$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/30be80cd-76ff-3e1a-89fb-4e857b55299b.roa File: 30be80cd-76ff-3e1a-89fb-4e857b55299b.roa (raw, json) Hash identifier: Y0jrrc/PAn31l+ewLhPGhBfX0bSk6SKnVpcMMj4PnpY= Subject key identifier: 29:F5:72:09:11:7B:67:44:F1:AE:BF:B4:6B:3A:67:BB:74:F7:3C:A3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC6165573C2BA225A7680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/30be80cd-76ff-3e1a-89fb-4e857b55299b.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 151.213.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c6:16:55:73:c2:ba:22:5a:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=a9375525-57ea-428d-bef2-45021a02f2c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:29:d0:17:0a:c2:c4:32:5c:16:b2:fb:f1:1f: 50:c8:e7:4a:b3:79:28:49:e1:ad:0f:31:e8:95:17: 74:76:e5:49:e0:94:32:17:1a:f0:57:b3:28:28:19: 3a:47:2b:61:5e:7d:fa:22:f8:11:6c:8e:d8:1e:96: 98:61:4a:a6:4d:61:5e:e0:13:fc:10:b9:f2:fd:7a: 92:35:11:f9:d5:9f:50:27:f0:cc:80:46:d6:de:99: 3b:68:72:54:ab:8b:91:be:8d:25:7a:dd:61:20:65: 85:8e:8a:f2:75:88:57:06:f6:13:14:b8:aa:fa:b4: 4e:02:cf:1d:48:28:c2:ed:c8:67:52:9d:5f:73:f1: b2:27:9d:59:0c:99:24:a6:e1:8b:a8:54:33:df:e8: ac:fb:84:8d:b4:19:4a:9e:07:82:23:25:3e:5e:44: 20:d4:56:00:c3:0e:61:19:00:21:dd:6b:20:0e:82: d4:fe:b4:9e:c0:28:15:0d:62:fc:de:b2:14:ff:97: fb:28:59:35:76:9d:39:25:33:65:de:3f:5a:2f:d5: 47:d1:40:60:87:1e:ab:d2:21:e2:20:f2:b2:43:a7: e1:f7:14:97:90:1c:e6:f6:d6:8f:1d:1e:1d:a6:c8: d2:5a:cf:0b:d0:e5:6a:af:b2:81:13:d3:eb:2b:c5: e1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F5:72:09:11:7B:67:44:F1:AE:BF:B4:6B:3A:67:BB:74:F7:3C:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/30be80cd-76ff-3e1a-89fb-4e857b55299b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:01:c6:30:82:a4:92:98:32:83:84:cf:16:af:74:75:e7:e7: ea:57:87:8c:e7:5a:8b:46:cb:62:91:6a:15:37:97:43:29:09: c7:a8:c0:83:a3:43:06:f5:69:12:68:a3:26:44:96:7e:a5:54: ce:a9:31:9e:55:bb:4c:4e:63:23:a2:7a:2d:9a:2f:81:14:4f: cb:0e:5a:36:ac:38:6b:2d:2b:9e:2e:52:92:b2:e6:a9:7a:b6: 97:5a:7b:df:d6:42:40:10:51:b1:93:a8:cb:f0:0e:cc:02:fb: dd:4f:5b:15:1a:dc:31:25:75:78:ec:e5:27:13:5f:da:9d:61: 32:d6:f3:a0:55:95:b8:df:fa:5d:3e:01:69:f5:e5:ea:ad:7f: ad:b3:c8:3e:be:d0:ef:b8:91:d1:a8:78:0e:f4:ad:fe:22:81: bc:06:1b:b1:06:f4:36:c0:02:08:8f:a1:81:28:3d:31:5d:45: 05:c6:e2:f3:5b:b3:36:7f:06:a3:0e:cf:6c:c3:38:98:bb:9e: eb:d8:a4:17:6e:72:13:a6:c3:21:8e:69:9b:6d:cb:a8:4e:d0: 1c:33:01:36:9c:82:54:af:61:bc:7d:9f:67:3a:e4:ec:78:3d: 53:93:09:ae:98:30:54:2d:44:16:29:4c:ef:1c:7f:7e:4b:f8: 5d:00:fa:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMYWVXPCuiJadoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YTkzNzU1MjUtNTdlYS00MjhkLWJlZjItNDUwMjFhMDJmMmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiynQFwrCxDJcFrL78R9QyOdKs3koSeGtDzHo lRd0duVJ4JQyFxrwV7MoKBk6RythXn36IvgRbI7YHpaYYUqmTWFe4BP8ELny/XqS NRH51Z9QJ/DMgEbW3pk7aHJUq4uRvo0let1hIGWFjorydYhXBvYTFLiq+rROAs8d SCjC7chnUp1fc/GyJ51ZDJkkpuGLqFQz3+is+4SNtBlKngeCIyU+XkQg1FYAww5h GQAh3WsgDoLU/rSewCgVDWL83rIU/5f7KFk1dp05JTNl3j9aL9VH0UBghx6r0iHi IPKyQ6fh9xSXkBzm9taPHR4dpsjSWs8L0OVqr7KBE9PrK8XhowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCn1cgkRe2dE8a6/tGs6Z7t09zyjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzBiZTgwY2QtNzZmZi0z ZTFhLTg5ZmItNGU4NTdiNTUyOTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl9XMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQBxjCCpJKYMoOEzxavdHXn5+pXh4znWotGy2KRahU3l0MpCceowIOj Qwb1aRJooyZEln6lVM6pMZ5Vu0xOYyOiei2aL4EUT8sOWjasOGstK54uUpKy5ql6 tpdae9/WQkAQUbGTqMvwDswC+91PWxUa3DEldXjs5ScTX9qdYTLW86BVlbjf+l0+ AWn15eqtf62zyD6+0O+4kdGoeA70rf4igbwGG7EG9DbAAgiPoYEoPTFdRQXG4vNb szZ/BqMOz2zDOJi7nuvYpBduchOmwyGOaZtty6hO0BwzATacglSvYbx9n2c65Ox4 PVOTCa6YMFQtRBYpTO8cf35L+F0A+kQ= -----END CERTIFICATE-----Generated at Tue Nov 4 16:56:57 2025 by rpki-client