$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0cf861e2-8e53-3780-9bf9-e068445ce518.roa File: 0cf861e2-8e53-3780-9bf9-e068445ce518.roa (raw, json) Hash identifier: s/R2BtjOy69k80MMw/kJsR9K3ZLiLJx+u1xmnb45yhk= Subject key identifier: EC:DB:64:57:B3:9C:B2:88:A6:9B:34:94:6A:FA:14:EB:7F:D8:EA:0E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BAEC7B9222FFEEB04D8012880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0cf861e2-8e53-3780-9bf9-e068445ce518.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 7029 IP address blocks: 216.96.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:b9:22:2f:fe:eb:04:d8:01:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=1af12303-add2-47f7-87f7-a52638f057ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:de:0f:17:d6:ee:12:59:17:83:f1:9f:18:a5: f1:97:ad:d8:d7:78:eb:b0:ed:3a:5c:40:37:87:6f: 11:57:d0:3c:2d:6b:d2:40:ce:94:5f:f6:65:5b:71: 5d:73:5a:13:44:41:c5:92:7d:99:e9:ad:6b:81:eb: 83:46:8d:d0:4c:6d:0e:27:83:8c:ea:41:3c:75:d3: 94:c6:84:5e:77:0e:a8:12:1f:38:7d:8d:1c:52:f4: ef:dd:d8:ed:34:7c:61:a8:61:50:61:f8:8f:98:9c: b3:be:59:b7:46:fe:6a:80:aa:4e:d2:7e:d6:a6:b7: a2:b9:9c:fb:5e:03:78:1a:2c:d9:c6:14:a9:54:f1: d9:87:06:37:a3:e4:b1:53:6c:12:55:60:15:f6:ff: d3:d1:ed:8a:d2:d7:b2:e5:cb:36:42:03:2a:ef:b4: a2:37:e7:3f:d4:61:b3:ed:8e:0a:23:01:ae:a4:04: 93:6e:54:bf:e4:b0:a0:b7:0d:39:4e:3a:ae:aa:99: 11:f0:e7:84:77:43:fa:08:0e:11:95:52:d3:ed:1c: 1f:3b:ce:50:ce:4e:1d:63:b7:b0:e0:e8:04:cc:f3: 4f:19:5b:3e:3a:a0:98:e0:65:2b:f2:7d:b7:50:58: e8:99:25:39:92:0e:64:52:d4:71:2f:32:18:37:07: b5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:DB:64:57:B3:9C:B2:88:A6:9B:34:94:6A:FA:14:EB:7F:D8:EA:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0cf861e2-8e53-3780-9bf9-e068445ce518.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.74.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ed:c8:c6:7b:94:10:9f:f7:07:b7:8e:c9:7d:ec:17:7b:28: e4:be:47:5e:00:1d:89:fc:62:42:5c:46:a8:75:51:fc:4c:47: 83:63:4d:3d:b1:a2:9e:3f:48:76:34:19:db:a9:fc:94:41:fb: 71:07:5c:19:34:75:7a:68:b3:6c:ae:63:b1:9f:3e:5d:17:02: 71:f0:38:ef:9c:18:89:de:6c:69:b0:09:34:1d:2a:28:b3:dd: 3b:3d:7e:0d:44:4b:6d:c9:9d:18:2d:9b:4e:6e:5a:42:3a:42: 57:d6:a1:20:d7:c5:b9:93:a3:a0:1a:7e:a9:72:04:44:21:83: a6:32:b0:cb:20:dd:39:11:25:53:06:57:d2:1f:33:1a:66:a8: c4:71:32:7a:c7:b8:89:03:b5:5f:a6:10:b9:db:82:d5:87:b5: ce:c1:a9:92:05:f5:38:70:54:ab:be:a2:27:b7:4b:2a:2f:39: 90:e5:e7:3f:4f:41:7c:0c:e5:0a:47:e4:9c:2d:cf:cc:af:34: 69:99:b9:ba:2c:24:60:2e:61:af:eb:c5:e1:d3:fb:5c:f8:4d: 1d:a3:01:a8:2a:0a:f9:6b:b7:0a:44:e2:aa:64:d2:2b:35:f3: f3:81:9a:db:11:a9:bb:20:80:6f:c9:12:3a:3c:8b:db:b9:50: 57:d4:a1:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux7kiL/7rBNgBKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk MWFmMTIzMDMtYWRkMi00N2Y3LTg3ZjctYTUyNjM4ZjA1N2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN4PF9buElkXg/GfGKXxl63Y13jrsO06XEA3 h28RV9A8LWvSQM6UX/ZlW3Fdc1oTREHFkn2Z6a1rgeuDRo3QTG0OJ4OM6kE8ddOU xoRedw6oEh84fY0cUvTv3djtNHxhqGFQYfiPmJyzvlm3Rv5qgKpO0n7WpreiuZz7 XgN4GizZxhSpVPHZhwY3o+SxU2wSVWAV9v/T0e2K0tey5cs2QgMq77SiN+c/1GGz 7Y4KIwGupASTblS/5LCgtw05TjquqpkR8OeEd0P6CA4RlVLT7RwfO85Qzk4dY7ew 4OgEzPNPGVs+OqCY4GUr8n23UFjomSU5kg5kUtRxLzIYNwe1JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzbZFeznLKIpps0lGr6FOt/2OoOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGNmODYxZTItOGU1My0z NzgwLTliZjktZTA2ODQ0NWNlNTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2GBKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDtyMZ7lBCf9we3jsl97Bd7KOS+R14AHYn8YkJcRqh1UfxMR4NjTT2x op4/SHY0Gdup/JRB+3EHXBk0dXpos2yuY7GfPl0XAnHwOO+cGInebGmwCTQdKiiz 3Ts9fg1ES23JnRgtm05uWkI6QlfWoSDXxbmTo6AafqlyBEQhg6YysMsg3TkRJVMG V9IfMxpmqMRxMnrHuIkDtV+mELnbgtWHtc7BqZIF9ThwVKu+oie3SyovOZDl5z9P QXwM5QpH5Jwtz8yvNGmZubosJGAuYa/rxeHT+1z4TR2jAagqCvlrtwpE4qpk0is1 8/OBmtsRqbsggG/JEjo8i9u5UFfUoT4= -----END CERTIFICATE-----Generated at Tue Nov 4 17:02:18 2025 by rpki-client