$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49e20564-5bb6-373a-bf3f-8d7320b64039.roa File: 49e20564-5bb6-373a-bf3f-8d7320b64039.roa (raw, json) Hash identifier: p9lhadBuQLw86cuuzHj2ZIq3lNSURSCdHgoqXIWToQU= Subject key identifier: 16:46:2B:4C:56:83:B7:2A:16:CF:5A:32:8A:1A:03:05:A6:35:D1:78 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8C66DCA006C597D6942D0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49e20564-5bb6-373a-bf3f-8d7320b64039.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.49.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:c6:6d:ca:00:6c:59:7d:69:42:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=d7eb04d0-8060-4e98-b329-19daa4a682ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2d:02:64:47:0f:0f:48:fc:7b:fa:a8:c1:bd: 27:da:2c:c6:f4:4e:d0:09:5d:ca:05:4b:e5:20:1e: 63:62:63:32:dc:3d:9f:e6:9e:f4:a1:26:96:9c:ba: f7:a3:62:dd:8e:53:0f:05:b7:be:13:f4:5d:4d:c2: 04:04:2f:ff:66:16:aa:4e:ac:0e:96:71:fe:c4:ad: 24:c7:8f:a7:9e:58:04:91:31:a0:bf:e8:cc:51:ee: a3:13:a6:cb:a0:86:a5:1d:2b:05:89:18:1a:9b:28: 4f:93:f0:f4:78:eb:83:45:30:4a:62:19:89:d2:e7: 8a:5c:f7:44:75:af:45:34:df:24:83:04:5d:c2:7c: fe:26:5c:c1:e7:b3:a3:9c:41:02:5e:b6:77:12:e0: 0b:34:65:b5:4a:b6:b6:3f:41:8b:9e:47:ca:11:ed: ad:d1:b3:fe:7d:f0:9c:6f:50:89:f2:06:33:73:d8: 6c:11:c8:0f:e3:16:7c:c0:a9:f1:35:39:9d:1f:a0: de:1b:ca:db:86:dd:a2:08:07:49:d8:31:c4:d8:ca: f1:5c:9c:a8:7f:bd:33:d8:c2:a6:b6:ad:e0:64:be: b2:ca:f5:73:7f:13:e3:72:8d:b6:3f:f8:8b:f7:38: 35:1d:60:a0:b1:0e:ef:0e:d9:12:be:7a:a3:0e:ab: 00:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:46:2B:4C:56:83:B7:2A:16:CF:5A:32:8A:1A:03:05:A6:35:D1:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49e20564-5bb6-373a-bf3f-8d7320b64039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.49.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:2e:bf:41:b7:44:2d:28:ec:03:87:fa:84:d2:f3:ad:d4:bc: 2e:1a:f7:05:03:30:77:00:a2:ca:80:61:a4:8b:76:81:2a:31: c2:f9:e8:61:38:0f:c1:5d:a1:ce:cd:45:40:6d:5a:f6:ba:b1: ec:ee:f2:1a:5b:f4:97:cb:29:34:57:e6:38:fb:d8:59:1c:85: 1e:1e:9d:75:97:18:7f:7f:f6:a4:65:93:e5:cb:c5:64:2b:19: 4d:cc:54:c4:0f:ab:08:3d:94:4c:9d:0b:df:8d:33:99:29:88: cb:72:10:f4:57:54:a3:fd:a8:56:04:db:58:bf:92:17:ee:11: 91:36:ad:c8:ae:25:4e:68:42:d6:d1:2a:5c:7b:ec:82:0c:69: 07:0a:5f:78:d5:1d:bc:ed:4a:3c:e8:e6:28:c1:39:64:2b:87: ad:fd:de:4e:17:ca:15:42:82:3c:8d:92:05:c7:3f:15:5c:ad: 86:d4:fa:dd:09:a1:80:3d:69:86:23:ad:1d:b4:a1:2d:17:81: 77:19:cd:56:50:fd:49:bc:1e:c8:75:67:98:de:a9:2e:8b:99: 9d:60:fe:8d:ee:e9:f6:2e:e7:6d:77:02:13:9b:fa:ee:a6:14: 8b:13:26:7a:38:f4:78:fe:80:0d:72:5a:f9:ac:cb:ed:33:7e: c0:d4:12:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqMZtygBsWX1pQtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZDdlYjA0ZDAtODA2MC00ZTk4LWIzMjktMTlkYWE0YTY4MmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy0CZEcPD0j8e/qowb0n2izG9E7QCV3KBUvl IB5jYmMy3D2f5p70oSaWnLr3o2LdjlMPBbe+E/RdTcIEBC//ZhaqTqwOlnH+xK0k x4+nnlgEkTGgv+jMUe6jE6bLoIalHSsFiRgamyhPk/D0eOuDRTBKYhmJ0ueKXPdE da9FNN8kgwRdwnz+JlzB57OjnEECXrZ3EuALNGW1Sra2P0GLnkfKEe2t0bP+ffCc b1CJ8gYzc9hsEcgP4xZ8wKnxNTmdH6DeG8rbht2iCAdJ2DHE2MrxXJyof70z2MKm tq3gZL6yyvVzfxPjco22P/iL9zg1HWCgsQ7vDtkSvnqjDqsAdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZGK0xWg7cqFs9aMooaAwWmNdF4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDllMjA1NjQtNWJiNi0z NzNhLWJmM2YtOGQ3MzIwYjY0MDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUuv0G3RC0o7AOH+oTS863UvC4a9wUDMHcAosqAYaSLdoEqMcL56GE4 D8Fdoc7NRUBtWva6sezu8hpb9JfLKTRX5jj72FkchR4enXWXGH9/9qRlk+XLxWQr GU3MVMQPqwg9lEydC9+NM5kpiMtyEPRXVKP9qFYE21i/khfuEZE2rciuJU5oQtbR Klx77IIMaQcKX3jVHbztSjzo5ijBOWQrh6393k4XyhVCgjyNkgXHPxVcrYbU+t0J oYA9aYYjrR20oS0XgXcZzVZQ/Um8Hsh1Z5jeqS6LmZ1g/o3u6fYu5213AhOb+u6m FIsTJno49Hj+gA1yWvmsy+0zfsDUEik= -----END CERTIFICATE-----Generated at Tue Oct 21 19:37:24 2025 by rpki-client