$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13acbb40-56ab-35fe-9d4b-139770943319.roa File: 13acbb40-56ab-35fe-9d4b-139770943319.roa (raw, json) Hash identifier: BL/18+p7Eh17CYWZwnLj9Wk/Lgnd3O85ITh8Z5Yp958= Subject key identifier: B1:95:66:8B:09:23:F7:76:B2:06:67:B3:B9:73:B2:17:7D:63:AD:9E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF41202F081EFE9BB9280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13acbb40-56ab-35fe-9d4b-139770943319.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 67.141.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f4:12:02:f0:81:ef:e9:bb:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=cfbb2eb0-3f76-4406-9846-c30ffca726f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d5:57:99:fe:ba:d9:8a:11:38:7f:3c:0d:28: e9:94:f3:3b:8a:50:51:df:f0:ad:b9:11:33:e7:8c: 69:77:df:42:77:ca:de:1e:1d:c5:0c:00:78:97:31: 16:aa:28:64:4d:9f:07:09:d0:8e:8a:b6:49:ee:3c: 9c:06:32:25:23:16:5b:83:87:33:3f:aa:ba:89:52: 70:4b:d9:dc:fc:7f:b3:8e:bf:be:60:b8:dd:cd:71: 1d:25:6a:6a:a9:8b:b7:57:89:2e:ef:fd:5d:f2:74: ba:1c:94:a8:64:df:e9:7a:28:3f:2a:be:54:00:a3: 59:46:ac:d0:be:0f:3e:16:e5:f9:fe:68:4e:c1:a7: 46:fa:43:ca:63:1c:71:67:92:81:e3:27:08:a2:87: 63:4a:0e:f5:fc:4e:b8:32:0e:8c:54:04:35:71:b0: b8:95:73:58:41:f3:b8:82:ed:3d:ee:03:e0:f8:e6: d6:1d:cc:b1:f9:6a:0e:80:0f:ca:e6:ef:db:9c:d4: 94:78:31:c8:b8:ca:94:e2:fd:ff:44:c7:d6:73:e7: 48:13:02:08:cd:82:db:fc:c0:14:9b:30:2c:95:e3: b9:8a:09:0d:be:9e:1f:8b:b2:f6:52:49:e5:74:a5: 0d:e8:d2:4d:2f:91:2a:81:50:25:3a:59:d2:65:2a: ee:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:95:66:8B:09:23:F7:76:B2:06:67:B3:B9:73:B2:17:7D:63:AD:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13acbb40-56ab-35fe-9d4b-139770943319.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:61:3d:cb:c9:ff:b7:df:f1:d0:fc:7f:f4:d2:44:68:4d:8e: 10:b6:a7:6e:ef:ad:39:3f:c7:82:b5:24:e3:e3:0c:6d:8f:ca: 46:7c:45:c8:42:b2:c4:1c:ab:e6:8f:52:b0:2e:64:a8:ed:c1: 79:68:e3:78:07:e9:f6:00:9c:97:c3:f9:60:99:06:fd:6f:d3: 53:6f:fd:c5:a2:9e:6b:b7:f2:0e:33:16:48:65:d5:9c:e2:10: 51:b5:bd:9a:5b:b0:c8:76:17:66:ca:1e:81:b1:c2:16:73:1e: 23:f4:4c:bc:09:97:ca:a4:f1:3c:48:d9:07:70:36:49:fd:aa: 99:dd:b5:ed:2c:93:b0:f4:ab:af:da:db:db:b2:e1:33:26:50: b0:3b:00:12:ae:cb:f7:f8:78:c2:2b:df:26:dd:18:ff:fb:67: d4:08:33:34:d7:7e:31:32:d9:19:45:ff:ab:e1:2c:bd:07:6f: db:90:7d:8e:85:4d:04:7e:97:46:e9:74:0d:aa:e9:9a:d7:1f: 62:06:b8:6e:b5:b9:e2:bc:c5:43:fe:49:ea:df:63:92:5c:d6: 05:59:b9:fc:a8:b8:f8:85:69:17:20:30:4f:b4:a3:7a:84:95: 89:ff:47:0c:4c:74:87:3b:d1:54:ff:6d:01:c5:57:64:9c:ce: 5e:24:b9:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPQSAvCB7+m7koAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk Y2ZiYjJlYjAtM2Y3Ni00NDA2LTk4NDYtYzMwZmZjYTcyNmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdVXmf662YoROH88DSjplPM7ilBR3/CtuREz 54xpd99Cd8reHh3FDAB4lzEWqihkTZ8HCdCOirZJ7jycBjIlIxZbg4czP6q6iVJw S9nc/H+zjr++YLjdzXEdJWpqqYu3V4ku7/1d8nS6HJSoZN/peig/Kr5UAKNZRqzQ vg8+FuX5/mhOwadG+kPKYxxxZ5KB4ycIoodjSg71/E64Mg6MVAQ1cbC4lXNYQfO4 gu097gPg+ObWHcyx+WoOgA/K5u/bnNSUeDHIuMqU4v3/RMfWc+dIEwIIzYLb/MAU mzAsleO5igkNvp4fi7L2UknldKUN6NJNL5EqgVAlOlnSZSruxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGVZosJI/d2sgZns7lzshd9Y62eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTNhY2JiNDAtNTZhYi0z NWZlLTlkNGItMTM5NzcwOTQzMzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ41AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxhPcvJ/7ff8dD8f/TSRGhNjhC2p27vrTk/x4K1JOPjDG2PykZ8RchC ssQcq+aPUrAuZKjtwXlo43gH6fYAnJfD+WCZBv1v01Nv/cWinmu38g4zFkhl1Zzi EFG1vZpbsMh2F2bKHoGxwhZzHiP0TLwJl8qk8TxI2QdwNkn9qpndte0sk7D0q6/a 29uy4TMmULA7ABKuy/f4eMIr3ybdGP/7Z9QIMzTXfjEy2RlF/6vhLL0Hb9uQfY6F TQR+l0bpdA2q6ZrXH2IGuG61ueK8xUP+SerfY5Jc1gVZufyouPiFaRcgME+0o3qE lYn/RwxMdIc70VT/bQHFV2Sczl4kuQM= -----END CERTIFICATE-----Generated at Tue Nov 4 17:00:03 2025 by rpki-client