$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a32b09d-614c-323d-9b02-d8bdad4fc43c.roa File: 5a32b09d-614c-323d-9b02-d8bdad4fc43c.roa (raw, json) Hash identifier: Vyx47cAEIlh+1PMVtrKVitqFsZ8LSAirzHq/9RRZ9ns= Subject key identifier: 3D:AC:8B:A3:75:0D:03:39:3C:49:FE:EF:F2:1C:21:DD:B1:EC:E2:A6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B88824E8B3FD501DB2C9D9E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a32b09d-614c-323d-9b02-d8bdad4fc43c.roa Signing time: Wed 15 Oct 2025 20:00:11 +0000 ROA not before: Wed 15 Oct 2025 20:00:11 +0000 ROA not after: Tue 13 Jan 2026 21:00:11 +0000 asID: 7029 IP address blocks: 209.2.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:88:82:4e:8b:3f:d5:01:db:2c:9d:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 15 20:00:11 2025 GMT Not After : Jan 13 21:00:11 2026 GMT Subject: CN=d6d0506d-d715-4c23-b41c-d49d75afc669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:76:5e:d8:b1:08:91:1a:01:4b:fa:50:f9:d5: f4:aa:98:d7:4c:9a:95:a5:7b:1a:47:41:79:8c:24: 90:4e:03:27:55:ee:9a:b1:9b:93:3f:36:91:0b:67: cc:50:e3:f1:74:8f:25:28:28:a1:74:90:a9:bc:33: 45:79:91:f3:02:a2:af:18:51:a0:94:35:a7:aa:3d: 22:d7:1b:b1:14:1f:b5:6a:2f:d6:7a:61:64:6d:ac: 68:79:fd:e2:e9:cb:5c:f1:3e:a4:f9:7d:87:23:7e: 74:c3:8c:62:fe:f6:60:f2:3a:a7:e6:0e:84:32:73: b7:61:2d:dd:31:e2:4f:4b:1d:86:ae:32:6b:1b:f6: 55:dc:2d:94:52:69:49:cb:35:6b:0e:48:c0:d2:6a: d9:5b:fb:3e:86:42:b6:f6:84:0a:00:f0:00:48:f1: 13:1b:a3:74:91:43:46:2a:d7:28:ad:d1:31:00:eb: 7a:57:88:d7:22:23:b8:e2:37:0e:c1:d4:50:07:b8: cd:97:c0:67:0b:84:53:65:bf:61:84:f8:d8:b8:ef: 6b:e3:fa:f6:a1:db:c4:4b:63:68:c1:70:5f:94:44: d6:22:8c:01:38:7e:cd:68:9d:ba:52:7a:49:bd:22: bb:d7:67:cd:27:08:5e:69:94:79:ee:d2:74:f9:79: 89:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AC:8B:A3:75:0D:03:39:3C:49:FE:EF:F2:1C:21:DD:B1:EC:E2:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a32b09d-614c-323d-9b02-d8bdad4fc43c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:db:b7:d7:df:49:31:ae:a7:17:b7:3b:07:bd:31:55:3b:60: 5a:f6:b6:1c:3a:e4:79:d1:c7:4b:73:72:4e:63:f8:f0:d0:7a: d1:f6:ea:d7:26:cd:5f:e7:9d:7a:d5:59:e1:3f:b5:37:2b:be: 62:2d:34:62:1e:ba:10:2b:fa:ae:ac:f3:11:6f:b7:6d:f9:e7: 74:04:8d:bd:d6:66:c8:18:14:7a:5c:7d:12:7c:1b:95:0f:7b: 0f:3a:2d:76:be:51:8f:5d:e8:7e:47:9c:cf:74:80:e8:57:91: f1:78:ea:1e:00:68:4a:17:5c:e4:d3:aa:10:b5:99:18:e3:ee: 21:a1:6a:a3:77:92:f7:d1:7b:81:c0:27:bd:86:11:3e:e1:fd: d5:34:c5:37:64:ef:9b:94:4b:3d:79:81:a3:7b:a2:4e:64:c9: 80:62:60:9e:b3:89:58:fb:54:15:97:06:ea:71:59:ac:0d:f4: de:2a:50:bb:fa:8d:74:e1:c0:cb:1e:3d:31:15:2e:86:bc:a8: bf:a1:7d:08:57:da:b0:8f:ef:91:4d:10:4d:7f:cc:e3:36:bf: 17:e3:b5:dd:8d:15:36:1a:a0:67:7a:9f:2e:6e:c8:c2:7a:97: 36:86:3d:22:d1:5d:41:dc:a1:a3:dc:ae:5f:dc:03:9f:5c:af: 18:40:15:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuIgk6LP9UB2yydngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxNTIwMDAxMVoXDTI2MDExMzIxMDAxMVowLzEtMCsGA1UEAxMk ZDZkMDUwNmQtZDcxNS00YzIzLWI0MWMtZDQ5ZDc1YWZjNjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinZe2LEIkRoBS/pQ+dX0qpjXTJqVpXsaR0F5 jCSQTgMnVe6asZuTPzaRC2fMUOPxdI8lKCihdJCpvDNFeZHzAqKvGFGglDWnqj0i 1xuxFB+1ai/WemFkbaxoef3i6ctc8T6k+X2HI350w4xi/vZg8jqn5g6EMnO3YS3d MeJPSx2GrjJrG/ZV3C2UUmlJyzVrDkjA0mrZW/s+hkK29oQKAPAASPETG6N0kUNG KtcordExAOt6V4jXIiO44jcOwdRQB7jNl8BnC4RTZb9hhPjYuO9r4/r2odvES2No wXBflETWIowBOH7NaJ26UnpJvSK712fNJwheaZR57tJ0+XmJ1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2si6N1DQM5PEn+7/IcId2x7OKmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWEzMmIwOWQtNjE0Yy0z MjNkLTliMDItZDhiZGFkNGZjNDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0QKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPbt9ffSTGupxe3Owe9MVU7YFr2thw65HnRx0tzck5j+PDQetH26tcm zV/nnXrVWeE/tTcrvmItNGIeuhAr+q6s8xFvt23553QEjb3WZsgYFHpcfRJ8G5UP ew86LXa+UY9d6H5HnM90gOhXkfF46h4AaEoXXOTTqhC1mRjj7iGhaqN3kvfRe4HA J72GET7h/dU0xTdk75uUSz15gaN7ok5kyYBiYJ6ziVj7VBWXBupxWawN9N4qULv6 jXThwMsePTEVLoa8qL+hfQhX2rCP75FNEE1/zOM2vxfjtd2NFTYaoGd6ny5uyMJ6 lzaGPSLRXUHcoaPcrl/cA59crxhAFdE= -----END CERTIFICATE-----Generated at Sun Oct 19 18:34:32 2025 by rpki-client