$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2cc50ba9-d715-3deb-b0ee-bda4a8ec2b77.roa File: 2cc50ba9-d715-3deb-b0ee-bda4a8ec2b77.roa (raw, json) Hash identifier: U3M1x9ttVq+zSr8hOOAoYog/1JK+XT9SVqRWRmDmT90= Subject key identifier: CE:54:02:40:E2:97:B6:45:B7:95:41:39:31:7A:61:11:03:D0:E4:2B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2CA9D60935E838B8E20122 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2cc50ba9-d715-3deb-b0ee-bda4a8ec2b77.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 173.187.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:a9:d6:09:35:e8:38:b8:e2:01:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=d4a52c3d-164f-4cb3-b3f3-48f0591849c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a5:9e:5a:71:07:de:60:b2:b3:4d:9a:8e:37: 06:cc:24:19:4c:57:5d:f8:42:34:5b:9b:9d:16:b1: dd:e7:95:e3:c8:4b:25:8f:37:d6:e3:ee:8b:eb:22: 7b:62:69:9e:d7:fc:b5:19:1e:e4:bb:01:ce:c7:87: 59:8f:25:fe:a2:11:e7:7f:9c:67:34:05:eb:5a:f5: f1:9e:0a:6d:49:0f:d3:fe:17:30:c7:7b:2e:c6:59: a5:f7:6e:90:54:7e:9f:65:e0:78:ee:07:fe:9c:7a: bc:41:45:1e:b2:95:6c:99:41:8e:8b:d9:e3:3f:19: 5c:c8:0a:23:90:84:06:87:d4:a0:0c:02:39:2e:b7: ea:8a:bc:29:de:71:37:2c:1d:be:01:fa:ec:ed:c7: aa:ba:1d:84:0d:5a:7a:ea:4b:f0:47:07:9f:20:1c: af:1c:4f:b2:53:ce:b6:f8:c6:40:57:dc:4c:0e:b2: e0:1a:76:19:a2:8a:dd:18:c8:59:bb:36:30:bc:e4: 88:0c:59:b3:80:be:ea:2d:3b:d1:8c:90:72:d4:e7: aa:d6:d2:46:25:83:06:df:2d:fc:34:74:84:7c:02: 45:41:d8:a4:f1:79:24:a2:46:5e:6b:b2:57:36:b2: 76:63:bb:71:eb:11:0b:e0:8e:cc:34:cc:c9:f2:4d: 96:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:54:02:40:E2:97:B6:45:B7:95:41:39:31:7A:61:11:03:D0:E4:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2cc50ba9-d715-3deb-b0ee-bda4a8ec2b77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:b0:95:20:8c:74:16:59:5c:9a:2f:0c:70:7a:b7:a7:01:56: e5:40:54:f0:5e:98:d4:82:f3:5d:31:4b:92:c2:34:38:9b:bc: e9:98:70:a0:2d:05:03:08:4a:ac:17:f8:ea:05:ac:ac:b8:03: 09:b9:96:2d:1d:e1:95:3b:8b:df:56:6f:ba:60:41:5f:8b:e1: c8:54:dc:d2:77:9f:53:9b:64:4c:61:e2:b2:c1:15:b7:36:50: bd:b7:be:ca:22:72:0e:c1:9b:80:c8:8c:6c:f1:7e:e2:be:fb: 1e:dc:3f:2d:04:28:0a:ed:76:26:1d:11:f1:ea:df:a1:99:03: 00:3d:db:16:48:18:e0:ce:69:9d:3b:19:b1:31:15:e9:0d:9e: 51:23:d7:0a:f5:4f:6f:ad:eb:36:5b:db:68:13:38:44:91:07: 23:ff:44:3a:93:34:8b:c2:62:94:9a:c4:60:8f:3f:bd:7f:41: 02:92:ea:83:72:92:01:e6:e6:60:3a:2d:e4:cb:c8:01:b5:a4: 94:90:95:46:75:24:ee:6e:e9:f8:7d:aa:72:f1:19:9d:5c:fa: b4:1a:9a:5a:b2:9c:4e:80:f5:1b:be:61:ba:a6:c0:e1:85:9b: 2e:d1:34:6f:69:15:57:ed:10:02:6b:8e:79:5b:d0:5b:46:e0: a7:8b:53:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLKnWCTXoOLjiASIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZDRhNTJjM2QtMTY0Zi00Y2IzLWIzZjMtNDhmMDU5MTg0OWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6WeWnEH3mCys02ajjcGzCQZTFdd+EI0W5ud FrHd55XjyEsljzfW4+6L6yJ7Ymme1/y1GR7kuwHOx4dZjyX+ohHnf5xnNAXrWvXx ngptSQ/T/hcwx3suxlml926QVH6fZeB47gf+nHq8QUUespVsmUGOi9njPxlcyAoj kIQGh9SgDAI5Lrfqirwp3nE3LB2+Afrs7cequh2EDVp66kvwRwefIByvHE+yU862 +MZAV9xMDrLgGnYZoordGMhZuzYwvOSIDFmzgL7qLTvRjJBy1Oeq1tJGJYMG3y38 NHSEfAJFQdik8XkkokZea7JXNrJ2Y7tx6xEL4I7MNMzJ8k2WawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5UAkDil7ZFt5VBOTF6YRED0OQrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmNjNTBiYTktZDcxNS0z ZGViLWIwZWUtYmRhNGE4ZWMyYjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbtQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGwlSCMdBZZXJovDHB6t6cBVuVAVPBemNSC810xS5LCNDibvOmYcKAt BQMISqwX+OoFrKy4Awm5li0d4ZU7i99Wb7pgQV+L4chU3NJ3n1ObZExh4rLBFbc2 UL23vsoicg7Bm4DIjGzxfuK++x7cPy0EKArtdiYdEfHq36GZAwA92xZIGODOaZ07 GbExFekNnlEj1wr1T2+t6zZb22gTOESRByP/RDqTNIvCYpSaxGCPP71/QQKS6oNy kgHm5mA6LeTLyAG1pJSQlUZ1JO5u6fh9qnLxGZ1c+rQamlqynE6A9Ru+YbqmwOGF my7RNG9pFVftEAJrjnlb0FtG4KeLU+A= -----END CERTIFICATE-----Generated at Tue Nov 4 16:57:16 2025 by rpki-client