$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28f32791-93af-395d-a89b-6915c7444645.roa File: 28f32791-93af-395d-a89b-6915c7444645.roa (raw, json) Hash identifier: eSaiVDFkIS+6tl+fvBnnPKes83BD3u+b+6t9RWVnvgw= Subject key identifier: CB:CE:44:22:6B:DE:CF:17:8D:FD:AB:43:A4:79:E5:21:B3:8F:99:D3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC919BB277F0A96AF1100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28f32791-93af-395d-a89b-6915c7444645.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 209.92.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c9:19:bb:27:7f:0a:96:af:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=a29063ce-e9d0-49ab-9eb0-41814de1dd66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:65:ef:d5:2f:10:a1:a7:70:ce:7e:7c:f4:6a: 50:4a:5b:55:f2:67:1e:7c:cc:42:0c:e2:47:7e:35: fa:3f:9f:9a:58:bb:fb:93:95:a9:65:04:3b:d6:fe: 97:95:9b:80:1d:3b:e0:b0:d5:05:3a:e1:ec:bc:57: 07:86:69:48:15:22:89:cb:73:8b:cf:27:04:92:e8: 72:c7:f5:21:26:07:bf:8c:a1:04:ff:29:8f:21:61: b6:96:a5:2b:59:a0:3b:97:6b:66:de:69:2e:18:fc: fe:af:1c:3a:1c:fa:20:aa:4f:31:b2:7e:6f:d2:38: 50:58:d0:d1:c5:de:09:cc:44:60:19:d5:2d:56:d3: a9:3b:0d:54:74:88:bb:e5:a1:87:84:ae:22:96:0b: d3:74:5d:9d:e7:4f:b8:59:39:68:23:71:c8:2b:6b: fc:2f:d9:f4:6d:79:29:a6:d6:c0:ee:6d:26:1d:f4: 16:66:83:7b:ab:ee:39:fb:84:52:0e:55:0a:32:3f: f7:85:f3:c4:2d:73:dc:57:37:0f:14:fa:bc:af:bb: 54:b6:93:9c:f1:3c:ed:a2:bf:7d:a7:f3:26:59:f3: 34:b8:4f:20:bb:91:01:dd:3d:47:14:79:aa:9f:e4: c8:83:a0:80:38:4e:9b:f8:f5:67:f6:5f:5d:49:94: 80:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:CE:44:22:6B:DE:CF:17:8D:FD:AB:43:A4:79:E5:21:B3:8F:99:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28f32791-93af-395d-a89b-6915c7444645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.92.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:9e:34:c7:7a:b4:a7:2c:31:38:60:6d:2c:2c:01:45:95:4f: c0:5b:53:95:f3:99:3c:0e:ce:49:28:23:66:a5:1d:94:db:e5: 2a:43:fb:a2:3f:56:5c:43:e7:6e:3d:06:a2:fd:39:c6:83:a1: 32:1c:34:91:04:09:fa:1c:fa:5e:f3:f2:ab:65:f9:35:36:3f: c6:bc:a2:6e:c7:a6:3e:dd:44:9b:cc:d3:29:5e:8f:2a:a9:a9: 04:df:8d:dc:54:fa:5d:33:58:1e:9d:c4:ec:59:c3:54:c2:dc: d4:20:40:6b:45:b0:f0:41:a9:df:93:08:25:77:1b:69:a7:09: d0:51:33:45:41:c3:42:90:e2:0e:6c:83:b2:6b:5c:dc:f5:27: c8:dd:a0:c6:0e:ae:9d:ee:84:1d:73:9c:00:39:a9:b1:45:8e: 84:a6:e4:be:3a:a0:78:8f:d1:c1:bf:6e:c8:78:13:57:f4:92: 30:13:e3:3c:a2:e5:79:9e:0d:ac:ed:e6:d3:49:40:c8:de:fd: d2:c5:7d:ba:41:9c:d3:95:d7:21:51:fa:88:98:78:08:35:43: 76:bd:79:f5:5b:a2:5a:20:68:42:96:34:e7:1d:1f:3a:69:34: 22:6c:d9:c6:d9:de:c4:62:c3:80:09:ce:86:c5:22:d2:a5:de: 28:0f:35:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMkZuyd/CpavEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YTI5MDYzY2UtZTlkMC00OWFiLTllYjAtNDE4MTRkZTFkZDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2Xv1S8Qoadwzn589GpQSltV8mcefMxCDOJH fjX6P5+aWLv7k5WpZQQ71v6XlZuAHTvgsNUFOuHsvFcHhmlIFSKJy3OLzycEkuhy x/UhJge/jKEE/ymPIWG2lqUrWaA7l2tm3mkuGPz+rxw6HPogqk8xsn5v0jhQWNDR xd4JzERgGdUtVtOpOw1UdIi75aGHhK4ilgvTdF2d50+4WTloI3HIK2v8L9n0bXkp ptbA7m0mHfQWZoN7q+45+4RSDlUKMj/3hfPELXPcVzcPFPq8r7tUtpOc8Tztor99 p/MmWfM0uE8gu5EB3T1HFHmqn+TIg6CAOE6b+PVn9l9dSZSAqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvORCJr3s8Xjf2rQ6R55SGzj5nTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjhmMzI3OTEtOTNhZi0z OTVkLWE4OWItNjkxNWM3NDQ0NjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0VwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+eNMd6tKcsMThgbSwsAUWVT8BbU5XzmTwOzkkoI2alHZTb5SpD+6I/ VlxD5249BqL9OcaDoTIcNJEECfoc+l7z8qtl+TU2P8a8om7Hpj7dRJvM0ylejyqp qQTfjdxU+l0zWB6dxOxZw1TC3NQgQGtFsPBBqd+TCCV3G2mnCdBRM0VBw0KQ4g5s g7JrXNz1J8jdoMYOrp3uhB1znAA5qbFFjoSm5L46oHiP0cG/bsh4E1f0kjAT4zyi 5XmeDazt5tNJQMje/dLFfbpBnNOV1yFR+oiYeAg1Q3a9efVbologaEKWNOcdHzpp NCJs2cbZ3sRiw4AJzobFItKl3igPNY4= -----END CERTIFICATE-----Generated at Tue Nov 4 17:02:21 2025 by rpki-client