$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/290b17d3-46d1-383e-baa1-5a1dd19bbebf.roa File: 290b17d3-46d1-383e-baa1-5a1dd19bbebf.roa (raw, json) Hash identifier: CXtcq70leE7O06sqTka89qdtC7hD8+ZwFy+A/ZY97Gk= Subject key identifier: B9:50:79:A7:EA:98:57:28:4A:A3:4C:82:08:BC:05:E8:BB:FC:AE:75 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE4048FC6CEF2542930FE080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/290b17d3-46d1-383e-baa1-5a1dd19bbebf.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 67.141.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:48:fc:6c:ef:25:42:93:0f:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=a0b25860-69c7-41c1-a802-893e88561353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:bc:fc:f7:9c:ce:9f:d7:4c:d1:d1:35:ca:8e: c7:55:f5:f7:dc:7c:d9:cd:8b:b3:b2:0a:0f:0f:b6: 53:48:28:e3:2e:eb:2c:bf:5c:dd:bb:e6:70:f7:4f: 51:de:9d:66:26:16:15:9a:2c:79:be:30:fa:02:a9: 7d:5a:fc:cc:90:4c:8c:9c:66:c2:98:c9:82:da:12: f5:b3:fd:94:91:84:f8:65:62:fa:fb:79:17:d3:13: 16:b5:38:43:3d:08:11:35:0b:8e:5f:8b:6e:fb:9c: fd:1c:ab:eb:37:61:57:c3:52:0b:37:19:9f:94:40: 34:df:0b:fb:b7:c6:4b:5d:cf:38:dc:12:62:f0:24: 14:25:31:b6:e0:37:81:ba:bc:a5:a9:26:43:6c:35: d8:12:47:cf:24:31:62:f4:d2:4d:d3:66:7c:c7:1a: 3b:d6:2a:b4:74:bf:05:9b:83:2a:de:83:a3:3c:63: 21:5a:93:6e:a3:28:c3:92:b2:f7:a0:c5:40:53:d6: 4c:0f:dd:9c:fd:70:a4:fd:8d:af:5b:df:40:2d:24: 78:29:a4:95:d1:2d:4f:b1:13:05:14:0d:a7:ba:00: 0a:07:00:77:03:77:a3:7c:fb:40:a6:ec:95:81:33: 2b:7b:b0:9a:77:b1:fd:8d:82:4c:0c:24:5d:7d:c8: c7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:50:79:A7:EA:98:57:28:4A:A3:4C:82:08:BC:05:E8:BB:FC:AE:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/290b17d3-46d1-383e-baa1-5a1dd19bbebf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:a1:7f:3a:82:1a:dd:39:e2:86:6f:c1:bc:5f:25:8a:74:c7: 6d:00:58:72:7f:4c:05:0d:dd:ed:80:55:5c:db:46:c1:b9:31: b4:65:a0:f8:3f:f7:97:67:b3:60:0b:82:7f:1b:8e:ba:8a:74: 27:a6:1e:97:e8:69:5d:7a:73:ab:4e:22:87:71:47:7e:38:9e: 7d:10:c6:20:e4:35:e3:6c:ad:19:45:85:68:95:cb:25:36:9e: 8b:80:c1:01:98:bd:f2:d5:43:f2:9b:62:d6:af:c7:17:05:44: a5:7f:b1:c0:a0:32:b9:92:71:77:65:1d:6f:12:49:84:82:8f: 35:88:c8:6a:8e:1f:48:f9:86:db:7d:ad:f4:0d:e5:13:8b:29: 9a:e5:3b:46:63:b2:22:0d:e9:72:84:84:81:4f:ed:b5:41:15: 9e:30:a2:77:b9:3d:3e:a2:97:11:57:9f:ea:1f:50:03:f4:46: 06:9e:74:98:b0:d2:56:67:b1:43:c0:cc:21:7f:54:52:f8:08: 01:4f:3e:a8:59:bb:ce:ad:d6:a0:ef:42:96:ac:41:e9:b1:f0: 68:4c:7e:83:35:d6:e4:17:ef:01:23:37:b6:e9:17:41:a6:4c: c2:d6:cb:8b:82:a7:6e:5e:df:dc:c2:64:77:96:34:1a:5e:2a: 9b:0a:56:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEj8bO8lQpMP4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk YTBiMjU4NjAtNjljNy00MWMxLWE4MDItODkzZTg4NTYxMzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7z895zOn9dM0dE1yo7HVfX33HzZzYuzsgoP D7ZTSCjjLussv1zdu+Zw909R3p1mJhYVmix5vjD6Aql9WvzMkEyMnGbCmMmC2hL1 s/2UkYT4ZWL6+3kX0xMWtThDPQgRNQuOX4tu+5z9HKvrN2FXw1ILNxmflEA03wv7 t8ZLXc843BJi8CQUJTG24DeBurylqSZDbDXYEkfPJDFi9NJN02Z8xxo71iq0dL8F m4Mq3oOjPGMhWpNuoyjDkrL3oMVAU9ZMD92c/XCk/Y2vW99ALSR4KaSV0S1PsRMF FA2nugAKBwB3A3ejfPtApuyVgTMre7Cad7H9jYJMDCRdfcjHUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlQeafqmFcoSqNMggi8Bei7/K51MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjkwYjE3ZDMtNDZkMS0z ODNlLWJhYTEtNWExZGQxOWJiZWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ41gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWhfzqCGt054oZvwbxfJYp0x20AWHJ/TAUN3e2AVVzbRsG5MbRloPg/ 95dns2ALgn8bjrqKdCemHpfoaV16c6tOIodxR344nn0QxiDkNeNsrRlFhWiVyyU2 nouAwQGYvfLVQ/KbYtavxxcFRKV/scCgMrmScXdlHW8SSYSCjzWIyGqOH0j5htt9 rfQN5ROLKZrlO0ZjsiIN6XKEhIFP7bVBFZ4wone5PT6ilxFXn+ofUAP0RgaedJiw 0lZnsUPAzCF/VFL4CAFPPqhZu86t1qDvQpasQemx8GhMfoM11uQX7wEjN7bpF0Gm TMLWy4uCp25e39zCZHeWNBpeKpsKVmU= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:05 2025 by rpki-client