$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34263c75-df9b-3967-ad36-b731e045fd76.roa File: 34263c75-df9b-3967-ad36-b731e045fd76.roa (raw, json) Hash identifier: zQkVIZO+dnzFGJzeb4eiVjwnjnwUiflBMP8M9jqYsec= Subject key identifier: 25:3B:0E:D7:A4:48:05:96:AE:22:8F:F1:28:D3:18:26:46:5A:C0:0A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2CA7A12C386FF55FE21CB0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34263c75-df9b-3967-ad36-b731e045fd76.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 173.188.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:a7:a1:2c:38:6f:f5:5f:e2:1c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=f5d1c78c-3c43-4304-baeb-53e4fa1f7e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1a:83:b6:7d:a0:4f:e5:fa:a9:a2:be:3a:1c: 68:a2:1b:c9:ee:a8:79:f9:ba:f5:e3:f4:95:31:df: ba:1c:da:f1:a5:fc:2a:f8:d4:41:60:d4:49:d6:df: 39:9e:bc:64:02:94:62:20:24:61:32:64:ca:0e:bc: da:4e:46:3d:f7:8f:4e:87:94:d7:18:a1:6c:50:75: 33:78:73:e2:73:2c:f1:fe:e2:ef:3d:e6:18:26:73: 34:c5:2c:ea:66:1b:52:dd:e8:52:c4:c7:df:bf:65: 35:a6:43:4c:9f:78:25:d0:d9:d1:b3:d2:a9:1e:71: 84:87:2f:4d:d5:f0:78:13:fb:a9:55:56:b4:66:0a: f6:31:07:cb:b5:90:51:59:4c:e3:2c:3f:70:13:c3: b6:c3:6a:05:f7:e4:65:96:02:0f:45:be:23:83:86: 9f:72:36:12:8d:d1:0a:d3:bd:27:5b:06:c3:23:1b: 75:c7:50:36:42:c6:40:33:60:1b:7e:2a:ed:8c:83: d4:ea:a0:56:77:bd:cd:ff:e4:2b:ef:61:9c:44:33: 79:e2:4e:ce:13:b4:06:d7:56:db:db:e4:56:e7:d1: 70:23:71:c0:30:df:e2:1f:f9:7f:f0:8e:9e:65:48: 8c:27:b5:3c:e1:86:ff:09:36:a5:f1:9e:4c:36:48: 3a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3B:0E:D7:A4:48:05:96:AE:22:8F:F1:28:D3:18:26:46:5A:C0:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34263c75-df9b-3967-ad36-b731e045fd76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:10:94:05:10:78:96:13:7e:8e:b7:a0:63:77:4a:4a:c1:7c: c3:3a:7e:a6:17:f0:d8:c9:33:42:d7:60:57:e0:0a:cd:df:df: 6d:9d:04:94:27:cc:18:0b:9f:ea:5c:81:d5:0d:1b:1d:e4:0a: fa:e9:a5:0a:50:4e:3f:08:c5:09:cd:3a:c2:89:63:66:f6:03: ca:8c:23:c9:e2:a2:da:ce:0d:d1:08:74:39:78:9a:b2:a1:ce: a4:6b:ba:f0:40:60:d8:bd:c8:d8:5a:e5:11:0d:d2:c0:e4:a7: 8b:e7:3e:f9:d8:d7:07:d5:60:c7:70:d1:dd:24:46:b3:ea:80: e6:13:ba:eb:de:e7:b7:05:9a:ab:e6:18:fc:3c:29:1d:28:d3: 8c:dd:80:f7:cc:e1:d5:2e:a6:7e:10:ef:a2:42:10:4d:99:8e: 2a:a0:83:f2:d3:31:df:52:fa:d8:8b:55:50:2b:be:a9:6a:97: 7b:58:d2:63:d5:42:38:d4:49:cb:2b:cc:63:de:db:d9:24:63: fc:c5:2b:cf:ca:64:df:9c:84:f2:12:49:61:4f:64:18:30:de: 47:fa:90:66:6a:32:d1:95:53:b4:b1:92:f5:65:03:79:0d:07: e2:0c:73:b8:2a:04:59:97:59:77:09:87:df:8f:03:92:a9:23: 2e:9b:74:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLKehLDhv9V/iHLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZjVkMWM3OGMtM2M0My00MzA0LWJhZWItNTNlNGZhMWY3ZTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhqDtn2gT+X6qaK+OhxoohvJ7qh5+br14/SV Md+6HNrxpfwq+NRBYNRJ1t85nrxkApRiICRhMmTKDrzaTkY9949Oh5TXGKFsUHUz eHPicyzx/uLvPeYYJnM0xSzqZhtS3ehSxMffv2U1pkNMn3gl0NnRs9KpHnGEhy9N 1fB4E/upVVa0Zgr2MQfLtZBRWUzjLD9wE8O2w2oF9+RllgIPRb4jg4afcjYSjdEK 070nWwbDIxt1x1A2QsZAM2AbfirtjIPU6qBWd73N/+Qr72GcRDN54k7OE7QG11bb 2+RW59FwI3HAMN/iH/l/8I6eZUiMJ7U84Yb/CTal8Z5MNkg6vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCU7DtekSAWWriKP8SjTGCZGWsAKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzQyNjNjNzUtZGY5Yi0z OTY3LWFkMzYtYjczMWUwNDVmZDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbwoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoQlAUQeJYTfo63oGN3SkrBfMM6fqYX8NjJM0LXYFfgCs3f322dBJQn zBgLn+pcgdUNGx3kCvrppQpQTj8IxQnNOsKJY2b2A8qMI8niotrODdEIdDl4mrKh zqRruvBAYNi9yNha5REN0sDkp4vnPvnY1wfVYMdw0d0kRrPqgOYTuuve57cFmqvm GPw8KR0o04zdgPfM4dUupn4Q76JCEE2Zjiqgg/LTMd9S+tiLVVArvqlql3tY0mPV QjjUScsrzGPe29kkY/zFK8/KZN+chPISSWFPZBgw3kf6kGZqMtGVU7SxkvVlA3kN B+IMc7gqBFmXWXcJh9+PA5KpIy6bdN0= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:30 2025 by rpki-client