$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e5e19ec4-5d27-3935-8928-71c90f78d2a3.roa File: e5e19ec4-5d27-3935-8928-71c90f78d2a3.roa (raw, json) Hash identifier: bfOAB1Cg/o1ZMALk1ayFMSNZB7s1jSFjlCjZ88Fp+FM= Subject key identifier: FC:45:2A:71:6C:EE:84:CC:14:07:08:A8:72:C4:94:58:3D:69:10:01 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B16A15D4A68BC2896AFF04880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e5e19ec4-5d27-3935-8928-71c90f78d2a3.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 173.187.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:5d:4a:68:bc:28:96:af:f0:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=88782295-3071-477e-b2bb-d1c8ae347afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:83:f2:73:c4:c9:e8:dd:40:f5:f5:02:22:30: ef:bc:5c:b7:ec:83:10:9a:94:c1:1b:8c:91:dc:64: 73:ea:6f:d9:91:65:91:c0:29:ae:6b:fb:be:af:0b: 3a:c1:50:e7:e5:06:4a:97:62:c9:d1:79:a1:83:a4: 5e:f9:8a:19:f6:93:d2:80:6f:7e:8b:b7:67:1f:cd: 6a:6f:47:24:ac:5f:e4:ad:de:d4:55:6f:ec:8d:dd: 8b:91:0c:66:d7:0d:70:36:2a:65:b0:9b:e4:cd:de: e1:24:7a:e9:5a:6e:ff:5b:6b:80:60:c7:43:66:6a: cc:e1:16:f0:5c:f0:99:22:db:dd:6c:73:92:49:bc: cd:c0:7d:82:fa:ea:f5:b9:58:f7:b2:76:53:21:bc: 09:40:b3:e2:71:1f:eb:d8:a8:7d:f4:ff:9e:ed:b0: aa:ac:09:d6:0f:80:c3:c3:77:e2:28:9e:bd:47:cf: 54:c7:ab:4e:68:b8:fe:74:58:50:c7:28:d4:44:0b: a4:fc:40:8d:5f:1c:47:3d:bd:ca:39:11:67:73:a4: ca:b6:d5:c7:2a:d6:85:9b:48:3e:9c:c8:b6:24:6a: 7d:82:ce:ee:18:57:d1:e4:ee:b5:a9:48:28:39:1e: 23:8b:8f:7d:af:70:ef:ac:04:8e:76:5d:97:e9:a0: 06:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:45:2A:71:6C:EE:84:CC:14:07:08:A8:72:C4:94:58:3D:69:10:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e5e19ec4-5d27-3935-8928-71c90f78d2a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:72:00:2f:6e:4a:86:0d:1a:4a:77:3d:0b:6a:69:43:a6:a7: f5:77:8b:bd:00:6d:7b:ac:80:4c:3e:f8:3f:c7:2f:83:c1:5e: 04:3d:5e:88:39:04:ff:9b:30:59:12:3f:d0:98:8e:8e:45:a9: 97:ab:82:09:a2:b6:84:b9:c0:ed:e1:c1:d8:c1:f5:10:c4:a0: 8a:63:b6:67:2f:e3:59:68:8e:0c:fb:e9:db:3b:33:e3:14:23: 91:48:85:a5:64:b1:59:89:b6:8a:fb:63:59:c2:b5:51:e6:be: 91:f9:7b:39:4d:78:82:38:c9:bd:ae:22:86:0c:e0:99:02:2c: 9e:cc:06:01:1c:5f:98:76:ab:de:93:27:5b:7d:e4:5a:79:b2: ff:48:8e:49:ff:df:3f:3f:21:2d:9e:fa:3a:c0:4b:1a:68:0f: 40:88:6d:9d:0d:a7:8b:7a:23:27:05:93:27:3c:44:bd:a3:1f: b2:7c:2c:fa:76:69:0a:3c:d5:dd:dd:97:53:12:91:d5:4c:84: 97:a8:3c:59:77:8d:db:ec:2e:b0:89:e0:03:7c:38:80:49:9d: 2a:72:b0:a2:ff:25:11:3e:ce:78:30:66:e6:fb:2e:01:49:1d: d1:4f:ec:a1:67:0e:14:ba:ba:ca:f3:d0:b9:20:53:5d:15:31: e1:0d:89:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoV1KaLwolq/wSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk ODg3ODIyOTUtMzA3MS00NzdlLWIyYmItZDFjOGFlMzQ3YWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoPyc8TJ6N1A9fUCIjDvvFy37IMQmpTBG4yR 3GRz6m/ZkWWRwCmua/u+rws6wVDn5QZKl2LJ0Xmhg6Re+YoZ9pPSgG9+i7dnH81q b0ckrF/krd7UVW/sjd2LkQxm1w1wNiplsJvkzd7hJHrpWm7/W2uAYMdDZmrM4Rbw XPCZItvdbHOSSbzNwH2C+ur1uVj3snZTIbwJQLPicR/r2Kh99P+e7bCqrAnWD4DD w3fiKJ69R89Ux6tOaLj+dFhQxyjURAuk/ECNXxxHPb3KORFnc6TKttXHKtaFm0g+ nMi2JGp9gs7uGFfR5O61qUgoOR4ji499r3DvrASOdl2X6aAGTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxFKnFs7oTMFAcIqHLElFg9aRABMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTVlMTllYzQtNWQyNy0z OTM1LTg5MjgtNzFjOTBmNzhkMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElyAC9uSoYNGkp3PQtqaUOmp/V3i70AbXusgEw++D/HL4PBXgQ9Xog5 BP+bMFkSP9CYjo5FqZerggmitoS5wO3hwdjB9RDEoIpjtmcv41lojgz76ds7M+MU I5FIhaVksVmJtor7Y1nCtVHmvpH5ezlNeII4yb2uIoYM4JkCLJ7MBgEcX5h2q96T J1t95Fp5sv9Ijkn/3z8/IS2e+jrASxpoD0CIbZ0Np4t6IycFkyc8RL2jH7J8LPp2 aQo81d3dl1MSkdVMhJeoPFl3jdvsLrCJ4AN8OIBJnSpysKL/JRE+zngwZub7LgFJ HdFP7KFnDhS6usrz0LkgU10VMeENiWQ= -----END CERTIFICATE-----Generated at Fri Oct 10 22:06:36 2025 by rpki-client