$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e82b07b-7fa0-3cad-8572-c0e6447403dc.roa File: 2e82b07b-7fa0-3cad-8572-c0e6447403dc.roa (raw, json) Hash identifier: 1Mq4KTLkDLZrvoCn7vxo6JHZQvtk81i02fg8Pp43e3U= Subject key identifier: A0:0A:D2:FD:85:90:2C:6F:73:AB:2A:D9:DF:22:44:4B:76:90:8E:6D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF93A99E27AB3E3113C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e82b07b-7fa0-3cad-8572-c0e6447403dc.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 173.221.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f9:3a:99:e2:7a:b3:e3:11:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=0ec1294d-4fc1-4d47-9f68-6d3c53901582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9e:88:47:1c:7b:d1:e8:02:f9:e2:84:38:a3: 36:92:a6:9b:fe:f8:8d:53:1c:43:53:7e:63:b2:9f: bd:ab:f2:66:f0:63:c4:21:6c:b2:0a:84:ec:36:8f: ef:ad:07:e3:29:20:42:bd:c2:35:1b:ab:6e:80:d5: e5:73:6f:da:d1:ac:9c:95:fc:aa:a6:af:13:13:b2: f7:73:03:d8:dc:c2:af:ab:b5:bd:ca:14:87:75:0d: 8e:8b:70:8b:3a:bf:9e:20:22:8e:84:64:64:7d:67: b8:eb:f1:7c:c3:33:7b:39:8f:62:28:ea:6f:e1:6a: 25:98:27:77:5d:1e:ee:55:48:63:6a:23:2b:4a:4f: 07:63:97:95:9c:64:19:42:f8:64:e6:3d:1e:df:0a: 24:2f:53:6a:51:96:d5:36:11:fe:53:0d:b6:3c:5a: ea:28:be:bf:df:6e:aa:ff:99:ee:ef:a9:18:ee:39: 26:06:45:bf:c2:2d:07:cb:1e:77:ba:f6:c1:35:43: 4a:cc:7c:b5:2d:6e:94:f4:fb:f9:90:9a:d1:fe:23: 7e:49:61:ba:93:ea:c1:69:cd:b0:5e:5a:3c:84:a9: f9:a6:57:65:3d:8f:a7:a7:ad:4f:cc:16:f1:58:c6: e9:41:c0:d7:97:61:9b:b0:21:0c:9a:50:a3:20:52: 84:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0A:D2:FD:85:90:2C:6F:73:AB:2A:D9:DF:22:44:4B:76:90:8E:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e82b07b-7fa0-3cad-8572-c0e6447403dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.221.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:35:1b:fc:79:3f:5d:2e:32:72:09:da:a0:66:a4:64:1d:55: 17:ce:29:0f:0e:65:8c:73:a6:24:3f:c9:37:89:11:c5:9f:f6: 57:13:24:48:09:88:1d:be:03:28:b2:2b:14:98:d6:4d:24:56: 20:bc:15:bd:b7:57:90:e7:49:9a:c8:bf:d6:ac:90:48:26:f9: ac:e8:10:46:eb:e5:5f:db:cd:53:40:27:a0:f1:05:66:69:28: 45:f1:ab:5a:ab:93:f6:83:16:75:a4:94:e8:05:ad:8c:64:e9: c3:c7:b5:53:4e:b7:7d:63:ac:a2:c7:00:0b:68:21:35:4a:fe: 76:78:88:4a:8c:de:e5:f5:6d:34:70:a2:a0:07:7a:d1:51:af: 5b:78:dd:d6:ce:6b:4c:fd:3b:f9:41:e2:62:9f:bb:52:63:0b: a4:da:70:49:25:81:1c:c9:f1:65:3e:a9:36:53:c1:51:21:52: 7a:bd:6e:02:15:8c:89:ef:01:c4:03:83:31:b1:19:e8:a6:07: ba:2a:ba:2b:d4:35:5e:7c:77:93:3b:d0:20:0a:a1:28:d2:83: 3f:0c:59:ca:b6:fd:45:6a:04:8b:08:11:f8:fc:1a:d4:77:c6: e5:93:2c:f4:26:4c:0d:8e:8e:21:79:6c:d9:f7:8a:d2:42:47: a2:39:ca:16 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtxXPk6meJ6s+MRPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MGVjMTI5NGQtNGZjMS00ZDQ3LTlmNjgtNmQzYzUzOTAxNTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJ6IRxx70egC+eKEOKM2kqab/viNUxxDU35j sp+9q/Jm8GPEIWyyCoTsNo/vrQfjKSBCvcI1G6tugNXlc2/a0ayclfyqpq8TE7L3 cwPY3MKvq7W9yhSHdQ2Oi3CLOr+eICKOhGRkfWe46/F8wzN7OY9iKOpv4WolmCd3 XR7uVUhjaiMrSk8HY5eVnGQZQvhk5j0e3wokL1NqUZbVNhH+Uw22PFrqKL6/326q /5nu76kY7jkmBkW/wi0Hyx53uvbBNUNKzHy1LW6U9Pv5kJrR/iN+SWG6k+rBac2w Xlo8hKn5pldlPY+np61PzBbxWMbpQcDXl2GbsCEMmlCjIFKEjQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKAK0v2FkCxvc6sq2d8iREt2kI5tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmU4MmIwN2ItN2ZhMC0z Y2FkLTg1NzItYzBlNjQ0NzQwM2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArd0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAkDUb/Hk/XS4ycgnaoGakZB1VF84pDw5ljHOmJD/JN4kRxZ/2VxMkSAmI Hb4DKLIrFJjWTSRWILwVvbdXkOdJmsi/1qyQSCb5rOgQRuvlX9vNU0AnoPEFZmko RfGrWquT9oMWdaSU6AWtjGTpw8e1U063fWOsoscAC2ghNUr+dniISoze5fVtNHCi oAd60VGvW3jd1s5rTP07+UHiYp+7UmMLpNpwSSWBHMnxZT6pNlPBUSFSer1uAhWM ie8BxAODMbEZ6KYHuiq6K9Q1Xnx3kzvQIAqhKNKDPwxZyrb9RWoEiwgR+Pwa1HfG 5ZMs9CZMDY6OIXls2feK0kJHojnKFg== -----END CERTIFICATE-----Generated at Tue Nov 4 19:15:39 2025 by rpki-client