$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9158033-9432-32b6-9e76-162cc075a3e8.roa File: f9158033-9432-32b6-9e76-162cc075a3e8.roa (raw, json) Hash identifier: Uc2fPuns3/iKt5qi7SRQ+WkyG2e2kVhEQJiJlfGkEWw= Subject key identifier: 6B:A7:8A:C6:18:92:DE:48:FA:5C:01:0E:D9:67:C7:85:0C:61:7B:51 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D077836D70EB34B735280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9158033-9432-32b6-9e76-162cc075a3e8.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 67.224.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:07:78:36:d7:0e:b3:4b:73:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=8e39ae37-0d91-47e4-821a-f52546ce0099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:58:6b:17:6b:69:18:94:c2:65:5d:72:11:52: a7:a1:07:27:8c:7a:06:50:5e:2a:ab:2e:db:3a:27: 35:be:a1:90:94:6a:53:98:ff:cd:ad:65:2b:ab:8d: 7c:89:cf:67:01:0c:43:fa:ea:cd:af:62:e2:17:c0: ff:4d:8a:21:8c:f3:4e:6f:cd:fc:b8:ad:05:3c:66: 05:d8:e1:c5:0e:c4:32:bd:23:b5:98:bb:45:19:c1: 7f:cc:4e:24:31:11:4f:74:28:98:bb:36:d8:b7:ba: d1:cf:9d:f4:7a:91:c1:db:fe:46:b9:d8:a1:59:64: a7:80:61:f8:3a:da:db:7b:41:ce:20:e4:0e:b6:5e: 4c:06:62:66:e2:a5:6a:7b:b7:7f:bb:49:66:5a:8d: f9:58:53:79:ae:5a:89:47:80:3c:ab:ee:41:46:f5: 97:8b:a5:52:ed:a2:4f:5a:5c:bb:68:b8:40:29:a3: e0:35:de:de:35:3f:8d:ba:bd:32:e4:6b:c9:d4:73: 33:a9:5d:08:cd:eb:f0:a8:1c:e1:45:14:bc:af:92: 1b:b1:20:0a:b7:50:b4:6d:12:f7:a7:0b:56:df:c7: ce:15:c1:91:4d:d9:cb:3c:66:80:b5:d9:d4:11:0d: ca:9b:bc:88:92:26:03:6e:4e:9b:55:fd:2c:01:26: eb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A7:8A:C6:18:92:DE:48:FA:5C:01:0E:D9:67:C7:85:0C:61:7B:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9158033-9432-32b6-9e76-162cc075a3e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.224.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:bf:a6:20:52:60:2e:d2:3b:83:2b:a8:93:7e:65:d2:7d:3e: e0:ee:ac:52:91:f1:ec:e5:03:32:78:f5:cb:17:63:db:c6:27: 26:5f:b9:1e:de:bc:19:7d:5c:4d:36:dd:31:66:20:34:76:cb: 06:7a:58:9b:e8:62:07:23:00:35:fd:56:9b:80:5e:58:d0:4b: 72:34:41:b4:f5:b9:1f:0f:fc:1b:94:b4:7b:14:3e:77:e9:2c: 8b:7d:bc:a2:ca:50:09:88:65:5f:aa:1c:5c:12:29:d2:29:b6: e7:a2:8a:e7:02:fd:23:c9:42:73:4e:af:1c:b7:a1:47:e6:d3: 1a:b9:5c:af:2f:b4:c8:43:a6:2c:c7:f2:cc:ac:91:28:74:a4: c6:1e:75:e8:01:a1:b8:15:73:36:83:16:8d:50:69:6b:db:d0: 81:1e:3f:64:44:c4:92:fd:bc:64:81:d4:1b:06:a5:89:fb:81: 5d:8e:f7:ff:ad:0c:77:41:df:c6:27:c9:fe:2f:6b:fc:1f:f8: 99:c8:36:bf:39:c8:b4:e8:e0:4f:7b:c9:57:ab:e4:1f:f0:3a: 1d:3a:41:6f:b2:45:e1:05:e9:c5:ad:95:7c:6a:5e:21:50:0d: 51:6b:be:8b:10:92:65:e4:41:2c:8e:92:1a:17:a4:d9:3a:93: cf:df:06:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQd4NtcOs0tzUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk OGUzOWFlMzctMGQ5MS00N2U0LTgyMWEtZjUyNTQ2Y2UwMDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1hrF2tpGJTCZV1yEVKnoQcnjHoGUF4qqy7b Oic1vqGQlGpTmP/NrWUrq418ic9nAQxD+urNr2LiF8D/TYohjPNOb838uK0FPGYF 2OHFDsQyvSO1mLtFGcF/zE4kMRFPdCiYuzbYt7rRz530epHB2/5GudihWWSngGH4 Otrbe0HOIOQOtl5MBmJm4qVqe7d/u0lmWo35WFN5rlqJR4A8q+5BRvWXi6VS7aJP Wly7aLhAKaPgNd7eNT+Nur0y5GvJ1HMzqV0IzevwqBzhRRS8r5IbsSAKt1C0bRL3 pwtW38fOFcGRTdnLPGaAtdnUEQ3Km7yIkiYDbk6bVf0sASbrFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGunisYYkt5I+lwBDtlnx4UMYXtRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjkxNTgwMzMtOTQzMi0z MmI2LTllNzYtMTYyY2MwNzVhM2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ+AgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIi/piBSYC7SO4MrqJN+ZdJ9PuDurFKR8ezlAzJ49csXY9vGJyZfuR7e vBl9XE023TFmIDR2ywZ6WJvoYgcjADX9VpuAXljQS3I0QbT1uR8P/BuUtHsUPnfp LIt9vKLKUAmIZV+qHFwSKdIptueiiucC/SPJQnNOrxy3oUfm0xq5XK8vtMhDpizH 8syskSh0pMYedegBobgVczaDFo1QaWvb0IEeP2RExJL9vGSB1BsGpYn7gV2O9/+t DHdB38Ynyf4va/wf+JnINr85yLTo4E97yVer5B/wOh06QW+yReEF6cWtlXxqXiFQ DVFrvosQkmXkQSyOkhoXpNk6k8/fBqA= -----END CERTIFICATE-----Generated at Fri Oct 10 22:09:38 2025 by rpki-client