$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fd055926-a691-35d2-8f8a-be5964802b98.roa File: fd055926-a691-35d2-8f8a-be5964802b98.roa (raw, json) Hash identifier: SyVFRTAkrRpgMD7HdmqMx15yzRVqc9fVbOUMybFRKR4= Subject key identifier: A6:09:45:3E:87:44:25:23:68:84:BB:E2:29:52:BF:6B:73:8F:FE:F6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2A2C4A4694F44A42C6410800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fd055926-a691-35d2-8f8a-be5964802b98.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 174.131.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:4a:46:94:f4:4a:42:c6:41:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=3723d9f3-7dba-4aa7-abd1-7bad5998af5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:30:46:6b:e3:ec:47:84:db:e9:af:b5:56:b6: 36:c2:e7:af:6b:9b:4d:45:4c:d4:bd:f8:18:3e:6f: f1:8f:a9:e9:63:8b:80:fd:a8:4e:54:d9:53:25:75: c7:65:9c:3a:0e:11:66:7b:f9:b0:ef:9b:08:bd:1f: 49:92:3a:e9:c3:4c:9f:58:ed:f9:57:af:9b:89:53: 68:64:a7:c8:81:f7:2d:8a:f9:a3:24:cf:5f:ef:89: 37:fa:f4:c5:63:2f:54:fd:15:5c:c9:34:83:de:46: e6:d2:66:94:ab:1c:31:79:4e:00:cb:40:d6:4b:56: b4:96:eb:ed:38:e0:06:fb:79:fd:a5:c6:45:32:a3: 59:8c:66:7d:22:3e:c8:96:f1:a6:4d:45:e8:d9:0e: 6d:c4:c2:99:b0:7c:1b:4f:69:73:83:17:f0:bc:9d: eb:ad:f8:6c:5b:9f:e9:df:db:e1:ee:c0:f6:9b:88: a1:27:3b:67:cc:65:4d:b2:d7:ea:e9:01:f4:08:26: 67:15:de:59:b7:db:66:b2:be:71:a0:d0:41:60:0a: 93:5a:d2:ae:a7:2c:d8:70:5d:4e:4a:dd:63:d4:e2: ec:22:26:45:95:4d:8c:de:1b:f6:72:47:58:da:02: 65:3b:5f:cf:e7:62:cf:8b:56:1f:b0:aa:ba:76:28: ef:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:09:45:3E:87:44:25:23:68:84:BB:E2:29:52:BF:6B:73:8F:FE:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fd055926-a691-35d2-8f8a-be5964802b98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:92:5e:b7:c5:9e:3e:e8:dd:e8:a6:a5:90:89:17:05:47:a3: 9e:69:98:7f:55:0c:7d:a4:85:54:55:bc:29:30:df:09:1c:58: a3:65:3a:dd:10:5c:b3:ba:1f:37:5e:c2:6c:eb:dd:b6:99:b2: ca:35:02:86:70:4d:d3:79:d9:30:cb:1e:d5:36:92:cb:48:e0: cb:2e:91:46:a7:e4:8d:32:94:72:35:b8:4d:ba:63:21:ea:57: 67:25:d9:3b:3c:41:64:39:23:3e:cc:d3:bf:5e:48:bc:8c:f8: b3:b7:56:40:7f:33:e9:a1:16:0f:b6:4f:c3:63:f8:8b:ba:37: 38:a9:e2:c5:10:ea:54:90:da:e1:a5:3e:81:02:6e:7e:60:df: 78:af:9a:da:3b:44:8c:bb:29:fb:47:2e:cb:73:fc:35:4d:aa: 44:c9:7b:36:9f:bc:48:66:6a:fb:7e:f4:cb:e2:62:fb:3b:1f: 85:11:27:c7:12:fe:a1:f1:53:46:11:f2:a9:82:56:9c:e0:04: 78:7c:0d:94:f3:55:db:bf:5f:ce:e8:60:3d:01:5e:72:47:72: 0f:d7:77:45:64:aa:1a:7a:b9:ba:1d:18:8d:bb:36:85:a7:26: bb:e3:e6:2d:8a:9e:42:6d:6e:ab:12:64:12:8f:db:c1:ec:0a: 5f:bd:ef:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEpGlPRKQsZBCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk MzcyM2Q5ZjMtN2RiYS00YWE3LWFiZDEtN2JhZDU5OThhZjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTBGa+PsR4Tb6a+1VrY2wueva5tNRUzUvfgY Pm/xj6npY4uA/ahOVNlTJXXHZZw6DhFme/mw75sIvR9Jkjrpw0yfWO35V6+biVNo ZKfIgfctivmjJM9f74k3+vTFYy9U/RVcyTSD3kbm0maUqxwxeU4Ay0DWS1a0luvt OOAG+3n9pcZFMqNZjGZ9Ij7IlvGmTUXo2Q5txMKZsHwbT2lzgxfwvJ3rrfhsW5/p 39vh7sD2m4ihJztnzGVNstfq6QH0CCZnFd5Zt9tmsr5xoNBBYAqTWtKupyzYcF1O St1j1OLsIiZFlU2M3hv2ckdY2gJlO1/P52LPi1YfsKq6dijvAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYJRT6HRCUjaIS74ilSv2tzj/72MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmQwNTU5MjYtYTY5MS0z NWQyLThmOGEtYmU1OTY0ODAyYjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDroPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuSXrfFnj7o3eimpZCJFwVHo55pmH9VDH2khVRVvCkw3wkcWKNlOt0Q XLO6Hzdewmzr3baZsso1AoZwTdN52TDLHtU2kstI4MsukUan5I0ylHI1uE26YyHq V2cl2Ts8QWQ5Iz7M079eSLyM+LO3VkB/M+mhFg+2T8Nj+Iu6Nzip4sUQ6lSQ2uGl PoECbn5g33ivmto7RIy7KftHLstz/DVNqkTJezafvEhmavt+9MviYvs7H4URJ8cS /qHxU0YR8qmCVpzgBHh8DZTzVdu/X87oYD0BXnJHcg/Xd0Vkqhp6ubodGI27NoWn Jrvj5i2KnkJtbqsSZBKP28HsCl+978c= -----END CERTIFICATE-----Generated at Sat Oct 11 00:10:24 2025 by rpki-client