$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08f9e3af-a77c-300b-90ce-7f032359dcfa.roa File: 08f9e3af-a77c-300b-90ce-7f032359dcfa.roa (raw, json) Hash identifier: 8jrbk5m9M7pOpiNWvWx9VBglq5cRsI86vKyCGwuF0NQ= Subject key identifier: 4A:37:C0:BA:E0:1B:97:AD:BC:44:AC:AF:09:38:61:D5:64:BE:13:20 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2CA90C6A64A651F15B7880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08f9e3af-a77c-300b-90ce-7f032359dcfa.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 151.213.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:a9:0c:6a:64:a6:51:f1:5b:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=4a4077d4-0ed8-457e-9173-4354929a4844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ed:eb:25:fa:fc:c4:2e:6d:16:df:4c:77:29: 68:5c:16:7f:f6:ad:44:40:19:34:19:65:04:34:c0: 2c:0d:3c:04:4a:3d:ed:9a:ab:f9:1c:38:0c:a0:56: ec:e5:11:13:72:ec:07:0a:3c:7b:b6:54:4e:03:32: c9:af:ec:d0:49:01:3b:b7:09:cb:36:88:47:e8:9e: 39:c2:db:18:32:d2:da:da:85:c1:2c:4b:39:be:26: 2b:95:15:90:f6:d3:e7:91:1a:10:31:bc:a4:9b:f6: 19:94:75:7a:d0:6a:3e:65:c6:44:00:e2:0e:ef:13: 97:3c:e8:67:5b:8c:d5:3c:58:a6:96:9d:d9:36:82: 70:c8:a4:ec:ab:7c:94:8f:cd:90:6f:b0:65:2b:d0: e0:30:91:61:e6:01:63:f4:c7:c5:00:b2:37:d8:26: 48:1e:74:42:a5:61:85:f6:67:ad:1b:fd:5f:91:70: b2:97:36:dd:55:cb:b5:6b:4e:07:dc:a1:f3:b7:d1: 61:30:9f:f3:29:3b:fb:af:fb:e4:64:92:bc:9b:66: 17:85:3a:9c:0c:d8:dc:7d:e7:18:98:6f:3f:79:96: 9a:9d:ef:ce:6f:0a:80:7f:3f:26:37:35:34:e1:46: 7b:2d:b2:b8:e2:dd:31:3e:d7:d7:46:02:bb:b6:95: f5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:37:C0:BA:E0:1B:97:AD:BC:44:AC:AF:09:38:61:D5:64:BE:13:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08f9e3af-a77c-300b-90ce-7f032359dcfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:80:1b:9a:d1:f2:bf:07:fc:27:be:eb:8f:42:67:5a:a2:18: 75:be:d0:24:43:c2:ad:1f:8b:6d:c5:8d:a5:9f:d3:c6:c7:1f: a2:e1:68:c5:85:23:5f:8f:d7:85:e0:3f:05:fd:4c:dc:17:4e: bb:7f:90:dd:8c:ef:ef:62:97:a8:ad:08:35:12:9c:3f:94:c4: 80:a9:59:a8:2e:c5:c1:b6:5f:18:42:c8:e9:cf:60:97:27:1c: 48:45:e5:0c:ba:0f:d1:63:d3:45:c5:ab:9b:b2:aa:2c:c1:26: 92:66:49:e0:12:19:19:77:69:a9:87:96:cc:43:0b:53:7e:a7: 94:bd:1d:98:fc:bf:ab:14:c9:28:e1:d1:f9:3f:72:f5:c1:44: 05:d4:87:ce:bf:40:c0:9a:45:81:ff:c4:f6:79:e2:f7:c2:5e: b4:fd:9d:70:1c:6a:2b:07:17:8a:cd:cb:26:ef:b4:9f:6a:44: cf:40:9a:1a:06:34:80:60:c6:f3:c7:f9:86:da:34:c0:82:65: cd:85:96:d4:4c:19:7d:bd:dc:c3:69:03:ff:8f:3a:c4:2e:48: 4e:a9:19:ce:ad:96:db:4b:fe:4e:33:c3:ba:08:ec:5b:70:e1: 1e:80:cb:42:3d:f4:fb:3a:2e:5f:56:8a:63:7f:06:b9:60:42: 84:bb:f0:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLKkMamSmUfFbeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NGE0MDc3ZDQtMGVkOC00NTdlLTkxNzMtNDM1NDkyOWE0ODQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne3rJfr8xC5tFt9MdyloXBZ/9q1EQBk0GWUE NMAsDTwESj3tmqv5HDgMoFbs5RETcuwHCjx7tlROAzLJr+zQSQE7twnLNohH6J45 wtsYMtLa2oXBLEs5viYrlRWQ9tPnkRoQMbykm/YZlHV60Go+ZcZEAOIO7xOXPOhn W4zVPFimlp3ZNoJwyKTsq3yUj82Qb7BlK9DgMJFh5gFj9MfFALI32CZIHnRCpWGF 9metG/1fkXCylzbdVcu1a04H3KHzt9FhMJ/zKTv7r/vkZJK8m2YXhTqcDNjcfecY mG8/eZaane/ObwqAfz8mNzU04UZ7LbK44t0xPtfXRgK7tpX1WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEo3wLrgG5etvESsrwk4YdVkvhMgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDhmOWUzYWYtYTc3Yy0z MDBiLTkwY2UtN2YwMzIzNTlkY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl9VYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmAG5rR8r8H/Ce+649CZ1qiGHW+0CRDwq0fi23FjaWf08bHH6LhaMWF I1+P14XgPwX9TNwXTrt/kN2M7+9il6itCDUSnD+UxICpWaguxcG2XxhCyOnPYJcn HEhF5Qy6D9Fj00XFq5uyqizBJpJmSeASGRl3aamHlsxDC1N+p5S9HZj8v6sUySjh 0fk/cvXBRAXUh86/QMCaRYH/xPZ54vfCXrT9nXAcaisHF4rNyybvtJ9qRM9AmhoG NIBgxvPH+YbaNMCCZc2FltRMGX293MNpA/+POsQuSE6pGc6tlttL/k4zw7oI7Ftw 4R6Ay0I99Ps6Ll9WimN/BrlgQoS78LQ= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:18 2025 by rpki-client