96:17:95:eb:ee:7d:e8:51:01:7b:9d:7f:f5: 46:ef:70:1e:14:68:81:01:e2:b1:75:dc:29:9f:14: 38:7a:ef:4a:95:4d:68:33:2d:4d:0f:20:56:34:25: d2:68:dc:a6:28:dc:c3:5f:8e:ab:46:ae:01:9d:22: 81:aa:30:5e:53:56:db:3d:72:32:d7:98:25:05:b2: 2d:57:2f:fe:b7:b9:35:70:93:16:71:6d:55:95:f7: 2c:82:40:26:3c:ca:1f:f4:c9:40:76:b9:de:13:f5: 97:1e:b2:64:c2:ff:47:87:c3:ca:ee:cc:c6:fe:ee: e4:ce:79:c5:db:b4:a4:1e:b3:6a:fd:d2:2e:1c:cf: 34:ab:9f:16:3a:20:0b:58:82:5b:28:bc:57:35:ed: 2e:5e:c4:84:dc:42:6b:4e:3b:2c:58:6d:2a:5e:91: b8:92:e5:8f:f7:38:e8:3d:42:7c:5f:b6:eb:41:b1: 68:61:6f:f1:e5:a5:94:66:bd:a9:c7:db:76:9f:f7: ae:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F6:C4:97:BC:88:16:23:1A:4F:20:B9:EA:B0:10:5C:BD:EC:8A:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e1c1c622-d8f3-39d9-941c-1d272ecb2182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:b9:bb:d1:07:14:cd:a2:15:d4:1f:9b:72:05:72:6b:99:33: 35:b5:d1:3a:95:ec:ea:8c:14:a7:b7:1a:1b:56:62:d7:f7:4e: 77:39:73:7d:f6:0d:34:f3:41:29:a1:5e:be:22:d4:1e:49:e6: 15:75:c6:9c:e4:7b:16:bb:d3:3b:da:fe:72:a8:d1:da:a7:9c: 0e:ca:02:b1:24:7a:26:7a:f8:f9:00:22:ab:8b:bb:5f:1f:9f: 29:71:3c:74:94:3e:b9:95:b7:3f:61:54:9f:25:98:18:02:6e: 59:51:b5:58:0f:e0:da:e8:d5:c2:f3:1c:88:e6:e9:23:b7:11: 20:0c:52:80:66:84:a1:03:44:3f:8e:02:cd:b5:6e:e8:f9:fe: 5a:b6:84:bf:77:60:0c:f7:ca:49:02:18:e8:a6:b9:f1:66:46: 71:00:76:d5:12:b7:54:bf:1d:18:09:5f:e5:60:94:be:a6:e7: e4:a0:64:ab:eb:fe:b8:42:cd:85:ba:75:44:1d:d4:5a:57:8a: 6a:a1:19:0e:03:82:7e:43:01:2e:89:aa:bf:47:91:c9:af:58: e6:07:a8:28:6c:40:b0:9f:4e:fd:8e:5d:cb:cb:dd:55:5c:7b: ae:90:51:a0:28:60:9e:ee:c2:7d:5b:19:7e:80:5b:f7:83:d8: 69:40:53:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoV2vwH3ubg8LQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZDBlZjNiODEtNjI5Mi00MDZmLWJlMGMtZDI5NThiNGM3NmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+kyx0f7pdEcrQx1w5mAsMdOV0HKwJVwr4BF AtY7jfCgB864XXNy9CHDCJGTG695hu+g8BmMRFt/V1VGfZYXlevufehRAXudf/VG 73AeFGiBAeKxddwpnxQ4eu9KlU1oMy1NDyBWNCXSaNymKNzDX46rRq4BnSKBqjBe U1bbPXIy15glBbItVy/+t7k1cJMWcW1VlfcsgkAmPMof9MlAdrneE/WXHrJkwv9H h8PK7szG/u7kznnF27SkHrNq/dIuHM80q58WOiALWIJbKLxXNe0uXsSE3EJrTjss WG0qXpG4kuWP9zjoPUJ8X7brQbFoYW/x5aWUZr2px9t2n/euOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP32xJe8iBYjGk8gueqwEFy97IqGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTFjMWM2MjItZDhmMy0z OWQ5LTk0MWMtMWQyNzJlY2IyMTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEroJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABi5u9EHFM2iFdQfm3IFcmuZMzW10TqV7OqMFKe3GhtWYtf3Tnc5c332 DTTzQSmhXr4i1B5J5hV1xpzkexa70zva/nKo0dqnnA7KArEkeiZ6+PkAIquLu18f nylxPHSUPrmVtz9hVJ8lmBgCbllRtVgP4Nro1cLzHIjm6SO3ESAMUoBmhKEDRD+O As21buj5/lq2hL93YAz3ykkCGOimufFmRnEAdtUSt1S/HRgJX+VglL6m5+SgZKvr /rhCzYW6dUQd1FpXimqhGQ4Dgn5DAS6Jqr9HkcmvWOYHqChsQLCfTv2OXcvL3VVc e66QUaAoYJ7uwn1bGX6AW/eD2GlAU64= -----END CERTIFICATE-----Generated at Fri Oct 10 23:59:45 2025 by rpki-client