$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c85b536-e8b5-3a6b-95b1-8fa3f16831bf.roa File: 0c85b536-e8b5-3a6b-95b1-8fa3f16831bf.roa (raw, json) Hash identifier: 0z8bocQ6k+/DFBICmtf/fm9HJQv449h6yqE5AEK7AJw= Subject key identifier: 6C:B3:11:7A:13:1E:A7:9E:26:AE:65:44:B5:7B:96:E8:50:44:EB:EF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE4054572E0B4C797E076F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c85b536-e8b5-3a6b-95b1-8fa3f16831bf.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 72.16.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:54:57:2e:0b:4c:79:7e:07:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=1d69a21d-2e7e-435b-9600-1299e81c3193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:03:b4:6b:a6:d4:e3:ec:7b:47:85:3f:f4:41: 60:72:6b:7a:c4:05:24:84:54:b0:e5:56:5d:d1:fa: 0d:d7:85:87:0a:65:97:8d:e9:68:32:4e:50:c4:47: fe:09:55:3c:12:43:95:cd:cc:3e:f9:93:f5:4b:68: 1a:de:06:a8:42:26:7c:63:9b:80:92:f3:9d:da:b0: ce:98:ae:d1:49:c5:62:27:31:5f:58:9a:0c:d6:45: 40:cb:9d:2a:2e:49:ec:61:36:c8:43:17:b5:17:7f: 1e:51:aa:f2:64:54:58:e4:2b:b5:8b:29:7b:0d:1f: 6c:32:87:e9:f1:45:4a:c2:a1:63:eb:c4:62:f9:be: 95:98:6d:4a:43:ea:da:19:1f:6c:84:39:6f:d0:4a: 20:44:b8:cb:9f:6b:e5:36:fd:b4:5e:9e:da:fa:ce: 8c:24:65:d4:53:47:2e:7e:f7:f7:a9:dd:8f:c3:78: e8:64:a1:4e:a7:58:38:a5:4c:51:04:72:0f:dc:19: 94:eb:49:a7:22:24:16:a1:58:f9:68:a1:e5:e0:94: 72:46:c5:85:12:10:a7:e9:a7:d7:9f:e0:7e:3b:27: 9e:5e:cb:f3:e1:02:cf:e3:9d:e8:70:7e:46:09:6d: 29:50:ad:ed:86:47:3e:d2:e4:85:7a:bb:fe:d9:86: 75:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B3:11:7A:13:1E:A7:9E:26:AE:65:44:B5:7B:96:E8:50:44:EB:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c85b536-e8b5-3a6b-95b1-8fa3f16831bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:d7:88:97:81:29:cc:a9:06:47:97:9e:9f:88:b7:cc:d1:16: b1:21:09:88:3d:3c:8e:3c:de:37:74:95:07:05:7b:29:b5:9b: b9:37:47:1d:36:7a:6b:bf:cf:c7:07:95:d6:b0:37:d0:b8:b0: e2:cc:3a:c4:fc:75:81:90:93:56:e8:03:88:14:d0:e8:1f:d6: 00:d4:27:8c:4c:2a:7f:c4:65:b3:ff:95:2d:c2:d5:1e:ee:84: e4:14:e1:e5:87:32:47:aa:34:d4:56:1e:a6:4c:ce:f2:9d:4b: e2:67:85:c6:95:d9:e8:9c:ae:7a:eb:ec:da:b7:3e:f6:fb:fa: 6f:83:17:93:1e:53:ca:ba:2b:e0:88:82:a4:c7:58:75:8b:70: 2f:6c:14:91:eb:6a:ef:97:cd:a2:2b:02:4b:e0:df:12:a8:6a: 26:6f:68:a9:8c:71:c3:84:bd:3f:97:9e:f0:67:43:2a:e5:a0: cb:b7:63:12:2a:b0:4e:1d:10:05:e3:dd:2a:de:78:92:93:bb: cc:93:96:9d:a4:e9:89:b5:fe:40:61:fa:e9:11:b7:17:42:1d: b4:c8:9e:2e:b2:cc:95:4f:bd:1f:4b:6d:64:fb:35:dc:e5:a9: 0f:7b:d9:62:17:6e:83:c7:b0:c1:dc:67:a7:34:13:10:66:04: b3:69:47:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFRXLgtMeX4HbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk MWQ2OWEyMWQtMmU3ZS00MzViLTk2MDAtMTI5OWU4MWMzMTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AO0a6bU4+x7R4U/9EFgcmt6xAUkhFSw5VZd 0foN14WHCmWXjeloMk5QxEf+CVU8EkOVzcw++ZP1S2ga3gaoQiZ8Y5uAkvOd2rDO mK7RScViJzFfWJoM1kVAy50qLknsYTbIQxe1F38eUaryZFRY5Cu1iyl7DR9sMofp 8UVKwqFj68Ri+b6VmG1KQ+raGR9shDlv0EogRLjLn2vlNv20Xp7a+s6MJGXUU0cu fvf3qd2Pw3joZKFOp1g4pUxRBHIP3BmU60mnIiQWoVj5aKHl4JRyRsWFEhCn6afX n+B+OyeeXsvz4QLP453ocH5GCW0pUK3thkc+0uSFerv+2YZ1pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyzEXoTHqeeJq5lRLV7luhQROvvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGM4NWI1MzYtZThiNS0z YTZiLTk1YjEtOGZhM2YxNjgzMWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSBAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnXiJeBKcypBkeXnp+It8zRFrEhCYg9PI483jd0lQcFeym1m7k3Rx02 emu/z8cHldawN9C4sOLMOsT8dYGQk1boA4gU0Ogf1gDUJ4xMKn/EZbP/lS3C1R7u hOQU4eWHMkeqNNRWHqZMzvKdS+JnhcaV2eicrnrr7Nq3Pvb7+m+DF5MeU8q6K+CI gqTHWHWLcC9sFJHrau+XzaIrAkvg3xKoaiZvaKmMccOEvT+XnvBnQyrloMu3YxIq sE4dEAXj3SreeJKTu8yTlp2k6Ym1/kBh+ukRtxdCHbTIni6yzJVPvR9LbWT7Ndzl qQ972WIXboPHsMHcZ6c0ExBmBLNpRzg= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:20 2025 by rpki-client