$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b42f7567-8eaa-3310-82f0-c49a4b66f0f3.roa File: b42f7567-8eaa-3310-82f0-c49a4b66f0f3.roa (raw, json) Hash identifier: gcct7bpvUUnsfBLLJZZJyqgnfCVbUAzv0sDwLvIlnoI= Subject key identifier: A1:E9:09:FC:90:FE:DF:3C:F6:80:F4:DE:C2:C2:F0:11:3A:1D:56:1D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B8882D6B708D1728940AD7460 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b42f7567-8eaa-3310-82f0-c49a4b66f0f3.roa Signing time: Wed 15 Oct 2025 20:01:16 +0000 ROA not before: Wed 15 Oct 2025 20:01:16 +0000 ROA not after: Tue 13 Jan 2026 21:01:16 +0000 asID: 7029 IP address blocks: 209.2.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:88:82:d6:b7:08:d1:72:89:40:ad:74:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 15 20:01:16 2025 GMT Not After : Jan 13 21:01:16 2026 GMT Subject: CN=9b432427-7675-4fc3-9ab0-4907f8fbeec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0a:5f:44:9c:70:16:52:58:ad:09:9c:77:85: a8:a0:2b:b0:ba:7e:b3:2c:26:85:a5:2d:0e:bb:e1: 42:bf:f7:ce:24:04:79:6b:95:2a:58:08:4d:54:56: 9e:4f:65:e6:1e:1c:f4:e4:d0:7c:b8:0b:9a:9b:33: 53:aa:b5:d0:16:3a:c1:eb:2c:b6:90:20:3c:49:38: 67:51:b2:7f:d6:21:8d:17:83:92:98:6b:9e:1a:d1: b0:59:5f:36:bd:a5:6f:6c:40:71:16:a6:a6:d6:d0: b7:06:ea:ab:86:64:f4:99:f6:00:11:4d:73:bf:00: 74:83:ed:ad:8f:e1:78:19:ab:e1:36:59:9a:ef:4a: da:78:f9:8c:6c:6b:49:d8:7b:02:de:a9:de:33:fd: 66:bd:2f:59:ae:48:79:05:89:1b:d5:0d:bd:46:d6: 61:fb:03:ae:72:ed:82:d6:c4:a2:d6:ab:f5:08:24: 33:91:d4:46:d7:03:b6:01:5c:44:25:08:e6:7d:2d: 98:af:01:fb:6b:ac:31:55:12:d6:33:b4:e2:87:8a: b1:e3:38:ac:26:3b:56:ec:67:e8:e6:51:e6:ff:42: 82:93:4f:a5:ce:c6:99:00:9a:ce:4b:8a:0a:8b:0e: ef:57:eb:3e:49:f5:a3:49:17:18:22:e9:c9:60:42: 11:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E9:09:FC:90:FE:DF:3C:F6:80:F4:DE:C2:C2:F0:11:3A:1D:56:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b42f7567-8eaa-3310-82f0-c49a4b66f0f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:8c:a8:d0:d2:be:ae:9f:0e:40:d8:7f:24:0f:2b:d3:4b:24: b3:99:69:79:71:48:e3:f7:52:7f:a8:2b:73:27:d8:0f:c5:53: 34:85:ab:26:d1:db:ac:68:cc:fb:86:87:58:9f:df:43:e1:61: 69:c7:de:42:2a:d1:dc:b5:c4:86:05:f3:a3:99:f2:47:6c:3e: 30:96:c3:70:47:03:aa:10:60:d7:47:e1:17:9a:a2:13:82:68: 06:b0:9d:de:15:c7:d3:37:68:ad:d1:71:ed:25:73:92:92:58: 5e:00:00:84:34:5d:4c:54:08:70:c1:4e:bf:a5:0b:b4:ad:1f: 8e:26:9d:a8:c6:49:9a:5c:ac:bb:5b:80:9f:c9:2a:6d:25:8b: 10:c9:dc:a7:11:b4:bd:50:70:ae:8e:69:35:65:e7:3a:42:c6: 04:bd:30:94:1e:60:71:23:26:39:cb:dd:6a:24:87:9f:aa:bd: 93:45:f2:ac:66:99:e5:7e:be:59:10:68:ba:99:31:24:00:d6: a9:81:a3:83:c3:69:08:9f:55:3d:62:5a:56:00:93:8e:cc:e1: 18:71:6a:87:17:55:cc:12:7b:b0:32:98:f7:f8:cf:ff:f4:9f: 7f:db:eb:df:3b:33:5b:eb:2f:92:ae:35:29:bb:04:78:55:b3: aa:1a:0b:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuIgta3CNFyiUCtdGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxNTIwMDExNloXDTI2MDExMzIxMDExNlowLzEtMCsGA1UEAxMk OWI0MzI0MjctNzY3NS00ZmMzLTlhYjAtNDkwN2Y4ZmJlZWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwpfRJxwFlJYrQmcd4WooCuwun6zLCaFpS0O u+FCv/fOJAR5a5UqWAhNVFaeT2XmHhz05NB8uAuamzNTqrXQFjrB6yy2kCA8SThn UbJ/1iGNF4OSmGueGtGwWV82vaVvbEBxFqam1tC3BuqrhmT0mfYAEU1zvwB0g+2t j+F4GavhNlma70raePmMbGtJ2HsC3qneM/1mvS9Zrkh5BYkb1Q29RtZh+wOucu2C 1sSi1qv1CCQzkdRG1wO2AVxEJQjmfS2YrwH7a6wxVRLWM7Tih4qx4zisJjtW7Gfo 5lHm/0KCk0+lzsaZAJrOS4oKiw7vV+s+SfWjSRcYIunJYEIRVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHpCfyQ/t889oD03sLC8BE6HVYdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjQyZjc1NjctOGVhYS0z MzEwLTgyZjAtYzQ5YTRiNjZmMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0QK8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuMqNDSvq6fDkDYfyQPK9NLJLOZaXlxSOP3Un+oK3Mn2A/FUzSFqybR 26xozPuGh1if30PhYWnH3kIq0dy1xIYF86OZ8kdsPjCWw3BHA6oQYNdH4ReaohOC aAawnd4Vx9M3aK3Rce0lc5KSWF4AAIQ0XUxUCHDBTr+lC7StH44mnajGSZpcrLtb gJ/JKm0lixDJ3KcRtL1QcK6OaTVl5zpCxgS9MJQeYHEjJjnL3Wokh5+qvZNF8qxm meV+vlkQaLqZMSQA1qmBo4PDaQifVT1iWlYAk47M4RhxaocXVcwSe7AymPf4z//0 n3/b6987M1vrL5KuNSm7BHhVs6oaC3M= -----END CERTIFICATE-----Generated at Sun Oct 19 18:34:31 2025 by rpki-client