$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1de2955a-2d09-31d2-89d1-1e9f05fa16fe.roa File: 1de2955a-2d09-31d2-89d1-1e9f05fa16fe.roa (raw, json) Hash identifier: AFKyT1h5DguhCgXwXphrsH7P4kL1U4/LNPe84AlWTxU= Subject key identifier: 2F:26:6A:20:79:B3:0D:9A:57:59:10:87:44:2F:B3:3D:C8:56:D4:71 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2CA78EBC3834470FA68158 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1de2955a-2d09-31d2-89d1-1e9f05fa16fe.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 173.187.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:a7:8e:bc:38:34:47:0f:a6:81:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=ccd36fa5-af23-4799-8cf5-a15eaa93733c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:dc:99:8d:30:12:ed:3e:17:eb:5d:c1:0d:f8: 67:0a:4a:55:96:a2:2f:2f:ac:96:d5:9c:09:f7:78: 96:d7:5e:e8:de:41:48:7d:86:89:1a:13:6d:d0:b5: 2b:74:ef:a3:fb:d3:c9:55:7d:ec:fa:85:56:78:86: 9a:72:09:fe:81:a2:5f:d5:43:a4:d1:38:e4:60:c1: 7a:94:ec:32:9e:ea:e7:43:e5:e7:cf:8d:44:38:77: af:af:d8:04:fb:57:77:ad:7f:9f:47:13:8f:b1:b3: 24:8e:2b:b7:96:95:11:76:3d:67:be:25:7b:be:fc: 10:27:e3:0d:91:66:11:92:50:38:97:20:87:be:19: 87:24:fe:e9:65:cd:cf:a8:53:f8:62:96:22:bd:f4: e4:d1:72:35:23:08:ef:dc:aa:73:00:2a:2e:a3:47: 2c:e9:c1:e3:c6:b4:34:22:a6:ce:f5:c8:4c:f5:c6: 26:31:a0:f6:7b:e6:ba:9b:31:b5:fa:dc:72:08:b0: d8:bd:bc:12:1c:7e:10:a9:0e:b9:58:d3:a2:ea:fb: 1f:1f:22:39:fd:1a:91:bb:f3:e1:e5:4c:d0:2c:2f: 03:69:ce:9c:c1:52:77:9a:ad:82:c5:1c:c7:db:76: ca:80:c2:65:3a:17:ca:93:e1:5c:1c:15:86:1f:f0: 0c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:26:6A:20:79:B3:0D:9A:57:59:10:87:44:2F:B3:3D:C8:56:D4:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1de2955a-2d09-31d2-89d1-1e9f05fa16fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:62:dc:84:ca:f6:9b:0c:c3:85:c4:e1:68:78:88:e5:af:ff: 58:3e:1d:fe:4b:d5:47:c8:42:d1:08:af:a0:39:1e:64:6f:3e: 17:6d:1e:73:48:be:32:70:e6:6b:3b:9c:aa:74:38:af:32:c4: 03:aa:ef:bf:8f:53:95:1f:d7:23:74:ac:b0:36:9b:93:40:dd: e9:44:ab:ab:58:f3:cf:40:46:00:5b:c9:f3:46:a3:1d:cc:ad: 31:05:7a:94:eb:b6:ee:80:b0:a5:6f:46:e5:4d:2e:1b:d9:9e: 01:e2:12:d4:9f:77:8e:1b:2e:18:47:ca:85:78:7a:9e:df:89: 3e:cd:78:f2:bc:c2:ee:f8:ce:e2:d2:70:03:66:b2:ec:fe:1d: 53:24:3b:b6:d2:50:2e:ce:bf:ed:15:d5:59:ad:02:79:11:a7: 3f:50:31:70:7a:b9:25:57:ed:79:6a:a7:ab:4f:e2:23:4f:d1: da:32:0f:9e:26:83:d0:16:93:e7:68:09:da:48:76:38:e2:2c: c5:a3:2a:05:8a:34:da:31:71:8e:45:6f:57:72:23:68:44:cc: 8c:03:26:56:9f:95:e3:61:bf:4b:33:73:e6:ad:ba:8b:20:8e: 68:42:43:20:94:90:5c:de:ec:8f:92:b2:ce:2a:ff:60:9b:d4: ab:80:12:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLKeOvDg0Rw+mgVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk Y2NkMzZmYTUtYWYyMy00Nzk5LThjZjUtYTE1ZWFhOTM3MzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotyZjTAS7T4X613BDfhnCkpVlqIvL6yW1ZwJ 93iW117o3kFIfYaJGhNt0LUrdO+j+9PJVX3s+oVWeIaacgn+gaJf1UOk0TjkYMF6 lOwynurnQ+Xnz41EOHevr9gE+1d3rX+fRxOPsbMkjiu3lpURdj1nviV7vvwQJ+MN kWYRklA4lyCHvhmHJP7pZc3PqFP4YpYivfTk0XI1Iwjv3KpzACouo0cs6cHjxrQ0 IqbO9chM9cYmMaD2e+a6mzG1+txyCLDYvbwSHH4QqQ65WNOi6vsfHyI5/RqRu/Ph 5UzQLC8Dac6cwVJ3mq2CxRzH23bKgMJlOhfKk+FcHBWGH/AMpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8maiB5sw2aV1kQh0Qvsz3IVtRxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWRlMjk1NWEtMmQwOS0z MWQyLTg5ZDEtMWU5ZjA1ZmExNmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbvIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBi3ITK9psMw4XE4Wh4iOWv/1g+Hf5L1UfIQtEIr6A5HmRvPhdtHnNI vjJw5ms7nKp0OK8yxAOq77+PU5Uf1yN0rLA2m5NA3elEq6tY889ARgBbyfNGox3M rTEFepTrtu6AsKVvRuVNLhvZngHiEtSfd44bLhhHyoV4ep7fiT7NePK8wu74zuLS cANmsuz+HVMkO7bSUC7Ov+0V1VmtAnkRpz9QMXB6uSVX7Xlqp6tP4iNP0doyD54m g9AWk+doCdpIdjjiLMWjKgWKNNoxcY5Fb1dyI2hEzIwDJlafleNhv0szc+atuosg jmhCQyCUkFze7I+Sss4q/2Cb1KuAEj8= -----END CERTIFICATE-----Generated at Tue Nov 4 23:25:30 2025 by rpki-client