$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/360c6edf-2f89-3639-a3c1-8bed4e0a6dca.roa File: 360c6edf-2f89-3639-a3c1-8bed4e0a6dca.roa (raw, json) Hash identifier: tRENlPwt9PniDsePAlCparP+XUF7tSgKYT+flkyMcvA= Subject key identifier: B9:04:64:AB:CF:7D:3D:44:CA:FC:A4:12:6F:51:2A:EE:21:A4:FF:95 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BAEC7C9EE1CB55E81E66EA640 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/360c6edf-2f89-3639-a3c1-8bed4e0a6dca.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 7029 IP address blocks: 216.96.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:c9:ee:1c:b5:5e:81:e6:6e:a6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=500a0532-a016-44b5-8e09-5ffdb8eb551c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0c:c0:53:b4:4e:1b:9c:0a:59:a0:4d:0b:3d: 9e:09:79:06:75:9a:6c:2b:cf:5e:7e:f5:90:81:8e: 39:ad:15:f5:13:72:df:18:68:f1:6e:d1:63:44:47: 13:a5:ac:99:42:af:b8:93:66:dc:0c:a1:e8:e4:70: 1c:b3:9b:a8:77:6d:7f:f3:e0:24:4a:1e:6b:bd:0e: 80:62:02:f0:81:fe:5e:a7:af:9a:16:94:b9:42:c7: 02:d8:96:ee:d9:ad:99:29:fe:c2:a7:94:22:d6:38: 0f:2a:e7:8f:fd:3d:1f:df:45:d6:b9:c5:db:31:6a: fc:58:38:7e:9b:50:b1:03:33:30:f0:08:ff:56:d3: a5:7d:01:1a:65:2c:4e:88:f5:13:83:bc:4a:48:9e: 54:33:29:2a:46:9e:dc:45:76:25:d1:cc:22:9f:dc: ea:d0:df:3e:88:ec:4f:d3:4b:29:9f:93:88:bd:ec: b0:0e:15:ec:3e:25:59:4d:28:85:34:b6:c0:ed:fe: 29:bd:fa:9c:86:b6:42:e9:d6:b4:5e:36:9c:41:90: f3:a7:ff:01:a5:ec:ce:8c:94:db:b8:23:6a:92:4a: a8:8a:51:72:3b:ac:77:bf:e2:66:33:44:99:1e:e7: 41:a3:4c:31:d7:d5:fb:44:87:78:5c:da:12:b4:ee: d9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:04:64:AB:CF:7D:3D:44:CA:FC:A4:12:6F:51:2A:EE:21:A4:FF:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/360c6edf-2f89-3639-a3c1-8bed4e0a6dca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:af:6c:89:98:b0:1e:a4:44:38:90:59:19:66:c7:30:13:05: 38:28:f1:94:ea:52:4d:3e:2b:fa:e6:a8:24:ff:5c:85:96:6e: 96:77:ba:cc:f6:ea:f6:7e:3a:83:87:32:a0:22:19:b5:af:6c: 4e:35:56:ef:b6:15:9c:1a:c4:d0:57:d5:5e:1c:1d:9d:ea:90: 34:9c:c1:f6:08:c7:ba:58:f9:47:80:d2:74:72:8d:a1:8f:2d: 0a:14:a4:d0:78:14:dd:a8:f7:88:08:5f:66:b9:f1:48:44:14: d0:b2:04:55:b0:01:65:cf:21:0c:99:97:77:24:83:9a:f9:06: e7:5e:01:55:8c:12:a0:fe:6a:b6:95:8b:8c:50:46:6e:4d:ce: 5a:a6:0f:c5:9b:43:d0:bf:d5:35:41:f2:ad:35:1f:a8:4b:26: 7f:d8:0c:4f:87:64:a0:5b:57:72:e1:b6:42:07:0b:fc:09:2e: 93:43:63:30:b7:86:96:b8:f4:0c:e4:ec:79:84:d9:10:f2:93: 97:3a:51:2a:86:65:51:bb:38:fa:de:db:3c:d6:dd:54:ff:9f: 04:27:81:65:8c:e0:68:c2:0f:c8:64:67:cd:d3:a1:c5:3a:a8: 8d:fd:09:4d:a8:61:bd:0d:1b:7a:97:55:1b:0c:c7:99:3c:e4: 83:a5:e0:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux8nuHLVegeZupkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk NTAwYTA1MzItYTAxNi00NGI1LThlMDktNWZmZGI4ZWI1NTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gzAU7ROG5wKWaBNCz2eCXkGdZpsK89efvWQ gY45rRX1E3LfGGjxbtFjREcTpayZQq+4k2bcDKHo5HAcs5uod21/8+AkSh5rvQ6A YgLwgf5ep6+aFpS5QscC2Jbu2a2ZKf7Cp5Qi1jgPKueP/T0f30XWucXbMWr8WDh+ m1CxAzMw8Aj/VtOlfQEaZSxOiPUTg7xKSJ5UMykqRp7cRXYl0cwin9zq0N8+iOxP 00spn5OIveywDhXsPiVZTSiFNLbA7f4pvfqchrZC6da0XjacQZDzp/8BpezOjJTb uCNqkkqoilFyO6x3v+JmM0SZHudBo0wx19X7RId4XNoStO7ZwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkEZKvPfT1EyvykEm9RKu4hpP+VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzYwYzZlZGYtMmY4OS0z NjM5LWEzYzEtOGJlZDRlMGE2ZGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GBNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2vbImYsB6kRDiQWRlmxzATBTgo8ZTqUk0+K/rmqCT/XIWWbpZ3usz2 6vZ+OoOHMqAiGbWvbE41Vu+2FZwaxNBX1V4cHZ3qkDScwfYIx7pY+UeA0nRyjaGP LQoUpNB4FN2o94gIX2a58UhEFNCyBFWwAWXPIQyZl3ckg5r5BudeAVWMEqD+araV i4xQRm5NzlqmD8WbQ9C/1TVB8q01H6hLJn/YDE+HZKBbV3LhtkIHC/wJLpNDYzC3 hpa49Azk7HmE2RDyk5c6USqGZVG7OPre2zzW3VT/nwQngWWM4GjCD8hkZ83TocU6 qI39CU2oYb0NG3qXVRsMx5k85IOl4PI= -----END CERTIFICATE-----Generated at Wed Nov 5 09:52:03 2025 by rpki-client