$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08172ed3-61c1-37a1-afaa-2c5a924b909f.roa File: 08172ed3-61c1-37a1-afaa-2c5a924b909f.roa (raw, json) Hash identifier: x+SA9C9JmgBJUpGmvGbjwiWcAGbrmtB0T8LkOJc4AVc= Subject key identifier: 5C:FE:F2:A2:06:0E:75:B1:34:44:25:FB:8A:69:B5:59:EE:99:8A:F5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B95A87DC0E6A9E7B4FD71A6C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08172ed3-61c1-37a1-afaa-2c5a924b909f.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7029 IP address blocks: 64.24.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:7d:c0:e6:a9:e7:b4:fd:71:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=4a6e96c7-3710-46a5-b0fa-b5c0f5a8a14b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:93:17:33:42:6a:eb:f4:53:b6:6c:2e:bb:61: 02:62:48:db:61:59:5b:bb:10:2e:de:8c:aa:1d:b9: 01:d8:d9:7a:8a:03:27:07:a8:db:87:af:8e:ac:03: 8c:bb:32:44:22:f0:6f:90:26:77:00:c1:5b:f4:08: 9c:0c:ff:99:85:90:13:0f:5c:74:c7:2a:db:fb:39: df:76:14:3f:4e:1a:1c:4c:57:70:b8:46:9f:7f:74: 9c:1e:6f:a8:75:96:f9:50:45:68:f8:30:ee:c3:96: b6:79:5d:5b:41:c5:e1:d4:78:95:fc:e2:75:97:b2: d0:03:7a:b0:3a:64:c6:06:55:44:9a:4c:e9:9a:32: b0:78:a3:c7:9e:49:f0:0b:de:53:6b:ba:c0:c2:d8: 19:b1:9a:a1:d7:c0:2b:6f:4d:3f:14:f7:59:08:b6: 1f:b7:f3:3c:ea:1f:da:66:8a:e3:1d:5f:ee:07:ec: e4:11:76:8a:db:6b:6e:47:96:ac:fb:b4:6d:1d:08: 54:d1:dc:25:e6:a8:35:50:fe:16:f6:90:c9:6c:f4: 7d:14:7c:52:19:f3:5f:82:b8:83:a4:73:e8:1f:c3: 90:7f:d2:3c:5a:30:db:cc:46:06:27:ab:e9:07:d6: 50:f5:53:d8:b6:3f:9e:2e:b3:fd:95:11:bf:c5:09: c3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FE:F2:A2:06:0E:75:B1:34:44:25:FB:8A:69:B5:59:EE:99:8A:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08172ed3-61c1-37a1-afaa-2c5a924b909f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.24.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:7a:a3:8d:42:b6:6a:8f:d3:32:d1:5c:87:44:0e:eb:1c:81: 95:e3:92:2e:28:93:ea:a3:cf:50:77:cd:c6:23:fe:a1:03:f8: 9f:42:a0:c5:fb:6a:1b:d6:18:7e:8a:f8:83:16:4f:98:60:37: c7:3e:8f:46:5e:b3:ef:f2:23:4c:4b:b4:16:b2:88:33:52:54: 07:53:ce:67:99:34:66:38:ae:38:58:82:80:9e:72:95:82:91: 93:2e:cc:6e:af:a3:46:5d:a1:e7:77:09:31:81:13:fa:a4:27: ba:9d:bc:58:d8:90:80:e3:37:cf:e0:54:24:32:c9:0a:c0:4e: 40:33:cf:ef:3b:27:6f:89:54:f1:f9:89:83:f4:26:2d:1b:19: 09:a7:26:ca:1a:80:1c:71:97:db:a6:af:35:f9:87:d8:b9:db: e7:6f:a4:b5:37:c8:3e:b1:c9:c3:f4:6b:db:4d:fc:9f:59:17: 41:9d:d5:66:d0:0c:06:54:ed:89:5b:1b:c4:84:c2:5a:b1:6a: f0:d6:17:2b:aa:be:0d:36:95:e7:f6:8e:00:cf:76:40:58:1c: 5e:ec:b9:23:a4:08:fc:b3:da:37:8d:59:af:aa:c1:73:6b:31: 96:a3:c7:ca:20:bc:b7:c9:a5:9c:2c:b9:72:8f:ca:8a:e2:cb: dc:13:e9:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqH3A5qnntP1xpsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NGE2ZTk2YzctMzcxMC00NmE1LWIwZmEtYjVjMGY1YThhMTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJMXM0Jq6/RTtmwuu2ECYkjbYVlbuxAu3oyq HbkB2Nl6igMnB6jbh6+OrAOMuzJEIvBvkCZ3AMFb9AicDP+ZhZATD1x0xyrb+znf dhQ/ThocTFdwuEaff3ScHm+odZb5UEVo+DDuw5a2eV1bQcXh1HiV/OJ1l7LQA3qw OmTGBlVEmkzpmjKweKPHnknwC95Ta7rAwtgZsZqh18Arb00/FPdZCLYft/M86h/a ZorjHV/uB+zkEXaK22tuR5as+7RtHQhU0dwl5qg1UP4W9pDJbPR9FHxSGfNfgriD pHPoH8OQf9I8WjDbzEYGJ6vpB9ZQ9VPYtj+eLrP9lRG/xQnD1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFz+8qIGDnWxNEQl+4pptVnumYr1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDgxNzJlZDMtNjFjMS0z N2ExLWFmYWEtMmM1YTkyNGI5MDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQBiEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHh6o41CtmqP0zLRXIdEDuscgZXjki4ok+qjz1B3zcYj/qED+J9CoMX7 ahvWGH6K+IMWT5hgN8c+j0Zes+/yI0xLtBayiDNSVAdTzmeZNGY4rjhYgoCecpWC kZMuzG6vo0Zdoed3CTGBE/qkJ7qdvFjYkIDjN8/gVCQyyQrATkAzz+87J2+JVPH5 iYP0Ji0bGQmnJsoagBxxl9umrzX5h9i52+dvpLU3yD6xycP0a9tN/J9ZF0Gd1WbQ DAZU7YlbG8SEwlqxavDWFyuqvg02lef2jgDPdkBYHF7suSOkCPyz2jeNWa+qwXNr MZajx8ogvLfJpZwsuXKPyoriy9wT6Qo= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:46 2025 by rpki-client