$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2765b7d9-24f7-34f7-879c-3d7364c034cd.roa File: 2765b7d9-24f7-34f7-879c-3d7364c034cd.roa (raw, json) Hash identifier: UZ4GwrtcOSo4jCgEfjnSnjxDjUVlQiMnQttSvCTxwZc= Subject key identifier: 61:1B:7D:88:51:74:38:50:15:8C:4B:7C:B1:B2:6E:8E:FD:15:23:60 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE404D42E64F669B8498A210 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2765b7d9-24f7-34f7-879c-3d7364c034cd.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 173.189.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:4d:42:e6:4f:66:9b:84:98:a2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=d0cbb00c-635a-406a-9a8b-5eddffa013e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f4:aa:50:72:95:14:3a:90:8b:e7:55:57:88: 08:35:bc:e1:c1:33:bf:fb:e4:c2:37:55:40:c8:ea: 6b:74:b8:d0:bf:54:e6:7a:45:75:9c:da:07:19:45: d2:72:8c:df:5d:3b:2a:58:24:4b:f0:09:38:24:6b: 4e:54:94:4a:b4:f1:1f:2b:fa:c3:ff:32:a5:b7:13: 27:d1:93:39:4a:bc:72:4a:96:7a:b0:a0:d6:ca:d5: 84:cb:ef:e5:f0:9c:db:26:3d:83:0c:c2:4b:eb:45: 45:02:8f:10:05:6b:58:54:d4:3a:e3:9e:15:8a:5a: 3e:4c:f4:da:60:2f:03:cc:d0:af:db:25:29:db:37: b6:f8:fa:66:9e:7c:90:38:90:b9:d3:81:79:75:47: 15:9a:34:59:e0:46:a5:fa:54:87:7a:66:e1:86:fc: ac:df:79:6e:cf:48:50:9c:d6:3d:32:8b:16:ad:3e: 02:f7:29:05:a3:7a:df:11:62:d7:0f:7f:ee:d3:9f: 74:09:4e:4e:02:6f:27:d6:de:67:53:03:bb:e5:f4: a4:2e:79:60:0f:53:b7:24:30:6c:7a:af:48:9c:20: 91:9d:20:da:d5:fb:89:20:d5:36:e2:24:48:96:a3: 58:96:04:f8:1c:ce:b9:30:a3:f8:51:28:31:96:d3: 18:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1B:7D:88:51:74:38:50:15:8C:4B:7C:B1:B2:6E:8E:FD:15:23:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2765b7d9-24f7-34f7-879c-3d7364c034cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:68:f7:a7:05:79:79:f5:e2:56:d9:94:25:ed:bf:33:f2:0d: 15:f2:35:62:b7:02:e3:25:af:90:a1:b2:ae:26:23:e2:5e:96: f0:cb:bf:5a:7d:91:e0:d3:60:e2:b2:5d:7c:34:18:de:7c:39: 1b:51:b8:a5:b4:9d:17:80:d4:eb:79:84:39:de:4c:9a:c2:6e: f1:14:fa:ef:c2:61:02:07:99:0c:2c:ff:4b:13:fa:c1:37:77: 48:61:e9:fe:2d:ef:be:dd:0b:5d:e5:85:c8:6a:ae:1b:70:dd: 9c:ca:4c:3c:39:bc:45:58:3f:fe:60:65:f7:1a:ac:38:36:d8: 63:88:43:69:ff:70:2c:15:1d:1a:61:cd:c5:1f:98:c7:bf:29: 0b:07:bb:70:f0:40:6b:4d:f7:41:13:eb:ef:f0:96:b5:07:d2: 10:d3:cb:68:f2:05:03:b9:ab:d2:86:61:35:8e:1d:e1:5b:28: 89:68:10:f8:36:cd:76:86:6d:1b:28:f1:c4:65:15:e9:15:9a: 5a:ad:d5:86:2c:d3:5c:78:1c:98:3f:10:f5:1c:5d:08:e1:62: 85:37:bc:91:7c:88:a5:a4:de:b6:09:5f:70:d6:aa:da:35:68: 65:ed:87:19:01:4b:93:ba:c8:bb:e8:c3:4a:5d:c3:fd:e9:7d: 3f:17:18:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QE1C5k9mm4SYohAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZDBjYmIwMGMtNjM1YS00MDZhLTlhOGItNWVkZGZmYTAxM2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/SqUHKVFDqQi+dVV4gINbzhwTO/++TCN1VA yOprdLjQv1TmekV1nNoHGUXScozfXTsqWCRL8Ak4JGtOVJRKtPEfK/rD/zKltxMn 0ZM5SrxySpZ6sKDWytWEy+/l8JzbJj2DDMJL60VFAo8QBWtYVNQ6454Vilo+TPTa YC8DzNCv2yUp2ze2+PpmnnyQOJC504F5dUcVmjRZ4Eal+lSHembhhvys33luz0hQ nNY9MosWrT4C9ykFo3rfEWLXD3/u0590CU5OAm8n1t5nUwO75fSkLnlgD1O3JDBs eq9InCCRnSDa1fuJINU24iRIlqNYlgT4HM65MKP4USgxltMYGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEbfYhRdDhQFYxLfLGybo79FSNgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjc2NWI3ZDktMjRmNy0z NGY3LTg3OWMtM2Q3MzY0YzAzNGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClo96cFeXn14lbZlCXtvzPyDRXyNWK3AuMlr5Chsq4mI+JelvDLv1p9 keDTYOKyXXw0GN58ORtRuKW0nReA1Ot5hDneTJrCbvEU+u/CYQIHmQws/0sT+sE3 d0hh6f4t777dC13lhchqrhtw3ZzKTDw5vEVYP/5gZfcarDg22GOIQ2n/cCwVHRph zcUfmMe/KQsHu3DwQGtN90ET6+/wlrUH0hDTy2jyBQO5q9KGYTWOHeFbKIloEPg2 zXaGbRso8cRlFekVmlqt1YYs01x4HJg/EPUcXQjhYoU3vJF8iKWk3rYJX3DWqto1 aGXthxkBS5O6yLvow0pdw/3pfT8XGFc= -----END CERTIFICATE-----Generated at Wed Nov 5 13:01:24 2025 by rpki-client