$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3ce979c3-5559-33b5-8de3-b6b3a98643bd.roa File: 3ce979c3-5559-33b5-8de3-b6b3a98643bd.roa (raw, json) Hash identifier: dwp5oAGrHFbcFmQar6jdzGvegLxXHaBV37fe9XXJKnI= Subject key identifier: 20:95:A7:F8:43:22:7F:35:06:54:77:B3:12:81:96:F6:CD:69:4F:7F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D079835517DDA964C3400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3ce979c3-5559-33b5-8de3-b6b3a98643bd.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 69.40.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:07:98:35:51:7d:da:96:4c:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=fdb7e9a6-6136-4306-863b-283de96e8650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:91:11:d9:bb:b2:7a:a5:4e:c2:12:d5:78:ba: 0d:60:8a:11:4f:f9:27:6b:9e:a1:9f:eb:bc:69:98: dc:8c:05:cf:21:6d:47:bb:80:97:6b:0f:73:d1:c9: 87:22:54:6f:83:58:e9:3d:cc:86:ed:58:b6:a4:e6: 9e:65:0b:d0:84:bb:22:9d:bd:8e:42:e9:98:98:35: c0:de:c4:d3:be:38:9e:02:b7:81:bc:44:75:07:28: e1:96:a0:b9:f6:42:8b:90:e8:d6:48:0a:d9:05:2d: e7:ce:5f:2c:2e:2f:6d:ad:6f:f5:66:f6:c4:f9:06: 20:b9:eb:11:1e:43:2b:cd:38:12:cd:0d:fb:3e:76: bc:5a:86:c6:a4:76:ae:f8:19:6e:ca:36:35:36:01: 39:00:1f:64:7e:19:72:1c:34:ce:91:de:5f:7c:1c: b8:67:b1:75:58:dc:87:4b:51:2d:f1:c2:73:d9:ee: 2a:b8:f6:ee:a0:d6:32:64:00:76:c8:cb:d7:ff:37: 5a:9d:86:5e:09:b1:84:01:9b:84:30:21:8d:cd:e9: 62:9e:6c:c3:37:c1:0c:23:80:e9:12:6c:85:90:f9: c4:99:d1:43:36:2c:a4:7a:71:c3:08:b2:6b:0e:45: fe:92:b4:3a:81:8b:be:7d:0b:a4:38:a2:bb:16:14: 93:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:95:A7:F8:43:22:7F:35:06:54:77:B3:12:81:96:F6:CD:69:4F:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3ce979c3-5559-33b5-8de3-b6b3a98643bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:fb:ed:76:eb:e1:20:a3:fb:b4:4a:77:7f:a5:1f:6e:56:d5: c8:81:e4:52:b3:d6:1f:f6:56:72:0f:75:5c:23:e8:d2:ac:82: 41:99:cb:da:56:89:64:0a:48:b4:c1:40:53:7c:87:a5:32:7e: 32:ce:d1:f6:47:7d:6e:9b:db:13:24:2e:62:9c:7e:5f:b5:0d: f8:88:95:1e:4c:20:c6:ad:82:57:5f:61:67:49:78:b8:49:4b: 16:d9:ce:f6:ee:d7:05:44:7b:95:9b:5b:29:77:a7:d0:e1:1d: a0:e8:89:87:30:51:ea:1b:96:14:d2:82:f3:d5:ca:f2:7a:24: c6:dd:09:74:f1:45:46:9b:f9:a3:1a:86:15:1b:44:e9:70:2c: 29:be:a8:7e:33:c5:b2:db:96:91:02:a5:e9:d6:46:b6:ff:44: 80:85:e7:6a:3d:e8:80:91:9d:ef:4f:1d:77:f6:02:c5:36:8d: f5:14:58:b3:44:31:64:14:ca:57:22:e9:3e:b0:81:b6:ad:88: d0:04:8e:39:68:65:55:56:e8:46:62:09:5c:a2:ed:e5:a8:19: 7f:c7:a3:73:1a:2e:74:79:f7:55:80:d2:93:7b:ef:5e:4d:10: 7c:ec:8f:67:7f:e6:4b:b2:9f:30:92:7e:d3:3d:b7:c3:02:58: 9f:ba:d6:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQeYNVF92pZMNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZmRiN2U5YTYtNjEzNi00MzA2LTg2M2ItMjgzZGU5NmU4NjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZER2buyeqVOwhLVeLoNYIoRT/kna56hn+u8 aZjcjAXPIW1Hu4CXaw9z0cmHIlRvg1jpPcyG7Vi2pOaeZQvQhLsinb2OQumYmDXA 3sTTvjieAreBvER1ByjhlqC59kKLkOjWSArZBS3nzl8sLi9trW/1ZvbE+QYguesR HkMrzTgSzQ37Pna8WobGpHau+BluyjY1NgE5AB9kfhlyHDTOkd5ffBy4Z7F1WNyH S1Et8cJz2e4quPbuoNYyZAB2yMvX/zdanYZeCbGEAZuEMCGNzelinmzDN8EMI4Dp EmyFkPnEmdFDNiykenHDCLJrDkX+krQ6gYu+fQukOKK7FhSTsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCVp/hDIn81BlR3sxKBlvbNaU9/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2NlOTc5YzMtNTU1OS0z M2I1LThkZTMtYjZiM2E5ODY0M2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRSh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAID77Xbr4SCj+7RKd3+lH25W1ciB5FKz1h/2VnIPdVwj6NKsgkGZy9pW iWQKSLTBQFN8h6UyfjLO0fZHfW6b2xMkLmKcfl+1DfiIlR5MIMatgldfYWdJeLhJ SxbZzvbu1wVEe5WbWyl3p9DhHaDoiYcwUeoblhTSgvPVyvJ6JMbdCXTxRUab+aMa hhUbROlwLCm+qH4zxbLblpECpenWRrb/RICF52o96ICRne9PHXf2AsU2jfUUWLNE MWQUylci6T6wgbatiNAEjjloZVVW6EZiCVyi7eWoGX/Ho3MaLnR591WA0pN7715N EHzsj2d/5kuynzCSftM9t8MCWJ+61hM= -----END CERTIFICATE-----Generated at Wed Nov 5 05:03:32 2025 by rpki-client