$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe83f2-c885-35f1-b7e2-f90cf77fad87.roa File: 3bfe83f2-c885-35f1-b7e2-f90cf77fad87.roa (raw, json) Hash identifier: P3x+K1nlLGCldF/CutJJ5b7mnfFhvb2LVStjQBck4oM= Subject key identifier: AA:25:C2:30:72:88:99:EC:39:D6:71:36:C5:D8:37:17:14:19:EA:1D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC5E1BBE695F7C2533E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe83f2-c885-35f1-b7e2-f90cf77fad87.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 139.55.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c5:e1:bb:e6:95:f7:c2:53:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=4c34a737-73cc-4d85-821c-1759dd736dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b3:2e:86:74:73:93:24:39:66:8f:ed:00:3b: 8d:a4:ee:6e:22:ec:c7:95:b9:cb:e0:25:ba:78:3c: 15:e7:ee:63:ab:22:ed:e6:e3:4b:2d:6a:e6:62:c9: f8:86:c2:4f:62:d5:7e:1f:f6:f5:7f:da:09:d9:00: 85:24:e8:80:04:a6:42:c4:a6:83:ac:ed:16:c4:5e: 2a:0e:e6:28:b3:ce:9f:70:b2:52:b9:0e:76:b0:27: 00:31:59:1f:d5:3a:09:e1:83:84:54:28:f7:0d:7b: 2b:8f:73:07:2d:22:24:c8:13:f1:36:1d:e4:f6:a1: 2e:3d:2e:e2:13:c8:99:44:68:38:f0:33:19:25:c4: aa:8d:99:26:b5:8b:8f:5f:59:ab:e9:98:2c:cf:16: 43:1c:3a:7c:3d:9b:db:3a:06:7d:c8:7d:d4:1a:8e: 1b:63:86:43:c4:87:08:4e:d3:52:ec:56:54:c1:d1: d7:7d:d8:04:db:91:da:b1:5c:5e:b0:4d:72:4c:1e: e6:c6:21:b1:d0:66:68:77:a7:5d:e6:12:74:05:28: c3:96:41:25:09:f3:ee:e6:3d:e9:16:c7:a8:03:bf: a9:42:98:76:28:13:a0:04:53:d8:9f:00:7c:5f:75: 61:47:63:a4:34:14:a9:6a:d2:dc:34:6b:97:82:80: 4f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:25:C2:30:72:88:99:EC:39:D6:71:36:C5:D8:37:17:14:19:EA:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe83f2-c885-35f1-b7e2-f90cf77fad87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 139.55.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:18:de:37:cb:4e:59:6a:31:2b:cb:07:d6:9b:39:62:39:55: 7a:7e:1e:a9:dd:3c:75:57:55:60:ee:ef:4a:89:e1:fd:dd:b1: ec:4e:fd:c2:51:85:ee:c7:18:e0:c7:2a:67:e9:a4:25:65:ca: f8:36:c3:5c:34:ba:89:a2:0a:30:7a:92:a3:04:15:4d:23:a8: 36:17:86:68:93:0e:8a:68:e5:e2:14:c7:d4:84:06:9d:26:c4: 6c:b4:ae:56:c1:1b:3c:eb:48:73:1a:03:59:c6:bb:73:34:ad: 4f:f2:52:68:55:2e:03:df:bd:49:99:19:2c:0e:e4:7b:b6:4e: 04:a5:ff:b9:a4:69:8e:d4:df:a7:50:0f:7c:ce:78:59:88:23: dc:a6:d9:ba:0d:57:ca:a1:f9:91:c7:7f:2b:5f:5c:16:31:1c: 27:ea:32:8f:1e:72:ea:92:ae:0a:1d:c2:66:2d:12:b9:c1:52: a0:02:70:a2:89:3d:e0:f9:a9:83:62:b5:24:7b:8a:a8:e6:4c: 92:1f:35:d9:01:34:b7:37:49:e3:30:62:19:75:fd:65:bd:8d: c3:21:a7:5c:61:a8:15:93:02:f3:64:6e:4a:5a:31:6e:be:98: 55:06:0a:72:e8:1f:bf:d1:80:87:0f:b6:83:89:e5:24:55:ac: 5b:3f:19:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMXhu+aV98JTPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NGMzNGE3MzctNzNjYy00ZDg1LTgyMWMtMTc1OWRkNzM2ZGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibMuhnRzkyQ5Zo/tADuNpO5uIuzHlbnL4CW6 eDwV5+5jqyLt5uNLLWrmYsn4hsJPYtV+H/b1f9oJ2QCFJOiABKZCxKaDrO0WxF4q DuYos86fcLJSuQ52sCcAMVkf1ToJ4YOEVCj3DXsrj3MHLSIkyBPxNh3k9qEuPS7i E8iZRGg48DMZJcSqjZkmtYuPX1mr6ZgszxZDHDp8PZvbOgZ9yH3UGo4bY4ZDxIcI TtNS7FZUwdHXfdgE25HasVxesE1yTB7mxiGx0GZod6dd5hJ0BSjDlkElCfPu5j3p FseoA7+pQph2KBOgBFPYnwB8X3VhR2OkNBSpatLcNGuXgoBPLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKolwjByiJnsOdZxNsXYNxcUGeodMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2JmZTgzZjItYzg4NS0z NWYxLWI3ZTItZjkwY2Y3N2ZhZDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCizfoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUY3jfLTllqMSvLB9abOWI5VXp+HqndPHVXVWDu70qJ4f3dsexO/cJR he7HGODHKmfppCVlyvg2w1w0uomiCjB6kqMEFU0jqDYXhmiTDopo5eIUx9SEBp0m xGy0rlbBGzzrSHMaA1nGu3M0rU/yUmhVLgPfvUmZGSwO5Hu2TgSl/7mkaY7U36dQ D3zOeFmII9ym2boNV8qh+ZHHfytfXBYxHCfqMo8ecuqSrgodwmYtErnBUqACcKKJ PeD5qYNitSR7iqjmTJIfNdkBNLc3SeMwYhl1/WW9jcMhp1xhqBWTAvNkbkpaMW6+ mFUGCnLoH7/RgIcPtoOJ5SRVrFs/GQQ= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:05 2025 by rpki-client