$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f18f02c1-1d45-3ae7-9680-6a9506265517.roa File: f18f02c1-1d45-3ae7-9680-6a9506265517.roa (raw, json) Hash identifier: A7eqECvaybgXdguGnv+uGna+6ebxE3gzoJub0u7oy30= Subject key identifier: 32:62:B3:54:70:90:32:C1:FF:17:88:CF:92:21:87:51:53:D3:09:82 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6BC74FFB860A455DA0E63780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f18f02c1-1d45-3ae7-9680-6a9506265517.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 7029 IP address blocks: 151.213.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:4f:fb:86:0a:45:5d:a0:e6:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=96b18dd3-246d-473e-8fa7-4844bb1d1605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c7:67:5b:c0:67:59:6f:f0:1c:ea:93:64:43: 9f:ef:60:38:f1:c5:07:3a:74:3b:c0:7d:92:0d:54: a8:8f:b3:b5:28:75:38:a4:8d:12:cd:73:c9:cd:7c: 87:82:bd:e3:9d:20:86:37:2e:d8:4e:33:12:c2:5b: b3:ff:ef:b9:b8:55:fc:59:c9:55:7a:95:90:ac:22: b4:ca:e4:c4:6b:84:1e:23:39:86:58:b7:93:b5:f8: 4b:ec:5e:fb:0f:2c:cc:50:a7:49:6c:1a:bd:e6:0c: 92:54:f6:4f:85:08:aa:84:71:c3:1e:05:67:ae:dc: c0:41:b2:5a:f9:ac:1b:e2:27:a8:d3:86:0e:96:5d: d0:9d:26:b5:53:62:72:74:e3:a9:22:9f:35:7d:2f: 0f:32:b1:f4:83:f5:d8:b6:ca:62:bc:b6:e4:b1:21: d7:51:09:62:72:33:5a:f3:0d:eb:fe:3b:79:ba:e4: 2a:73:da:1f:16:18:ab:e2:ea:aa:82:2d:33:e9:4f: a8:94:3b:1a:3c:a1:c4:6d:c5:a9:57:1f:57:ab:48: e6:f9:5f:f4:7d:83:b7:6e:77:eb:58:54:63:63:0b: c2:cd:9b:5f:8d:09:2d:e8:b3:39:88:7c:25:d1:99: 07:dc:76:0a:ba:f1:6a:59:d6:a4:3a:40:3d:10:be: e2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:62:B3:54:70:90:32:C1:FF:17:88:CF:92:21:87:51:53:D3:09:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f18f02c1-1d45-3ae7-9680-6a9506265517.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:62:b0:4e:84:64:46:c2:35:56:52:53:73:c2:4f:01:f6:ac: 47:fd:7c:2a:f5:3d:15:e0:49:f9:d9:b5:7c:6a:82:89:eb:26: a8:af:cd:ab:c9:68:4b:30:5e:20:61:c0:1a:f3:46:a5:03:da: 25:d7:64:ed:51:57:3f:14:87:05:92:fc:e2:e2:6f:00:bb:67: 27:a6:3b:dd:73:17:d2:ad:85:59:da:fe:d2:d5:20:13:57:9e: 6a:49:bb:39:87:6c:3d:37:41:2a:ce:97:57:95:b8:c3:97:8b: 2e:af:05:bd:cb:99:e6:ac:86:7c:9f:9f:5f:1a:8e:85:32:ee: fc:76:bb:68:01:28:99:de:0e:ce:a0:6c:97:35:7f:35:bd:bf: d7:0e:9a:8d:db:9b:ec:7a:de:cb:63:de:01:96:9e:dd:2f:b8: 2e:82:cd:82:3e:fc:77:f4:c4:5e:b4:20:2b:b0:c2:74:96:b9: 30:48:8a:7e:8d:41:08:7c:92:93:7a:8b:55:ad:da:5a:e5:a7: 8f:9b:30:af:10:fd:5b:26:32:91:45:ee:24:33:76:2d:1b:56: ad:59:f8:7e:97:eb:b3:18:66:7a:a8:56:bf:35:c6:ae:3d:ce: d4:a3:f8:d2:15:b7:c4:0a:b7:83:63:a9:03:4f:ef:d0:3a:0f: 4c:b9:86:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx0/7hgpFXaDmN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk OTZiMThkZDMtMjQ2ZC00NzNlLThmYTctNDg0NGJiMWQxNjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcdnW8BnWW/wHOqTZEOf72A48cUHOnQ7wH2S DVSoj7O1KHU4pI0SzXPJzXyHgr3jnSCGNy7YTjMSwluz/++5uFX8WclVepWQrCK0 yuTEa4QeIzmGWLeTtfhL7F77DyzMUKdJbBq95gySVPZPhQiqhHHDHgVnrtzAQbJa +awb4ieo04YOll3QnSa1U2JydOOpIp81fS8PMrH0g/XYtspivLbksSHXUQlicjNa 8w3r/jt5uuQqc9ofFhir4uqqgi0z6U+olDsaPKHEbcWpVx9Xq0jm+V/0fYO3bnfr WFRjYwvCzZtfjQkt6LM5iHwl0ZkH3HYKuvFqWdakOkA9EL7iyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJis1RwkDLB/xeIz5Ihh1FT0wmCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjE4ZjAyYzEtMWQ0NS0z YWU3LTk2ODAtNmE5NTA2MjY1NTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl9VQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVisE6EZEbCNVZSU3PCTwH2rEf9fCr1PRXgSfnZtXxqgonrJqivzavJ aEswXiBhwBrzRqUD2iXXZO1RVz8UhwWS/OLibwC7ZyemO91zF9KthVna/tLVIBNX nmpJuzmHbD03QSrOl1eVuMOXiy6vBb3Lmeashnyfn18ajoUy7vx2u2gBKJneDs6g bJc1fzW9v9cOmo3bm+x63stj3gGWnt0vuC6CzYI+/Hf0xF60ICuwwnSWuTBIin6N QQh8kpN6i1Wt2lrlp4+bMK8Q/VsmMpFF7iQzdi0bVq1Z+H6X67MYZnqoVr81xq49 ztSj+NIVt8QKt4NjqQNP79A6D0y5hhQ= -----END CERTIFICATE-----Generated at Fri Oct 10 22:06:16 2025 by rpki-client