$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea6e8c50-a39d-30cc-a6d5-963165a4fe6a.roa File: ea6e8c50-a39d-30cc-a6d5-963165a4fe6a.roa (raw, json) Hash identifier: 00Mycx4o2aHi0IdvO3PQC+VCd/NSZCeJQnlNWUKfowM= Subject key identifier: 07:9A:DA:F4:4B:B6:16:55:52:F3:F1:28:49:A9:F1:97:23:1E:2E:74 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC088E6C7E9DF3B038140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea6e8c50-a39d-30cc-a6d5-963165a4fe6a.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 63.246.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c0:88:e6:c7:e9:df:3b:03:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=26a76d54-a9ea-4c20-a3b1-c7897c84f869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fb:29:ed:00:ee:54:c7:bd:98:6a:2a:5a:31: 20:d6:c5:d3:47:a6:e1:e9:0b:fc:c6:2d:2f:eb:a5: 76:ab:ef:ba:1e:c9:aa:52:d8:4c:ec:35:72:8b:3f: b8:61:71:8d:42:29:32:25:9a:b5:f4:64:50:93:85: 91:a1:ca:23:12:c1:a4:74:7b:40:23:0a:5f:de:f5: 14:4c:42:f9:e1:ab:b7:e7:8f:ea:86:8e:42:9d:c0: 74:40:69:b7:a2:9b:c1:b9:01:e5:43:6d:8f:ba:e8: 45:e8:53:0b:9d:be:42:c4:e4:85:a2:62:0a:70:f5: 3d:1f:96:51:5f:60:d7:9d:92:c6:82:5e:1c:77:0a: 6f:c4:d0:80:1a:23:52:e4:31:b9:46:3c:1a:51:4e: 01:a0:2f:9d:55:23:1f:c0:78:2b:71:44:9c:f8:73: 55:ad:e1:d3:4c:97:2b:42:ff:74:46:38:e2:21:db: c5:78:c0:bf:40:5f:e8:53:7b:ec:8a:a2:ec:06:1d: 15:bf:89:9f:e8:1c:56:ea:c8:85:89:ed:63:20:48: 8f:38:91:e0:3c:54:f9:85:6f:46:66:16:7d:97:bf: d6:6e:26:4f:d8:1e:56:f4:71:54:f7:a4:6b:d2:17: 02:bf:42:a8:81:8c:0d:2a:e4:97:12:eb:a1:fa:07: 2b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:9A:DA:F4:4B:B6:16:55:52:F3:F1:28:49:A9:F1:97:23:1E:2E:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea6e8c50-a39d-30cc-a6d5-963165a4fe6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.246.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:9e:c8:b6:f5:8d:1b:3d:9c:11:b8:1c:e7:d3:2c:27:c4:a7: 52:5c:1e:e2:8a:b2:4b:70:da:c2:2e:b6:7c:55:23:44:ac:79: ee:76:c6:e8:88:72:16:ea:36:82:10:07:2d:c9:bd:59:43:28: 5d:57:7e:af:30:5c:ec:c3:f9:08:10:03:08:19:1c:2d:e6:ca: 11:2b:f8:bc:f2:ec:c3:b1:5b:60:ce:56:da:d6:e1:53:05:0b: 13:9f:3f:74:40:19:52:05:5a:dd:3e:bd:ce:b0:9e:2e:59:16: 39:97:00:3a:0e:68:df:b6:ae:eb:6a:e1:5c:70:c7:e2:50:a6: 8c:84:81:4e:21:98:0f:c2:ea:a2:e7:99:55:21:33:1d:e5:4d: 47:a8:75:9a:a0:09:07:83:25:d7:04:8e:14:d1:24:11:fb:81: 4b:2f:5f:bb:ef:2a:2b:15:5c:21:a9:47:8c:2e:5f:b9:cc:a2: 7c:7c:e9:51:7e:f1:02:a0:2c:17:a8:86:b7:ac:76:0e:4c:06: e3:2c:53:61:67:ab:11:8a:4f:1e:3a:25:cf:51:78:47:53:22: a2:07:b8:e1:da:21:b2:b2:f1:55:1e:35:ca:cc:33:6c:99:67: b3:df:0a:84:b2:76:4d:2e:17:c5:c3:26:44:c3:55:f5:0a:56: 5d:c3:d5:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMCI5sfp3zsDgUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MjZhNzZkNTQtYTllYS00YzIwLWEzYjEtYzc4OTdjODRmODY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPsp7QDuVMe9mGoqWjEg1sXTR6bh6Qv8xi0v 66V2q++6HsmqUthM7DVyiz+4YXGNQikyJZq19GRQk4WRocojEsGkdHtAIwpf3vUU TEL54au354/qho5CncB0QGm3opvBuQHlQ22PuuhF6FMLnb5CxOSFomIKcPU9H5ZR X2DXnZLGgl4cdwpvxNCAGiNS5DG5RjwaUU4BoC+dVSMfwHgrcUSc+HNVreHTTJcr Qv90RjjiIdvFeMC/QF/oU3vsiqLsBh0Vv4mf6BxW6siFie1jIEiPOJHgPFT5hW9G ZhZ9l7/WbiZP2B5W9HFU96Rr0hcCv0KogYwNKuSXEuuh+gcrUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAea2vRLthZVUvPxKEmp8ZcjHi50MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWE2ZThjNTAtYTM5ZC0z MGNjLWE2ZDUtOTYzMTY1YTRmZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFP/bAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2eyLb1jRs9nBG4HOfTLCfEp1JcHuKKsktw2sIutnxVI0Ssee52xuiI chbqNoIQBy3JvVlDKF1Xfq8wXOzD+QgQAwgZHC3myhEr+Lzy7MOxW2DOVtrW4VMF CxOfP3RAGVIFWt0+vc6wni5ZFjmXADoOaN+2rutq4Vxwx+JQpoyEgU4hmA/C6qLn mVUhMx3lTUeodZqgCQeDJdcEjhTRJBH7gUsvX7vvKisVXCGpR4wuX7nMonx86VF+ 8QKgLBeohresdg5MBuMsU2FnqxGKTx46Jc9ReEdTIqIHuOHaIbKy8VUeNcrMM2yZ Z7PfCoSydk0uF8XDJkTDVfUKVl3D1fM= -----END CERTIFICATE-----Generated at Fri Oct 10 17:47:46 2025 by rpki-client