$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fc6af601-cbd4-3e7c-b30a-0764ba294872.roa File: fc6af601-cbd4-3e7c-b30a-0764ba294872.roa (raw, json) Hash identifier: 6ybpH5fVWMlsRQ0LCA4pkGRraYwcgD0z/yVhSpDOpNE= Subject key identifier: F9:5D:4D:EC:C1:CA:34:24:10:E4:C0:47:36:34:1A:29:E6:D8:8C:5D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B88811685B2E5B6DA2F7B3C5C Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fc6af601-cbd4-3e7c-b30a-0764ba294872.roa Signing time: Wed 15 Oct 2025 19:57:44 +0000 ROA not before: Wed 15 Oct 2025 19:57:44 +0000 ROA not after: Tue 13 Jan 2026 20:57:44 +0000 asID: 7029 IP address blocks: 209.2.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:88:81:16:85:b2:e5:b6:da:2f:7b:3c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 15 19:57:44 2025 GMT Not After : Jan 13 20:57:44 2026 GMT Subject: CN=0d2d6530-b404-47c6-af78-bf7aafd3a7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:db:52:36:fe:3f:b0:dd:46:26:40:29:fe:24: 6c:b8:3a:8a:7d:2d:7f:60:e9:0d:c7:0d:39:a7:2d: 51:bc:19:32:e7:f7:8a:df:5b:2d:c8:01:fb:d9:af: 1d:1c:31:c4:60:87:9b:7e:19:f1:56:6e:26:a7:4e: d5:c3:71:30:f1:e5:f9:0b:c3:9c:a4:aa:19:35:de: 31:b5:7e:b5:08:fd:13:67:60:2e:cb:6a:d3:37:e2: 2d:7f:6c:fd:49:9f:5d:12:54:77:56:e9:e1:5e:f6: 11:19:71:15:ca:94:9f:44:e1:64:da:06:c8:43:46: ae:b0:ed:1e:04:b4:f0:ae:68:ae:a5:f9:b9:1b:8f: f2:2e:6f:93:e3:8e:a5:ea:76:f1:b8:ec:ed:23:fc: 45:16:ae:9f:81:fc:e2:c8:0d:26:df:43:4f:98:65: 9d:bc:72:93:4c:0d:cb:46:b5:3c:57:91:5b:f2:9e: 55:69:f8:84:87:31:17:f6:ca:3a:9b:d8:1a:0e:32: bf:1d:2d:b1:6f:da:2a:63:32:38:1c:c4:f4:fc:0a: 18:d4:53:d5:2e:bf:8e:d8:6e:0d:62:f6:3b:14:bd: 53:00:76:17:89:0b:58:59:32:58:20:98:44:77:96: 76:bc:5e:06:5e:1a:8b:eb:b5:5f:8e:6c:fa:7b:66: ec:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:5D:4D:EC:C1:CA:34:24:10:E4:C0:47:36:34:1A:29:E6:D8:8C:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fc6af601-cbd4-3e7c-b30a-0764ba294872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:05:56:a9:6d:43:83:7c:37:0d:a0:ba:e9:5d:5a:c3:7e:3f: 23:fe:ef:51:dd:72:2b:0e:78:e1:12:57:12:14:c6:41:46:e2: f5:67:63:0f:12:36:de:d7:05:b3:c5:28:72:a0:42:47:29:dd: 02:69:32:d3:9d:a6:93:3b:8e:b1:38:e5:04:68:d9:01:56:60: f4:05:18:2b:9a:ef:9b:6c:62:8a:d9:10:a2:8e:5c:70:77:01: 49:94:c3:9b:80:d4:31:d7:44:6a:cd:56:2a:9c:de:0d:e7:de: 02:c7:96:76:1d:8e:e6:ba:a1:15:14:29:3a:a6:15:ab:2a:ed: 46:0c:cd:b7:1f:ce:f2:f6:ca:b3:ed:03:a5:bf:91:37:e7:b9: c0:b8:82:7c:4b:b3:eb:59:3a:0d:d2:0b:04:f9:34:cb:ef:84: c4:71:06:1a:8f:3c:b9:4b:fb:b0:18:4d:0d:dd:1c:05:34:20: 47:5d:16:c0:82:56:e6:ca:8e:da:ec:01:05:59:9b:bd:a8:79: 63:58:0c:6c:d5:37:d8:88:36:2c:4e:91:2b:23:f2:61:ae:31: 29:b2:e3:28:bb:50:04:db:e7:16:cd:bc:85:0e:62:7d:ba:80: a4:a4:e1:eb:d8:fb:08:6d:b5:f0:82:81:00:54:a6:76:e7:f3: 9b:ec:67:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuIgRaFsuW22i97PFwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxNTE5NTc0NFoXDTI2MDExMzIwNTc0NFowLzEtMCsGA1UEAxMk MGQyZDY1MzAtYjQwNC00N2M2LWFmNzgtYmY3YWFmZDNhN2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNtSNv4/sN1GJkAp/iRsuDqKfS1/YOkNxw05 py1RvBky5/eK31styAH72a8dHDHEYIebfhnxVm4mp07Vw3Ew8eX5C8OcpKoZNd4x tX61CP0TZ2Auy2rTN+Itf2z9SZ9dElR3VunhXvYRGXEVypSfROFk2gbIQ0ausO0e BLTwrmiupfm5G4/yLm+T446l6nbxuOztI/xFFq6fgfziyA0m30NPmGWdvHKTTA3L RrU8V5Fb8p5VafiEhzEX9so6m9gaDjK/HS2xb9oqYzI4HMT0/AoY1FPVLr+O2G4N YvY7FL1TAHYXiQtYWTJYIJhEd5Z2vF4GXhqL67Vfjmz6e2bstwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPldTezByjQkEOTARzY0Ginm2IxdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmM2YWY2MDEtY2JkNC0z ZTdjLWIzMGEtMDc2NGJhMjk0ODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0QIsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAFVqltQ4N8Nw2guuldWsN+PyP+71HdcisOeOESVxIUxkFG4vVnYw8S Nt7XBbPFKHKgQkcp3QJpMtOdppM7jrE45QRo2QFWYPQFGCua75tsYorZEKKOXHB3 AUmUw5uA1DHXRGrNViqc3g3n3gLHlnYdjua6oRUUKTqmFasq7UYMzbcfzvL2yrPt A6W/kTfnucC4gnxLs+tZOg3SCwT5NMvvhMRxBhqPPLlL+7AYTQ3dHAU0IEddFsCC VubKjtrsAQVZm72oeWNYDGzVN9iINixOkSsj8mGuMSmy4yi7UATb5xbNvIUOYn26 gKSk4evY+whttfCCgQBUpnbn85vsZ7k= -----END CERTIFICATE-----Generated at Sun Oct 19 18:34:30 2025 by rpki-client