$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e920d678-f493-3e03-ad55-bd771a6429e0.roa File: e920d678-f493-3e03-ad55-bd771a6429e0.roa (raw, json) Hash identifier: 5u2z8sE3XIytLt493TfBnXACQSQ3xmG2LGzHOuFIiqc= Subject key identifier: 55:63:53:F4:DE:88:D4:36:4D:C4:C0:D9:E0:98:96:33:7E:53:C5:09 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC0E9EF559DE8BA8DE8B0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e920d678-f493-3e03-ad55-bd771a6429e0.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 64.196.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c0:e9:ef:55:9d:e8:ba:8d:e8:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=cb15fa3a-d4df-4b7f-afd7-ddda92607202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bc:b7:da:8a:5c:d1:de:44:5a:2d:22:af:70: 63:c6:a0:ef:51:6a:2b:2e:f4:f5:f9:32:96:3a:00: 9e:b9:55:b9:d9:33:25:23:86:d9:81:49:c2:9f:2a: 1d:d5:b5:4e:e4:c0:3f:2c:6d:a3:56:00:94:9c:af: 42:88:86:e0:81:35:56:a0:13:68:e1:26:92:fd:a1: db:04:7f:70:6b:30:f3:25:10:c1:2d:13:99:89:8e: 69:63:3f:4c:85:8f:38:4b:cd:af:d7:84:ee:48:a3: 01:aa:27:9b:bf:55:b5:b3:e3:e8:be:5a:2b:06:9d: 2b:45:39:ec:c6:8d:d6:1a:84:aa:ee:6b:77:cf:40: 3f:d6:3b:9e:d3:24:48:6c:e4:b1:73:38:29:a1:7d: bd:a6:76:6a:68:e4:65:e9:51:2b:19:89:81:69:09: 28:6a:db:d5:17:a4:c0:98:2a:55:05:8d:80:3c:d1: 56:35:00:42:f5:49:67:80:37:cd:59:cc:3a:f4:ed: dd:f4:1e:ca:6a:9e:ce:12:09:e6:92:37:4a:cb:46: b4:df:1a:a5:8b:7f:21:d5:85:e6:e9:70:42:dc:85: ef:37:7b:64:d3:13:b9:c7:dd:f2:8c:2a:51:b4:e6: 07:ef:32:5c:ae:00:cb:98:87:e8:86:1c:3e:12:17: dc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:63:53:F4:DE:88:D4:36:4D:C4:C0:D9:E0:98:96:33:7E:53:C5:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e920d678-f493-3e03-ad55-bd771a6429e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.196.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:27:e0:40:43:fc:b4:28:14:f6:68:d4:22:77:68:da:da:ee: 69:d1:c8:bb:3e:f7:2d:72:3e:1b:4d:18:13:4d:93:5d:4e:2c: fc:74:90:03:7b:85:ad:4a:02:0f:82:9f:e6:55:fb:f4:c4:7d: af:29:fd:c7:70:cd:6b:1b:15:d2:f3:86:35:d5:b7:98:36:a5: 7c:bc:b5:15:b1:22:e6:45:33:c7:5f:d9:26:a6:1e:56:bd:f3: 6a:b3:49:9f:35:3f:5a:01:b0:a4:7d:d4:30:ec:24:f8:13:41: bc:48:95:e8:56:f7:ec:48:00:d3:44:ef:9e:e2:0b:df:3b:f9: 8c:76:ca:84:dc:dd:30:7a:b3:53:f1:58:dc:89:fd:2e:c4:6f: d6:a8:b5:79:39:f6:01:fc:e1:67:88:f7:3a:eb:a1:30:d8:74: 7a:a6:04:ed:2a:bd:53:0e:a8:8b:66:17:d8:27:8d:f8:18:df: cb:50:44:27:22:6f:9a:fe:e8:eb:29:2e:f3:16:60:91:79:81: 5a:11:21:ba:81:2e:97:3a:a9:50:4f:71:79:f9:26:94:f6:c4: 81:ad:94:5f:fb:ae:e6:b7:41:1f:6b:c8:3d:2f:d8:cc:6b:e0: 1e:26:68:df:90:20:b7:7b:d3:25:e0:92:5c:59:a8:31:ff:3d: 40:e0:35:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMDp71Wd6LqN6LAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk Y2IxNWZhM2EtZDRkZi00YjdmLWFmZDctZGRkYTkyNjA3MjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLy32opc0d5EWi0ir3BjxqDvUWorLvT1+TKW OgCeuVW52TMlI4bZgUnCnyod1bVO5MA/LG2jVgCUnK9CiIbggTVWoBNo4SaS/aHb BH9wazDzJRDBLROZiY5pYz9MhY84S82v14TuSKMBqiebv1W1s+PovlorBp0rRTns xo3WGoSq7mt3z0A/1jue0yRIbOSxczgpoX29pnZqaORl6VErGYmBaQkoatvVF6TA mCpVBY2APNFWNQBC9UlngDfNWcw69O3d9B7Kap7OEgnmkjdKy0a03xqli38h1YXm 6XBC3IXvN3tk0xO5x93yjCpRtOYH7zJcrgDLmIfohhw+EhfcOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVjU/TeiNQ2TcTA2eCYljN+U8UJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTkyMGQ2NzgtZjQ5My0z ZTAzLWFkNTUtYmQ3NzFhNjQyOWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMTFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAn4EBD/LQoFPZo1CJ3aNra7mnRyLs+9y1yPhtNGBNNk11OLPx0kAN7 ha1KAg+Cn+ZV+/TEfa8p/cdwzWsbFdLzhjXVt5g2pXy8tRWxIuZFM8df2SamHla9 82qzSZ81P1oBsKR91DDsJPgTQbxIlehW9+xIANNE757iC987+Yx2yoTc3TB6s1Px WNyJ/S7Eb9aotXk59gH84WeI9zrroTDYdHqmBO0qvVMOqItmF9gnjfgY38tQRCci b5r+6OspLvMWYJF5gVoRIbqBLpc6qVBPcXn5JpT2xIGtlF/7rua3QR9ryD0v2Mxr 4B4maN+QILd70yXgklxZqDH/PUDgNeI= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:31 2025 by rpki-client