$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5140e7ab-5d24-3342-9292-d79d02eb5dbe.roa File: 5140e7ab-5d24-3342-9292-d79d02eb5dbe.roa (raw, json) Hash identifier: 2ohHf/aw/URg+C2aAVriNyOTVMzI2g5lTl59XAyO5Y0= Subject key identifier: EC:9A:C3:10:9E:13:7A:4B:01:FF:D3:61:49:03:0E:E5:4F:61:BC:12 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B8881C75EBF3F4D5EFB4CB340 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5140e7ab-5d24-3342-9292-d79d02eb5dbe.roa Signing time: Wed 15 Oct 2025 19:59:07 +0000 ROA not before: Wed 15 Oct 2025 19:59:07 +0000 ROA not after: Tue 13 Jan 2026 20:59:07 +0000 asID: 7029 IP address blocks: 209.2.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:88:81:c7:5e:bf:3f:4d:5e:fb:4c:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 15 19:59:07 2025 GMT Not After : Jan 13 20:59:07 2026 GMT Subject: CN=ac0a5741-5c83-44bc-86b1-b7a083e1dac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:aa:38:41:d4:62:d8:07:db:01:14:19:74:5f: 6e:7c:0b:28:73:7e:43:fd:cd:60:13:ce:47:73:dc: 44:be:72:7a:ac:db:41:68:20:c8:a4:7c:60:e5:22: cf:7c:24:99:1f:6d:1d:fc:88:dd:63:e2:b2:5f:ca: d7:5b:51:38:80:39:3d:61:0a:f3:77:24:72:2b:54: 96:40:33:19:48:30:61:0b:d8:ed:19:97:4a:3e:0a: b6:8d:15:79:94:4a:e5:e9:59:35:c8:4d:8d:08:27: 53:8a:87:31:d6:d4:61:59:ee:d2:a5:01:c0:c2:f3: 5a:cb:60:0c:ed:ce:ed:7a:07:84:9e:b1:24:7b:cf: d4:41:01:85:03:b0:2a:0e:ba:cc:34:8c:e0:64:55: 7d:02:f7:4a:3d:3a:07:76:47:33:0e:c3:b0:dc:15: 25:37:40:ab:9d:96:9c:77:90:fd:b3:e0:21:42:66: a4:48:4d:f7:d4:87:b3:d0:b5:e0:e6:a9:8b:64:36: 1b:2c:b9:24:10:41:11:42:53:73:59:fe:47:0e:34: 46:0f:46:63:9a:da:fe:cc:f8:b0:a0:df:27:1b:55: 5d:61:4c:2b:04:fe:47:8e:42:8e:88:1d:4c:31:9e: b1:54:0f:b5:7d:65:e1:f2:d5:35:13:0c:08:14:4e: 67:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9A:C3:10:9E:13:7A:4B:01:FF:D3:61:49:03:0E:E5:4F:61:BC:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5140e7ab-5d24-3342-9292-d79d02eb5dbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:02:9f:35:4c:a2:27:71:bf:ce:83:b0:ef:a5:7e:87:55:17: 92:2e:8a:45:56:aa:94:37:08:d6:79:c5:c2:2f:08:df:2a:b3: c7:61:00:54:6a:ab:c0:45:a3:b0:3c:ad:ff:c1:dd:dc:d2:ae: 20:28:d8:c3:4e:53:d8:f5:54:20:9f:e6:89:75:c1:7a:d3:97: b4:03:70:e2:07:6c:e1:05:cb:95:7b:ee:21:65:db:f1:cc:27: 26:23:7b:05:01:91:f8:b4:85:f6:d1:13:ba:af:47:1d:b8:ec: 31:20:bc:49:3b:86:56:e6:8f:a7:90:f4:e8:38:5e:87:8d:2d: 52:97:c3:5d:c3:3a:ef:4f:19:bf:f6:78:09:f9:3b:e5:3c:fc: f4:ec:de:f4:90:70:f7:58:c0:d1:55:0a:11:bb:f1:27:cd:05: 6b:55:47:60:b6:40:80:af:0a:76:80:d5:7f:bb:aa:59:4b:dc: 51:75:63:a1:95:17:6f:4c:29:e6:b4:a5:c1:c4:ea:32:ee:73: 42:9c:2c:7a:1e:83:90:35:40:63:c6:4d:a4:c2:11:d1:f7:79: 4c:78:3d:09:1b:62:97:e4:86:b6:b2:3a:c7:9a:01:11:eb:32: b5:60:5e:19:a8:e8:2a:36:9d:15:6d:ab:23:c7:38:a9:11:d1: 69:ee:d3:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuIgcdevz9NXvtMs0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxNTE5NTkwN1oXDTI2MDExMzIwNTkwN1owLzEtMCsGA1UEAxMk YWMwYTU3NDEtNWM4My00NGJjLTg2YjEtYjdhMDgzZTFkYWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKo4QdRi2AfbARQZdF9ufAsoc35D/c1gE85H c9xEvnJ6rNtBaCDIpHxg5SLPfCSZH20d/IjdY+KyX8rXW1E4gDk9YQrzdyRyK1SW QDMZSDBhC9jtGZdKPgq2jRV5lErl6Vk1yE2NCCdTiocx1tRhWe7SpQHAwvNay2AM 7c7tegeEnrEke8/UQQGFA7AqDrrMNIzgZFV9AvdKPToHdkczDsOw3BUlN0CrnZac d5D9s+AhQmakSE331Iez0LXg5qmLZDYbLLkkEEERQlNzWf5HDjRGD0Zjmtr+zPiw oN8nG1VdYUwrBP5HjkKOiB1MMZ6xVA+1fWXh8tU1EwwIFE5n1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOyawxCeE3pLAf/TYUkDDuVPYbwSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTE0MGU3YWItNWQyNC0z MzQyLTkyOTItZDc5ZDAyZWI1ZGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0QJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoCnzVMoidxv86DsO+lfodVF5IuikVWqpQ3CNZ5xcIvCN8qs8dhAFRq q8BFo7A8rf/B3dzSriAo2MNOU9j1VCCf5ol1wXrTl7QDcOIHbOEFy5V77iFl2/HM JyYjewUBkfi0hfbRE7qvRx247DEgvEk7hlbmj6eQ9Og4XoeNLVKXw13DOu9PGb/2 eAn5O+U8/PTs3vSQcPdYwNFVChG78SfNBWtVR2C2QICvCnaA1X+7qllL3FF1Y6GV F29MKea0pcHE6jLuc0KcLHoeg5A1QGPGTaTCEdH3eUx4PQkbYpfkhrayOseaARHr MrVgXhmo6Co2nRVtqyPHOKkR0Wnu00s= -----END CERTIFICATE-----Generated at Sun Oct 19 18:34:27 2025 by rpki-client