$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f68ebcab-5ce5-3722-a008-575cca3f968e.roa File: f68ebcab-5ce5-3722-a008-575cca3f968e.roa (raw, json) Hash identifier: 4TgQSbE8cP8dvt3WMhPegBKBPlEPLWBUepDjbxafY6s= Subject key identifier: BF:AA:BC:87:BC:94:8D:B8:EF:86:1C:73:3B:23:04:58:DD:2A:D7:71 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CEFB06A8CAEA4DAD143C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f68ebcab-5ce5-3722-a008-575cca3f968e.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 14 IP address blocks: 209.2.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ef:b0:6a:8c:ae:a4:da:d1:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=c13ebe48-024a-4800-a986-c038a31f5406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:29:98:07:2d:5c:2d:2a:8f:7f:e7:9f:9a:8b: 8c:7f:c9:11:57:d7:26:2e:33:99:74:e9:80:5c:ab: 06:39:4c:aa:ef:ee:f0:67:d1:95:3e:83:02:90:a2: e8:71:82:f9:fb:74:e7:ab:02:7a:67:56:aa:04:03: 0f:2e:0f:09:c5:88:1a:bd:ad:31:5c:f2:e5:3c:26: c3:f9:e4:55:09:63:6c:a8:f0:31:2b:fc:4f:b5:05: 5d:4d:4b:24:62:05:a2:fb:d5:16:5c:08:9b:52:57: 3e:bb:d2:12:18:a1:cf:ef:0a:12:34:5a:20:b6:25: e5:f8:1a:f3:57:dd:95:f3:af:4b:05:b6:88:8f:08: de:ad:77:b7:9e:c9:21:8c:7d:f8:fc:ec:00:d8:d2: 8e:7c:3e:4b:67:b6:1b:3a:b1:67:ff:81:99:9d:b7: b8:0c:e5:c9:77:4f:17:1a:1d:27:48:23:ab:d7:c9: 25:78:0b:e1:bc:96:2d:5b:de:a0:e9:d6:d4:14:4a: e4:0a:6f:54:bd:9c:04:80:79:25:82:05:e7:61:ed: 86:52:d9:eb:6d:72:47:68:77:59:b7:c5:44:37:1c: fe:84:d3:c5:ad:12:1f:ee:39:7c:87:9e:ba:c4:87: 83:78:50:7e:1a:4a:03:75:c7:ff:94:e7:02:87:eb: b7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AA:BC:87:BC:94:8D:B8:EF:86:1C:73:3B:23:04:58:DD:2A:D7:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f68ebcab-5ce5-3722-a008-575cca3f968e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:46:61:59:a8:d1:69:00:38:ce:b9:b2:f1:b4:15:9a:c4:f3: 2b:14:94:70:24:e3:f3:5e:30:c0:cb:be:e1:d3:6d:8a:14:6d: c8:f5:6c:2b:44:a2:6e:bc:c1:e1:a7:04:9b:1f:8c:e4:72:8e: a1:66:fb:18:7c:1f:c2:b5:a9:bf:67:20:3e:68:68:be:1b:d1: d1:93:58:3b:68:f6:0b:1d:c3:4f:1c:b8:62:0c:bd:14:81:90: 20:0b:7d:6f:f9:06:c0:fb:32:4f:b1:da:8d:d7:2d:0e:3b:27: 8e:c5:09:3c:58:cc:99:c6:db:c7:f8:84:f1:2a:37:1b:d2:dc: 45:2b:1b:4e:98:b3:6b:4b:3a:d0:53:e0:5e:a0:8b:05:46:dd: 1c:f2:bf:63:e6:4b:0d:16:6a:a4:b6:7d:42:7f:d8:f9:b9:c0: 5d:97:6e:4e:52:d7:39:d3:08:00:2e:73:f6:51:55:9b:ed:fa: 52:cd:28:9f:8c:5c:38:be:c0:0e:eb:ca:6e:d3:72:31:a6:8b: 6c:94:b7:55:09:90:0f:55:eb:20:2c:c9:f3:5f:da:e4:b4:12: a3:7c:e4:f2:89:09:ca:a4:8b:25:bd:4f:76:c5:f4:b5:c3:3c: a7:9c:85:da:8e:6a:c8:92:a1:99:2e:ca:eb:32:a9:25:d9:32: 19:81:b7:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXO+waoyupNrRQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YzEzZWJlNDgtMDI0YS00ODAwLWE5ODYtYzAzOGEzMWY1NDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvymYBy1cLSqPf+efmouMf8kRV9cmLjOZdOmA XKsGOUyq7+7wZ9GVPoMCkKLocYL5+3TnqwJ6Z1aqBAMPLg8JxYgava0xXPLlPCbD +eRVCWNsqPAxK/xPtQVdTUskYgWi+9UWXAibUlc+u9ISGKHP7woSNFogtiXl+Brz V92V869LBbaIjwjerXe3nskhjH34/OwA2NKOfD5LZ7YbOrFn/4GZnbe4DOXJd08X Gh0nSCOr18kleAvhvJYtW96g6dbUFErkCm9UvZwEgHklggXnYe2GUtnrbXJHaHdZ t8VENxz+hNPFrRIf7jl8h566xIeDeFB+GkoDdcf/lOcCh+u3uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+qvIe8lI2474YcczsjBFjdKtdxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjY4ZWJjYWItNWNlNS0z NzIyLWEwMDgtNTc1Y2NhM2Y5NjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0QIwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJGYVmo0WkAOM65svG0FZrE8ysUlHAk4/NeMMDLvuHTbYoUbcj1bCtE om68weGnBJsfjORyjqFm+xh8H8K1qb9nID5oaL4b0dGTWDto9gsdw08cuGIMvRSB kCALfW/5BsD7Mk+x2o3XLQ47J47FCTxYzJnG28f4hPEqNxvS3EUrG06Ys2tLOtBT 4F6giwVG3Rzyv2PmSw0WaqS2fUJ/2Pm5wF2Xbk5S1znTCAAuc/ZRVZvt+lLNKJ+M XDi+wA7rym7TcjGmi2yUt1UJkA9V6yAsyfNf2uS0EqN85PKJCcqkiyW9T3bF9LXD PKechdqOasiSoZkuyusyqSXZMhmBtww= -----END CERTIFICATE-----Generated at Fri Oct 10 19:58:29 2025 by rpki-client