$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4258c8d9-1bab-31b4-8618-6b310b05ca7c.roa File: 4258c8d9-1bab-31b4-8618-6b310b05ca7c.roa (raw, json) Hash identifier: Qt8IFFX2lpRXXxfu0AKDBguZCFlh/fc8fH3GAz1gBk8= Subject key identifier: B7:C9:21:8F:C5:E8:D1:BC:08:BA:67:27:52:12:BC:D2:2B:63:D3:A4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B970CCA485971E2D21305DD00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4258c8d9-1bab-31b4-8618-6b310b05ca7c.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 7029 IP address blocks: 216.96.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:ca:48:59:71:e2:d2:13:05:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=2d6a9108-ffbc-4a31-b05e-a5371fa3e484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:23:f0:76:24:03:ed:ca:83:2a:ea:3b:51:be: 13:2e:f8:13:8f:d7:f8:10:b9:75:87:d6:e4:9a:a0: ea:e5:55:e9:71:a1:63:5c:5d:4d:49:f8:38:50:48: 62:ee:84:22:28:c3:7f:4a:0d:cf:5b:8a:f5:74:6f: 8b:86:b3:0a:53:e5:58:fe:7a:b2:45:ef:84:4a:4d: 9a:43:70:00:63:29:33:85:c0:9a:cc:df:09:8f:ee: bf:63:75:0b:c4:a2:32:b9:b6:c7:f5:e8:e8:83:ed: b4:29:12:d1:e2:44:c1:82:74:97:f8:97:ff:c6:eb: 2a:cd:74:5c:be:b5:26:7c:32:6c:8f:46:52:70:80: 74:e9:89:cb:c2:3f:e5:7b:ae:cc:d3:d8:a7:5a:e3: 84:06:3b:3e:2b:9b:6d:9c:5a:57:c1:7e:5e:6a:ad: 4e:3e:1e:72:b1:9d:ba:c0:6c:57:64:ad:35:79:d8: 3c:3a:6a:3a:ee:43:65:f8:b7:3f:1b:e6:f8:24:04: a4:3f:e3:4d:f3:2a:e7:b8:9d:65:6e:de:53:7f:6a: d5:9d:66:9e:b7:5a:15:31:2f:83:f6:20:7b:a8:22: 64:a6:52:78:29:8d:d9:38:4f:94:11:2d:a2:b4:59: 5d:27:ca:95:36:19:fc:ed:86:cf:84:05:93:18:6c: 57:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C9:21:8F:C5:E8:D1:BC:08:BA:67:27:52:12:BC:D2:2B:63:D3:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4258c8d9-1bab-31b4-8618-6b310b05ca7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:86:f5:4a:cb:3f:64:22:b0:14:e8:ba:56:9f:d6:c5:e1:04: 6f:5b:78:e6:78:60:0b:0d:bd:00:5d:59:c3:b0:aa:0a:90:f9: 0c:70:7f:22:37:f3:22:97:12:29:3e:ba:b7:8f:ff:4c:d5:6b: cb:28:24:19:a2:79:ea:fe:9a:8e:9f:ff:99:29:46:44:6c:7c: 07:2f:d1:66:4b:65:7c:6c:24:5d:1c:5a:b3:48:11:d2:13:6d: 97:1f:b5:98:b4:20:47:08:57:2a:fa:e8:36:34:66:89:77:f3: 60:10:b7:ba:03:45:5b:4a:84:4e:01:08:21:98:91:de:35:ca: 30:6c:93:93:20:0e:28:17:66:cb:35:d1:07:52:ea:9b:d8:1a: 87:6b:2a:e2:ba:f3:28:39:f1:f4:22:14:1c:8b:e4:b1:c2:3b: b5:88:7d:a5:a4:db:d0:0b:75:b5:bf:fe:f7:02:f9:fe:11:88: 9a:95:af:ac:02:ba:eb:a4:33:ee:b7:61:15:69:52:e8:ae:50: d0:a2:dd:7d:64:22:34:01:da:dc:a7:08:01:4d:3f:18:14:1f: 82:b4:0b:f0:ed:17:d6:f4:9a:36:22:52:d5:29:61:0b:61:84: 3e:01:28:14:86:94:27:2c:ee:c6:cc:ce:b3:04:e1:ec:63:13: 77:6a:aa:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDMpIWXHi0hMF3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MmQ2YTkxMDgtZmZiYy00YTMxLWIwNWUtYTUzNzFmYTNlNDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCPwdiQD7cqDKuo7Ub4TLvgTj9f4ELl1h9bk mqDq5VXpcaFjXF1NSfg4UEhi7oQiKMN/Sg3PW4r1dG+LhrMKU+VY/nqyRe+ESk2a Q3AAYykzhcCazN8Jj+6/Y3ULxKIyubbH9ejog+20KRLR4kTBgnSX+Jf/xusqzXRc vrUmfDJsj0ZScIB06YnLwj/le67M09inWuOEBjs+K5ttnFpXwX5eaq1OPh5ysZ26 wGxXZK01edg8Omo67kNl+Lc/G+b4JASkP+NN8yrnuJ1lbt5Tf2rVnWaet1oVMS+D 9iB7qCJkplJ4KY3ZOE+UES2itFldJ8qVNhn87YbPhAWTGGxX+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfJIY/F6NG8CLpnJ1ISvNIrY9OkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDI1OGM4ZDktMWJhYi0z MWI0LTg2MTgtNmIzMTBiMDVjYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GBJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiG9UrLP2QisBToulaf1sXhBG9beOZ4YAsNvQBdWcOwqgqQ+QxwfyI3 8yKXEik+ureP/0zVa8soJBmieer+mo6f/5kpRkRsfAcv0WZLZXxsJF0cWrNIEdIT bZcftZi0IEcIVyr66DY0Zol382AQt7oDRVtKhE4BCCGYkd41yjBsk5MgDigXZss1 0QdS6pvYGodrKuK68yg58fQiFByL5LHCO7WIfaWk29ALdbW//vcC+f4RiJqVr6wC uuukM+63YRVpUuiuUNCi3X1kIjQB2tynCAFNPxgUH4K0C/DtF9b0mjYiUtUpYQth hD4BKBSGlCcs7sbMzrME4exjE3dqqr4= -----END CERTIFICATE-----Generated at Tue Nov 4 16:58:05 2025 by rpki-client