$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f85c8b2b-7c62-3e61-bbca-4d173682138b.roa File: f85c8b2b-7c62-3e61-bbca-4d173682138b.roa (raw, json) Hash identifier: qGUJeY3zYi6uj0FcF6F0c6nrD6uMMKtHEGvqDV3Vaj4= Subject key identifier: 80:6A:A8:BC:F5:E7:C6:80:71:4A:69:FC:5F:8E:B8:CA:6D:97:67:07 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC333706820DD36B49700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f85c8b2b-7c62-3e61-bbca-4d173682138b.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 69.176.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c3:33:70:68:20:dd:36:b4:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=3949991a-f612-4c52-ba92-1f243d16040b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:30:97:35:c2:54:32:cc:69:b7:c8:1c:90:ab: ac:d8:d6:18:92:9f:ea:a5:c2:d5:9f:64:df:4c:92: 3b:bf:1a:b6:79:24:99:d1:60:99:2b:73:f4:10:ab: 2b:7b:37:07:50:82:01:44:fc:28:07:12:7f:48:23: 7d:93:a1:d9:e2:88:f5:b3:c0:cf:49:ce:1f:d1:ef: 5c:bc:6f:9e:f4:a8:37:07:f7:ab:82:f0:96:e7:69: ab:47:ca:a3:da:db:d4:7e:be:9f:e0:e5:13:fb:ab: 27:ed:6c:a3:a2:ed:b9:3e:23:f0:cd:f6:b3:9f:58: c9:e5:1b:56:29:ae:81:4c:69:56:50:c4:61:e0:f4: 10:53:5d:6a:9c:fb:68:ca:b5:85:c6:0e:1c:c1:03: 2f:b1:12:6d:1b:06:3f:2f:cd:62:a5:47:c3:c5:ad: 8c:5c:a9:09:f5:a3:1f:79:ab:17:39:75:e5:9f:35: 90:c8:2b:47:e7:6d:d2:28:4e:4a:b6:33:c3:52:d3: ce:a6:ca:ac:62:ef:fe:12:4e:39:ab:6a:fe:09:e8: 1f:4b:cd:a3:c9:23:a5:f5:7b:64:92:ce:c2:27:70: d6:09:08:6c:24:34:bc:40:78:82:29:71:42:2b:d3: 11:f4:dd:4c:b8:02:cc:71:97:dd:39:93:08:0f:65: da:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:6A:A8:BC:F5:E7:C6:80:71:4A:69:FC:5F:8E:B8:CA:6D:97:67:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f85c8b2b-7c62-3e61-bbca-4d173682138b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.176.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:80:3d:21:99:6a:1a:e7:b1:f7:1d:3c:f0:de:06:73:e5:3f: 14:1f:70:59:51:5a:dd:31:c2:9a:04:6f:2c:b2:b1:46:2d:da: ef:dc:c2:d2:0a:f6:9a:45:70:f0:f3:60:ef:f5:58:54:72:96: 59:87:c5:5b:4b:3f:61:23:80:e5:49:c0:de:48:08:37:49:3a: ff:2a:31:8c:04:56:67:98:32:b2:d9:46:15:13:d3:5c:aa:1c: 65:e7:c8:99:c6:64:a6:9e:fd:07:7d:ad:38:54:b8:7c:4a:fa: 8a:4b:30:9f:a6:a0:86:bd:61:fb:9a:0d:82:6f:9a:c4:6d:8f: a8:48:00:6b:ec:1f:f0:3f:bd:2f:c6:1a:9d:73:2b:3c:cd:06: 72:22:9c:cd:81:d7:01:e4:5b:ac:30:2c:10:53:fe:89:01:96: 94:05:c6:1e:7a:49:8c:f1:31:53:e7:dc:59:f7:b8:fa:49:f9: 0d:ce:ab:22:18:04:f2:28:42:46:58:36:84:b2:01:a9:27:44: 31:ba:8e:ef:14:84:1b:d5:f9:22:44:83:82:b5:0d:e9:75:7c: eb:96:a0:92:cd:34:f7:ff:6c:e0:65:fe:9e:a1:dd:df:ed:d6: 1c:03:75:4a:aa:6c:b8:17:a4:a1:48:ac:49:b2:b9:77:f8:ce: f9:75:ce:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMMzcGgg3Ta0lwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk Mzk0OTk5MWEtZjYxMi00YzUyLWJhOTItMWYyNDNkMTYwNDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjCXNcJUMsxpt8gckKus2NYYkp/qpcLVn2Tf TJI7vxq2eSSZ0WCZK3P0EKsrezcHUIIBRPwoBxJ/SCN9k6HZ4oj1s8DPSc4f0e9c vG+e9Kg3B/ergvCW52mrR8qj2tvUfr6f4OUT+6sn7Wyjou25PiPwzfazn1jJ5RtW Ka6BTGlWUMRh4PQQU11qnPtoyrWFxg4cwQMvsRJtGwY/L81ipUfDxa2MXKkJ9aMf easXOXXlnzWQyCtH523SKE5KtjPDUtPOpsqsYu/+Ek45q2r+CegfS82jySOl9Xtk ks7CJ3DWCQhsJDS8QHiCKXFCK9MR9N1MuALMcZfdOZMID2XaJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBqqLz158aAcUpp/F+OuMptl2cHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjg1YzhiMmItN2M2Mi0z ZTYxLWJiY2EtNGQxNzM2ODIxMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRbDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2APSGZahrnsfcdPPDeBnPlPxQfcFlRWt0xwpoEbyyysUYt2u/cwtIK 9ppFcPDzYO/1WFRyllmHxVtLP2EjgOVJwN5ICDdJOv8qMYwEVmeYMrLZRhUT01yq HGXnyJnGZKae/Qd9rThUuHxK+opLMJ+moIa9YfuaDYJvmsRtj6hIAGvsH/A/vS/G Gp1zKzzNBnIinM2B1wHkW6wwLBBT/okBlpQFxh56SYzxMVPn3Fn3uPpJ+Q3OqyIY BPIoQkZYNoSyAaknRDG6ju8UhBvV+SJEg4K1Del1fOuWoJLNNPf/bOBl/p6h3d/t 1hwDdUqqbLgXpKFIrEmyuXf4zvl1zhE= -----END CERTIFICATE-----Generated at Fri Oct 10 22:13:59 2025 by rpki-client