$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20d2ed64-4dca-3052-806a-aeb61c712d28.roa File: 20d2ed64-4dca-3052-806a-aeb61c712d28.roa (raw, json) Hash identifier: SWQTyqFyN8y20ohc3xIaL3jbvO8sVobLdd7V/T4PgZE= Subject key identifier: 74:B8:90:F3:B1:F5:F9:94:E9:E8:F6:CB:EE:B3:23:99:73:A5:C0:14 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE4051B9A7B1FAE1197FCD60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20d2ed64-4dca-3052-806a-aeb61c712d28.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 69.30.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:51:b9:a7:b1:fa:e1:19:7f:cd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=4d0586ba-89c5-42cc-9d5c-ee7e8bbd9aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c0:ce:d7:92:a8:3d:a8:f4:24:fd:55:c7:b4: 64:9a:ef:6e:fa:c2:6a:86:34:b5:f1:80:4b:33:6d: 21:4e:e8:96:30:1c:12:97:ec:0c:f4:e0:d9:4b:d5: cf:73:c8:3d:73:9b:68:3b:ff:75:cb:9c:b8:21:ce: 87:e9:5f:1d:08:c0:67:25:ac:84:d7:c6:ec:10:ae: d3:e4:fc:ab:5b:fa:82:2a:96:3d:ec:bb:29:4b:a9: f4:86:67:5a:a1:f1:c5:11:f3:ae:7e:53:8e:c7:0b: 99:40:9d:69:90:9b:fc:73:c1:fe:ec:b8:b3:28:c2: ba:e8:f7:a4:97:61:b6:9c:a5:19:fb:be:b2:94:b5: ab:c9:d9:d1:55:9c:04:34:08:b2:56:9c:5d:1c:80: 56:58:f6:a0:ce:94:52:60:7f:08:de:a7:fb:5a:44: d3:a6:c9:21:14:31:b4:ec:b9:25:dc:64:6e:a5:83: 6e:fd:1e:97:82:02:89:74:bc:c1:ab:6d:5e:68:ec: b0:d6:0b:a8:5d:a6:80:b4:ec:ed:a2:d2:e8:a9:4e: c8:fd:73:a0:39:25:5c:80:e0:37:e4:c2:c4:eb:cf: f3:22:8a:af:f7:01:7f:fa:e6:23:63:2a:56:e0:50: 61:72:5e:8f:e1:18:e6:a1:b0:bd:4f:75:6f:a5:6a: f1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B8:90:F3:B1:F5:F9:94:E9:E8:F6:CB:EE:B3:23:99:73:A5:C0:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20d2ed64-4dca-3052-806a-aeb61c712d28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.30.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:0d:6f:cb:b8:02:47:4e:b0:3c:3b:04:10:97:ae:03:b5:22: e0:6b:f6:a4:a0:59:db:ed:cc:0c:35:bb:29:f5:1c:d7:2a:03: d4:ab:f3:62:91:a1:e4:6b:03:7b:97:b9:1b:8b:f8:7b:34:9c: 90:4f:0d:de:16:03:a0:dc:7f:38:57:8d:0c:7e:ad:46:1b:56: 81:80:32:3e:dc:61:07:c1:4c:c1:a0:c5:00:7f:78:30:bc:a3: 30:7d:39:53:fd:e1:36:17:3b:21:8f:b6:d8:02:07:45:c4:e6: eb:3e:92:bb:0e:e4:e3:c7:3d:65:61:15:e4:53:e1:95:21:8c: 6b:35:4d:96:8b:d4:6f:0d:b6:aa:c7:09:e9:32:b7:dc:29:44: 98:26:e3:46:3d:6a:14:13:85:dd:94:5d:97:3b:4f:f2:e3:6e: f1:23:c1:ca:81:2d:63:71:23:43:2f:28:c0:e2:47:82:8d:56: 10:76:ac:f1:78:68:57:63:e0:42:f3:d3:52:ba:18:a3:bd:2f: 40:18:70:9f:7a:7c:e1:8f:e6:5a:2e:6e:4a:60:91:09:0b:c7: f3:2e:86:47:30:9e:5f:b1:35:53:eb:f3:0d:5b:f6:24:8a:1b: e2:67:52:93:11:ed:72:4c:e5:e5:09:e2:6c:15:53:df:a4:70: 6d:7b:73:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFG5p7H64Rl/zWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NGQwNTg2YmEtODljNS00MmNjLTlkNWMtZWU3ZThiYmQ5YWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsDO15KoPaj0JP1Vx7Rkmu9u+sJqhjS18YBL M20hTuiWMBwSl+wM9ODZS9XPc8g9c5toO/91y5y4Ic6H6V8dCMBnJayE18bsEK7T 5PyrW/qCKpY97LspS6n0hmdaofHFEfOuflOOxwuZQJ1pkJv8c8H+7LizKMK66Pek l2G2nKUZ+76ylLWrydnRVZwENAiyVpxdHIBWWPagzpRSYH8I3qf7WkTTpskhFDG0 7Lkl3GRupYNu/R6XggKJdLzBq21eaOyw1guoXaaAtOztotLoqU7I/XOgOSVcgOA3 5MLE68/zIoqv9wF/+uYjYypW4FBhcl6P4RjmobC9T3VvpWrxvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHS4kPOx9fmU6ej2y+6zI5lzpcAUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjBkMmVkNjQtNGRjYS0z MDUyLTgwNmEtYWViNjFjNzEyZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRR64MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQNb8u4AkdOsDw7BBCXrgO1IuBr9qSgWdvtzAw1uyn1HNcqA9Sr82KR oeRrA3uXuRuL+Hs0nJBPDd4WA6DcfzhXjQx+rUYbVoGAMj7cYQfBTMGgxQB/eDC8 ozB9OVP94TYXOyGPttgCB0XE5us+krsO5OPHPWVhFeRT4ZUhjGs1TZaL1G8NtqrH Cekyt9wpRJgm40Y9ahQThd2UXZc7T/LjbvEjwcqBLWNxI0MvKMDiR4KNVhB2rPF4 aFdj4ELz01K6GKO9L0AYcJ96fOGP5loubkpgkQkLx/Muhkcwnl+xNVPr8w1b9iSK G+JnUpMR7XJM5eUJ4mwVU9+kcG17c/0= -----END CERTIFICATE-----Generated at Tue Nov 4 17:00:24 2025 by rpki-client