$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e57d0781-034b-37f1-9220-86c05b857044.roa File: e57d0781-034b-37f1-9220-86c05b857044.roa (raw, json) Hash identifier: nZlLconuXpSdMKkEeZ51YZvTJxoUQY0MHur+Oy9I368= Subject key identifier: 61:70:89:A3:5A:57:2E:81:F1:56:88:00:8F:C2:02:17:9F:5A:35:36 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CFD22C080185F52C1F700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e57d0781-034b-37f1-9220-86c05b857044.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 216.170.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:fd:22:c0:80:18:5f:52:c1:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=3eb88b65-c57e-42d8-a1e8-941212f3ff4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d5:95:79:fe:e3:5b:94:0b:03:b3:05:84:e2: 09:9c:c5:cc:b5:a7:db:6a:ed:d4:34:4d:dc:b8:81: c6:fc:cc:cd:20:b7:61:5e:58:97:59:37:6a:04:81: 7e:2a:d2:d2:2c:de:09:af:5d:7e:8f:da:2e:27:2b: cf:18:25:aa:d2:c2:5f:ea:51:29:f2:cf:4e:2b:46: 84:05:e9:c1:4c:b9:49:29:bf:21:b3:cf:1c:3c:7c: f4:2d:c8:8f:63:06:73:79:ff:b1:f5:87:01:b2:62: 19:1d:b0:cd:0c:3d:68:c7:7e:f3:5d:fc:b8:31:c1: 0b:01:04:fe:3f:ce:d3:d0:f8:99:4f:ae:ed:d9:fc: 05:1c:eb:8d:99:8e:32:b3:3a:bf:49:2f:db:4f:49: 6a:e0:eb:17:21:cb:6b:96:2c:9b:15:69:c9:31:e9: ce:e9:ad:5c:79:35:42:d6:f2:15:d7:66:4a:bd:9b: db:c9:78:80:2d:19:01:84:ae:f6:bd:f2:74:db:9d: 19:ea:f7:df:d7:0e:9a:ee:50:8e:ee:3a:7d:a1:f0: 1d:77:17:c1:4e:29:21:93:0f:ae:67:6c:48:d3:e2: a2:77:f9:86:ca:f9:85:4a:ee:f5:1c:6e:d7:46:ba: b5:cb:b8:91:8a:72:69:fe:ae:96:60:4c:7a:11:5a: 2a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:70:89:A3:5A:57:2E:81:F1:56:88:00:8F:C2:02:17:9F:5A:35:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e57d0781-034b-37f1-9220-86c05b857044.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.170.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:c3:14:fb:c5:2f:e8:a8:4f:e7:41:1a:be:7c:40:90:0a:b0: 2b:88:7e:a9:05:e9:66:96:61:a4:0b:60:6e:93:2f:b3:8f:62: 97:df:94:2a:31:2c:e3:57:20:b2:dd:91:3b:81:aa:03:4a:22: 1d:d2:43:29:64:40:7b:fb:d4:b8:fa:8f:11:7a:0f:27:86:d3: ad:e7:ec:b5:8f:3e:06:ff:20:4b:5e:49:26:4c:07:28:12:8b: b8:6a:89:ca:bb:87:6d:81:d2:d4:d7:fd:5a:d6:ac:e2:82:11: de:7f:5b:a1:5e:38:ed:6f:2a:1a:86:3d:15:3c:80:e1:56:76: a7:ac:a0:4c:01:a1:15:02:1f:07:48:e4:6b:c5:c6:a8:3d:59: a2:37:52:1b:6a:7a:3e:da:2f:63:2c:a9:e9:61:b7:ed:42:34: c7:01:71:b8:f7:11:01:bd:f4:61:18:89:72:17:61:7c:15:20: 77:bd:39:3d:cf:47:d6:62:af:18:a3:64:90:02:cf:31:29:a8: e5:be:0f:db:b0:bf:52:37:c9:6e:b2:95:2c:e0:89:d5:dd:f3: 18:7a:99:45:b9:85:0d:9b:97:69:d5:1e:33:cf:b1:2d:5c:07: 65:ef:29:f1:12:86:45:25:52:ca:c6:59:2f:65:37:30:cc:8c: 52:2c:48:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXP0iwIAYX1LB9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk M2ViODhiNjUtYzU3ZS00MmQ4LWExZTgtOTQxMjEyZjNmZjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptWVef7jW5QLA7MFhOIJnMXMtafbau3UNE3c uIHG/MzNILdhXliXWTdqBIF+KtLSLN4Jr11+j9ouJyvPGCWq0sJf6lEp8s9OK0aE BenBTLlJKb8hs88cPHz0LciPYwZzef+x9YcBsmIZHbDNDD1ox37zXfy4McELAQT+ P87T0PiZT67t2fwFHOuNmY4yszq/SS/bT0lq4OsXIctrliybFWnJMenO6a1ceTVC 1vIV12ZKvZvbyXiALRkBhK72vfJ0250Z6vff1w6a7lCO7jp9ofAddxfBTikhkw+u Z2xI0+Kid/mGyvmFSu71HG7XRrq1y7iRinJp/q6WYEx6EVoqFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFwiaNaVy6B8VaIAI/CAhefWjU2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTU3ZDA3ODEtMDM0Yi0z N2YxLTkyMjAtODZjMDViODU3MDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2KoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7DFPvFL+ioT+dBGr58QJAKsCuIfqkF6WaWYaQLYG6TL7OPYpfflCox LONXILLdkTuBqgNKIh3SQylkQHv71Lj6jxF6DyeG063n7LWPPgb/IEteSSZMBygS i7hqicq7h22B0tTX/VrWrOKCEd5/W6FeOO1vKhqGPRU8gOFWdqesoEwBoRUCHwdI 5GvFxqg9WaI3Uhtqej7aL2Msqelht+1CNMcBcbj3EQG99GEYiXIXYXwVIHe9OT3P R9ZirxijZJACzzEpqOW+D9uwv1I3yW6ylSzgidXd8xh6mUW5hQ2bl2nVHjPPsS1c B2XvKfEShkUlUsrGWS9lNzDMjFIsSNQ= -----END CERTIFICATE-----Generated at Fri Oct 10 17:57:12 2025 by rpki-client