$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fabd9fbe-3ef8-3d3d-9d81-791f7a057c63.roa File: fabd9fbe-3ef8-3d3d-9d81-791f7a057c63.roa (raw, json) Hash identifier: ZXtJAaEJK5Bm0A2UpoSfa2KcHpuGBJ1dYyQ2GeeFs0I= Subject key identifier: A7:F0:DD:C8:8E:57:76:8D:03:FF:4A:E5:F0:43:60:D7:8D:4D:90:F5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC7D8C932DECD8F10BE00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fabd9fbe-3ef8-3d3d-9d81-791f7a057c63.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 199.119.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c7:d8:c9:32:de:cd:8f:10:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=af2bf59c-c2e6-4bbe-9c86-324e1de74d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:db:58:6d:e7:e8:f1:9f:9e:c6:f6:84:5e:2e: 1a:8c:13:92:e2:e5:5c:67:1b:61:26:47:41:53:8d: 32:be:ab:5c:26:dd:eb:c0:b9:27:a6:f9:4b:cc:1f: c3:e0:ca:77:ba:0d:36:87:d1:d8:da:64:c0:01:29: 68:1c:5c:9d:d4:7a:bc:fe:df:bc:06:95:6a:93:d7: 4f:c7:2a:45:3b:ee:de:7e:c9:4c:02:bb:96:b7:67: 79:41:f1:be:52:18:fe:47:51:e6:dc:1a:a3:23:2a: 01:b3:d5:4a:4f:83:a8:83:38:cd:9a:4e:f3:be:81: 7f:0b:39:6f:bd:41:47:cb:93:26:ea:c1:41:25:fc: 34:aa:b7:f8:09:6b:73:cc:a6:f9:c9:40:e2:16:47: 34:32:7d:92:38:9e:d9:82:17:9a:98:7a:d7:f6:94: 88:c0:37:69:25:11:0b:bc:11:5f:09:af:c5:bb:4c: 29:00:44:c8:fe:10:72:ab:48:a7:34:f4:e9:16:1e: 98:bd:f4:c3:e8:77:d3:d8:8f:ce:5d:b7:80:73:61: 8b:d6:93:69:d2:f2:72:b5:59:15:bf:51:90:56:a3: 9e:46:c5:9c:24:ea:52:2f:3a:1a:74:47:69:89:d4: 2f:81:37:3b:9a:b9:f3:0c:32:2e:2b:6c:f2:db:9f: 1b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F0:DD:C8:8E:57:76:8D:03:FF:4A:E5:F0:43:60:D7:8D:4D:90:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fabd9fbe-3ef8-3d3d-9d81-791f7a057c63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 199.119.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:e4:07:89:0e:62:48:e9:30:43:c9:87:ee:d5:a2:cb:5b:98: 7e:26:5e:ca:2d:70:b5:67:f6:44:be:d9:34:1a:37:f2:3d:cd: e3:c8:40:42:7c:bb:db:19:79:82:65:c2:c5:b0:b9:77:a0:8d: 96:ca:45:b5:1a:6a:87:71:2e:5c:df:b7:cb:a7:3f:78:24:0a: 99:96:0c:c0:35:5d:f5:d5:b3:8b:52:3f:69:f2:74:98:6f:69: 45:83:96:1e:87:07:7b:d5:f4:5e:48:72:b1:43:37:19:f6:fd: 8b:24:ae:fe:67:46:63:d1:26:25:ff:c4:96:04:2f:e8:d5:f5: ec:1f:8d:52:15:f2:62:05:da:38:e8:cd:bb:9e:9b:44:2f:8d: c8:45:58:5d:c5:03:13:a1:16:ff:72:cf:49:db:49:d9:d8:6f: be:43:27:98:bf:40:71:57:96:aa:c0:95:f4:44:6a:a7:2f:c8: 19:a5:25:d9:b8:d7:0b:06:ae:6e:c7:8c:f9:24:84:59:d1:6b: df:22:3e:99:c5:d8:ef:f2:ee:05:cd:d6:41:dc:2a:ac:55:84: b5:f0:12:9b:0a:53:40:0a:5c:85:c4:97:be:0f:74:b1:36:67: 11:0d:88:60:90:9c:4f:64:49:4f:ef:34:19:e2:a2:a3:a7:21: 5d:4c:11:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMfYyTLezY8QvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YWYyYmY1OWMtYzJlNi00YmJlLTljODYtMzI0ZTFkZTc0ZDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9tYbefo8Z+exvaEXi4ajBOS4uVcZxthJkdB U40yvqtcJt3rwLknpvlLzB/D4Mp3ug02h9HY2mTAASloHFyd1Hq8/t+8BpVqk9dP xypFO+7efslMAruWt2d5QfG+Uhj+R1Hm3BqjIyoBs9VKT4OogzjNmk7zvoF/Czlv vUFHy5Mm6sFBJfw0qrf4CWtzzKb5yUDiFkc0Mn2SOJ7ZgheamHrX9pSIwDdpJREL vBFfCa/Fu0wpAETI/hByq0inNPTpFh6YvfTD6HfT2I/OXbeAc2GL1pNp0vJytVkV v1GQVqOeRsWcJOpSLzoadEdpidQvgTc7mrnzDDIuK2zy258b9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfw3ciOV3aNA/9K5fBDYNeNTZD1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmFiZDlmYmUtM2VmOC0z ZDNkLTlkODEtNzkxZjdhMDU3YzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx3fwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3kB4kOYkjpMEPJh+7VostbmH4mXsotcLVn9kS+2TQaN/I9zePIQEJ8 u9sZeYJlwsWwuXegjZbKRbUaaodxLlzft8unP3gkCpmWDMA1XfXVs4tSP2nydJhv aUWDlh6HB3vV9F5IcrFDNxn2/Yskrv5nRmPRJiX/xJYEL+jV9ewfjVIV8mIF2jjo zbuem0QvjchFWF3FAxOhFv9yz0nbSdnYb75DJ5i/QHFXlqrAlfREaqcvyBmlJdm4 1wsGrm7HjPkkhFnRa98iPpnF2O/y7gXN1kHcKqxVhLXwEpsKU0AKXIXEl74PdLE2 ZxENiGCQnE9kSU/vNBnioqOnIV1MEbk= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:43 2025 by rpki-client