$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6cb49ca-84d1-32e7-be52-b7eb8af4494d.roa File: d6cb49ca-84d1-32e7-be52-b7eb8af4494d.roa (raw, json) Hash identifier: GOiRtcQb0+UMxPPStfNkNrwuLgJKj+a4gZC1IMkaRPA= Subject key identifier: EF:11:2E:9F:16:74:9B:F3:F6:D7:3D:5D:A7:4F:23:6C:48:30:80:6E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B8884020CD1BD738D386B9480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6cb49ca-84d1-32e7-be52-b7eb8af4494d.roa Signing time: Wed 15 Oct 2025 20:03:37 +0000 ROA not before: Wed 15 Oct 2025 20:03:37 +0000 ROA not after: Tue 13 Jan 2026 21:03:37 +0000 asID: 7029 IP address blocks: 207.10.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:88:84:02:0c:d1:bd:73:8d:38:6b:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 15 20:03:37 2025 GMT Not After : Jan 13 21:03:37 2026 GMT Subject: CN=a8a08708-a118-44e1-bd90-7abdc9d97242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f4:f0:68:0c:27:2d:63:d7:0f:4d:b2:c6:87: 70:97:d8:57:5c:a6:89:1d:1f:07:f2:a3:72:69:d6: 95:7e:e1:30:73:54:d0:84:ec:ba:f9:de:0d:87:0b: 1f:86:7e:19:82:bf:2c:74:db:6f:47:42:52:2b:80: fa:e4:21:a9:7e:4b:6f:c2:0b:71:ed:33:88:2d:ab: a5:c4:35:68:fd:19:32:50:fa:d8:31:53:4d:27:f4: c9:76:d2:62:47:42:44:a9:ea:ff:66:38:f1:17:1a: 22:87:9e:17:1a:11:ea:0b:6c:00:61:de:46:e0:47: 31:f6:0b:03:38:35:b6:f9:a7:a3:5a:1c:ec:1e:06: fb:9f:33:6c:1b:4f:7b:60:c3:e6:ed:31:aa:02:a7: be:46:84:2c:67:ba:2f:ac:89:87:6d:55:37:07:1e: 84:46:76:37:05:01:34:ec:51:b6:ec:78:67:26:0e: 5f:71:25:84:27:65:05:da:8d:df:ba:95:4c:c2:a1: 12:ac:44:c5:ca:82:50:53:41:31:e5:1e:ae:d0:78: 2a:62:13:7c:bc:5f:0c:4f:44:49:4a:97:1a:ec:d7: 7b:f7:04:a9:84:81:d9:bc:56:96:b6:cd:ea:4c:4a: 1f:ad:15:43:19:76:7d:aa:0c:44:7c:ad:fa:54:94: 17:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:11:2E:9F:16:74:9B:F3:F6:D7:3D:5D:A7:4F:23:6C:48:30:80:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6cb49ca-84d1-32e7-be52-b7eb8af4494d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.10.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:69:4a:bc:a3:cf:af:05:cc:d7:d8:5f:ce:30:4b:a1:b2:c8: 8c:48:43:1c:8e:00:7c:fd:f8:e4:d5:f4:5d:b2:2a:c5:be:5d: a9:b7:92:a8:cd:b9:e4:9b:84:38:1f:06:76:34:19:c0:a4:84: 91:90:c2:5d:05:9c:0f:b6:cb:51:d5:07:16:db:20:e8:6b:af: 44:29:8b:c1:b6:4f:24:2e:11:5c:af:fd:f2:94:df:fa:94:c6: 5f:c1:d5:12:33:0c:b7:0d:08:59:01:f1:6d:7a:f2:da:47:34: 9f:c2:38:06:cc:18:83:02:8c:50:22:9a:bf:91:8f:50:c7:dc: 27:cb:df:2f:40:c3:40:2b:48:5e:33:59:ca:7e:b5:6a:2e:7e: 4a:8c:af:18:a6:4c:bc:25:35:f2:b6:54:87:46:5a:82:0a:b2: c0:83:9d:e1:fc:82:5d:69:6a:b5:1d:7f:8a:62:b9:57:ef:e6: 6c:d7:d7:19:95:b2:48:e7:cb:ed:60:24:97:ea:d6:60:31:16: 97:83:7e:e5:9b:25:f3:c5:bf:82:62:f0:71:77:69:52:c7:31: e2:69:03:1c:84:03:a3:cd:0b:2f:4a:95:c7:6b:b0:2c:c4:d8: 8f:28:e4:56:0e:c1:a0:8f:1d:e6:2c:54:be:6a:c7:a8:59:70: a7:74:49:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuIhAIM0b1zjThrlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxNTIwMDMzN1oXDTI2MDExMzIxMDMzN1owLzEtMCsGA1UEAxMk YThhMDg3MDgtYTExOC00NGUxLWJkOTAtN2FiZGM5ZDk3MjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/TwaAwnLWPXD02yxodwl9hXXKaJHR8H8qNy adaVfuEwc1TQhOy6+d4Nhwsfhn4Zgr8sdNtvR0JSK4D65CGpfktvwgtx7TOILaul xDVo/RkyUPrYMVNNJ/TJdtJiR0JEqer/ZjjxFxoih54XGhHqC2wAYd5G4Ecx9gsD ODW2+aejWhzsHgb7nzNsG097YMPm7TGqAqe+RoQsZ7ovrImHbVU3Bx6ERnY3BQE0 7FG27HhnJg5fcSWEJ2UF2o3fupVMwqESrETFyoJQU0Ex5R6u0HgqYhN8vF8MT0RJ Spca7Nd79wSphIHZvFaWts3qTEofrRVDGXZ9qgxEfK36VJQXiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8RLp8WdJvz9tc9XadPI2xIMIBuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDZjYjQ5Y2EtODRkMS0z MmU3LWJlNTItYjdlYjhhZjQ0OTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzwqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhpSryjz68FzNfYX84wS6GyyIxIQxyOAHz9+OTV9F2yKsW+Xam3kqjN ueSbhDgfBnY0GcCkhJGQwl0FnA+2y1HVBxbbIOhrr0Qpi8G2TyQuEVyv/fKU3/qU xl/B1RIzDLcNCFkB8W168tpHNJ/COAbMGIMCjFAimr+Rj1DH3CfL3y9Aw0ArSF4z Wcp+tWoufkqMrximTLwlNfK2VIdGWoIKssCDneH8gl1parUdf4piuVfv5mzX1xmV skjny+1gJJfq1mAxFpeDfuWbJfPFv4Ji8HF3aVLHMeJpAxyEA6PNCy9KlcdrsCzE 2I8o5FYOwaCPHeYsVL5qx6hZcKd0SRM= -----END CERTIFICATE-----Generated at Sun Oct 19 18:34:29 2025 by rpki-client