$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8497dbfe-6078-32f4-9c18-b84c1533c8e1.roa File: 8497dbfe-6078-32f4-9c18-b84c1533c8e1.roa (raw, json) Hash identifier: m0rkyEvk9NoRBn9h2nqIJupd+IRW3qqHm6EqF3ABOFU= Subject key identifier: DF:1B:B6:D7:6B:36:DB:05:7C:37:D9:FD:30:58:06:A2:E3:B0:4F:B6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B88819713991F5EBEA7DD0940 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8497dbfe-6078-32f4-9c18-b84c1533c8e1.roa Signing time: Wed 15 Oct 2025 19:58:45 +0000 ROA not before: Wed 15 Oct 2025 19:58:45 +0000 ROA not after: Tue 13 Jan 2026 20:58:45 +0000 asID: 7029 IP address blocks: 209.2.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:88:81:97:13:99:1f:5e:be:a7:dd:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 15 19:58:45 2025 GMT Not After : Jan 13 20:58:45 2026 GMT Subject: CN=74cd9daf-deaa-4821-82d7-765d2c5e1cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:15:07:0c:30:f7:e7:aa:d9:6a:6c:df:3b:4b: 61:f9:9c:0c:dd:4d:67:ca:27:53:1d:84:1e:b6:ce: 5c:b0:eb:f4:3a:f8:4b:ec:5b:ef:a2:23:18:d1:52: 05:33:d8:8d:8f:dc:12:04:f0:09:c5:7d:b6:aa:56: 7d:92:43:3f:93:e4:84:02:18:32:69:b0:4d:05:70: c2:7e:f8:b1:09:96:98:42:78:21:ad:83:c2:78:75: 47:3b:c5:91:be:1a:f9:4e:64:51:6f:f0:59:17:f8: 5b:9f:a6:13:7e:24:e3:84:ec:26:55:e8:76:e7:e8: a1:36:60:68:46:4a:15:65:b9:e7:48:b4:56:dd:03: 4b:34:81:e0:af:16:03:a3:3c:72:b4:7f:8d:dd:17: 8d:e6:6d:31:ce:0d:3b:c8:68:82:99:22:33:ba:b1: f6:34:d9:b9:6f:2c:b5:f0:bb:9a:5c:a6:d5:cb:16: c6:4d:7e:54:1d:26:cc:c9:b5:96:14:98:38:42:f6: e5:f6:3c:8d:77:78:0f:8c:a4:35:50:79:de:4e:09: 30:01:1c:e5:cf:03:52:d1:35:d8:c6:d8:be:bb:72: f0:bd:bf:11:0f:68:cd:b8:bf:53:81:87:92:af:ee: ea:f9:a3:9e:37:71:1f:49:22:2e:5c:e2:6f:43:24: 4f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:1B:B6:D7:6B:36:DB:05:7C:37:D9:FD:30:58:06:A2:E3:B0:4F:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8497dbfe-6078-32f4-9c18-b84c1533c8e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:e8:9b:97:59:93:75:45:54:6c:a5:bd:03:57:36:5f:3b:59: 18:5e:51:14:44:c9:eb:13:34:01:8b:ee:d1:e7:55:6b:14:24: dc:c8:0a:77:6c:a4:e6:56:b9:33:42:38:59:ff:b7:30:a7:10: b5:91:86:81:a7:32:e5:8d:72:35:e3:a9:f0:a7:90:37:87:4f: 08:3b:4b:f2:25:5f:5f:c6:ef:30:0b:d8:a8:4b:4d:b5:82:03: 77:b7:b3:d0:a3:5b:c2:ce:b6:83:28:fb:b1:aa:f4:34:25:63: e6:c2:05:b5:65:41:dd:53:39:56:80:32:64:3f:3f:c5:c2:6e: 8b:26:e6:be:f3:05:bf:29:e1:60:f6:7e:47:7f:43:07:0d:6b: ef:93:bf:55:7e:32:f1:c4:6b:e4:32:c3:a3:8a:4f:6c:54:b4: 99:1e:dc:63:de:53:a8:69:14:f2:6b:48:2d:e4:0f:45:06:dd: 07:97:be:02:ec:06:b7:50:b6:16:43:87:e9:dd:cb:94:c1:4b: 6e:14:a4:96:a1:9e:66:a0:f7:c8:1b:79:17:92:18:ef:cd:c9: 6d:23:8a:90:de:76:78:f1:65:94:fb:f3:ae:39:01:74:54:9a: c2:e0:48:58:42:a6:6e:ad:e7:ef:78:f9:3b:5a:dc:fd:61:ab: 2d:b1:8e:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuIgZcTmR9evqfdCUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxNTE5NTg0NVoXDTI2MDExMzIwNTg0NVowLzEtMCsGA1UEAxMk NzRjZDlkYWYtZGVhYS00ODIxLTgyZDctNzY1ZDJjNWUxY2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBUHDDD356rZamzfO0th+ZwM3U1nyidTHYQe ts5csOv0OvhL7FvvoiMY0VIFM9iNj9wSBPAJxX22qlZ9kkM/k+SEAhgyabBNBXDC fvixCZaYQnghrYPCeHVHO8WRvhr5TmRRb/BZF/hbn6YTfiTjhOwmVeh25+ihNmBo RkoVZbnnSLRW3QNLNIHgrxYDozxytH+N3ReN5m0xzg07yGiCmSIzurH2NNm5byy1 8LuaXKbVyxbGTX5UHSbMybWWFJg4Qvbl9jyNd3gPjKQ1UHneTgkwARzlzwNS0TXY xti+u3Lwvb8RD2jNuL9TgYeSr+7q+aOeN3EfSSIuXOJvQyRP+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8bttdrNtsFfDfZ/TBYBqLjsE+2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODQ5N2RiZmUtNjA3OC0z MmY0LTljMTgtYjg0YzE1MzNjOGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0QI4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILom5dZk3VFVGylvQNXNl87WRheURREyesTNAGL7tHnVWsUJNzICnds pOZWuTNCOFn/tzCnELWRhoGnMuWNcjXjqfCnkDeHTwg7S/IlX1/G7zAL2KhLTbWC A3e3s9CjW8LOtoMo+7Gq9DQlY+bCBbVlQd1TOVaAMmQ/P8XCbosm5r7zBb8p4WD2 fkd/QwcNa++Tv1V+MvHEa+Qyw6OKT2xUtJke3GPeU6hpFPJrSC3kD0UG3QeXvgLs BrdQthZDh+ndy5TBS24UpJahnmag98gbeReSGO/NyW0jipDednjxZZT78645AXRU msLgSFhCpm6t5+94+Tta3P1hqy2xjuQ= -----END CERTIFICATE-----Generated at Sun Oct 19 18:34:28 2025 by rpki-client