$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c37d95c-bf60-36d3-9840-811464402df8.roa File: 4c37d95c-bf60-36d3-9840-811464402df8.roa (raw, json) Hash identifier: SwEVq36aQab0QIUhogbJDcMOTcVXqD+Oe5Z4JFZcGpM= Subject key identifier: 01:60:65:04:98:04:F6:E3:3E:C9:9E:D1:9D:2B:93:27:69:68:06:BA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE404B680F5FE1BD12A81C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c37d95c-bf60-36d3-9840-811464402df8.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 72.16.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:4b:68:0f:5f:e1:bd:12:a8:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=5ef37176-e962-465b-8bad-95156c1afb27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:56:26:43:c6:6e:93:97:f0:09:95:86:df:b4: 76:9c:8f:34:48:23:d2:90:0a:f8:b2:42:84:de:91: 68:c8:4b:cd:83:8c:cc:1b:eb:a9:d4:3a:77:5a:92: 14:0c:6b:e5:f2:41:e3:12:35:c8:51:33:c5:0b:2a: 4f:a4:ff:41:9e:3f:33:9a:24:95:d2:35:ca:38:58: 10:a6:35:a5:70:14:8f:2f:a2:ec:62:56:f6:3c:d3: 5a:49:f3:ec:57:69:3c:43:bc:45:9f:1a:a5:40:62: f2:e3:9a:20:14:9a:c7:94:fe:22:f9:27:df:b4:fc: f6:7f:e9:4b:db:2b:bf:e5:58:5b:86:34:bf:81:0b: 86:70:a4:f9:20:5f:5f:e2:c4:bf:b0:ef:b1:34:27: d3:b1:4d:cc:27:ac:c5:d0:ec:64:c8:62:55:e9:29: 5a:71:8a:df:5e:66:aa:73:dd:50:ba:42:a7:1b:d1: b3:64:18:cb:f0:aa:2f:24:f9:b9:1a:94:41:5d:cc: aa:8f:9b:7b:e6:65:64:91:45:62:4a:73:3e:1e:d8: 30:cb:bf:53:fb:c2:3a:ab:0b:f4:3f:44:ba:3a:f0: 15:82:ff:8a:67:0c:ad:90:03:87:ab:20:71:20:23: 68:01:f5:61:36:69:58:e6:95:79:3b:6b:bd:72:6e: bf:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:60:65:04:98:04:F6:E3:3E:C9:9E:D1:9D:2B:93:27:69:68:06:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c37d95c-bf60-36d3-9840-811464402df8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:da:df:e0:bb:d3:df:4f:20:9c:f1:dc:fa:17:37:39:fc:0f: e6:4a:67:ff:66:0d:9c:54:b8:36:56:9d:d5:58:b0:d4:13:ee: 0e:0e:8f:89:f2:e0:d4:8f:f0:38:e7:35:e2:1b:79:58:ee:1e: 48:ad:ea:db:9e:4b:e5:30:0e:1c:0a:14:13:7e:11:b2:50:99: ef:b8:4f:ce:a7:4e:e5:45:9b:a6:f5:be:6d:52:75:93:c3:56: 36:90:a8:93:51:c9:ff:90:4a:17:58:47:5a:fc:59:22:62:b2: e6:87:32:a4:6a:6e:e5:f4:40:52:13:01:21:ec:f8:c3:e1:23: 55:c2:f1:16:d2:92:4b:ac:39:fe:98:bf:59:26:79:5e:ad:d1: 63:29:0c:e2:f6:ff:2c:9e:bf:f9:f2:74:24:83:0e:42:d8:11: 79:0b:be:d1:36:80:40:d4:2a:b8:61:3c:6b:1a:35:85:a6:6a: 19:d1:f7:3c:7c:39:09:53:02:81:04:e4:ec:3c:17:fc:3c:00: 4d:60:02:81:61:b0:c9:59:98:a5:5a:30:2f:75:b1:c3:0c:88: ef:4a:6e:85:98:31:07:7a:94:02:52:22:60:b6:0d:3b:cb:2e: 96:83:ab:db:ca:4c:38:ea:f8:f0:b0:3e:75:b8:f9:0b:ef:46: a1:00:98:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEtoD1/hvRKoHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NWVmMzcxNzYtZTk2Mi00NjViLThiYWQtOTUxNTZjMWFmYjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFYmQ8Zuk5fwCZWG37R2nI80SCPSkAr4skKE 3pFoyEvNg4zMG+up1Dp3WpIUDGvl8kHjEjXIUTPFCypPpP9Bnj8zmiSV0jXKOFgQ pjWlcBSPL6LsYlb2PNNaSfPsV2k8Q7xFnxqlQGLy45ogFJrHlP4i+SfftPz2f+lL 2yu/5VhbhjS/gQuGcKT5IF9f4sS/sO+xNCfTsU3MJ6zF0OxkyGJV6SlacYrfXmaq c91QukKnG9GzZBjL8KovJPm5GpRBXcyqj5t75mVkkUViSnM+Htgwy79T+8I6qwv0 P0S6OvAVgv+KZwytkAOHqyBxICNoAfVhNmlY5pV5O2u9cm6/eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFgZQSYBPbjPsme0Z0rkydpaAa6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGMzN2Q5NWMtYmY2MC0z NmQzLTk4NDAtODExNDY0NDAyZGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBAeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABva3+C7099PIJzx3PoXNzn8D+ZKZ/9mDZxUuDZWndVYsNQT7g4Oj4ny 4NSP8DjnNeIbeVjuHkit6tueS+UwDhwKFBN+EbJQme+4T86nTuVFm6b1vm1SdZPD VjaQqJNRyf+QShdYR1r8WSJisuaHMqRqbuX0QFITASHs+MPhI1XC8RbSkkusOf6Y v1kmeV6t0WMpDOL2/yyev/nydCSDDkLYEXkLvtE2gEDUKrhhPGsaNYWmahnR9zx8 OQlTAoEE5Ow8F/w8AE1gAoFhsMlZmKVaMC91scMMiO9KboWYMQd6lAJSImC2DTvL LpaDq9vKTDjq+PCwPnW4+QvvRqEAmO8= -----END CERTIFICATE-----Generated at Tue Nov 4 17:00:27 2025 by rpki-client