$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5400a5f1-6b08-3c9e-9e25-22d26516e4af.roa File: 5400a5f1-6b08-3c9e-9e25-22d26516e4af.roa (raw, json) Hash identifier: u3rhnZMp6u77HhLfJrDMpyppZIud4MWjY+/GtwqaKO0= Subject key identifier: 91:B9:54:B8:72:B0:32:76:C9:F9:59:FB:89:C4:97:29:23:9E:AA:F5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2CA77BCC90BBABB203E280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5400a5f1-6b08-3c9e-9e25-22d26516e4af.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 173.185.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:a7:7b:cc:90:bb:ab:b2:03:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=a2f9ba92-54fc-4cdf-bea0-2a03a14ef6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c9:83:f0:47:52:4d:76:61:0e:07:33:de:f3: c9:3e:95:80:a6:c1:5a:7b:16:60:02:b4:07:03:a6: 48:3c:0e:85:bc:ae:5a:a3:d4:af:be:be:2c:25:10: 44:e4:92:92:72:f0:3b:20:91:63:74:35:94:d1:ef: 10:fe:e4:92:42:59:79:a0:a5:df:87:62:e1:40:f2: 31:27:ae:e4:cf:8a:57:34:61:65:b9:53:e4:a8:4b: 66:a8:d9:41:b3:48:6a:d0:8a:21:9c:3c:23:6c:c1: fb:ce:8e:3d:3b:8a:53:6b:67:f7:d8:83:4e:5e:57: 63:bf:90:f9:6f:e5:4b:fb:ff:2d:5d:96:99:72:32: 9f:7d:fc:d5:8c:d0:5b:a0:88:74:39:72:09:da:9e: 6e:5e:63:a3:21:38:e8:f1:dd:49:c2:5a:d7:ad:58: 9c:bf:6f:bf:89:b3:f9:2f:54:ca:88:b7:21:ee:c2: de:8f:3b:ea:5c:e6:c5:4e:b0:51:50:d7:0a:6e:38: 13:63:f8:c1:7b:ef:f7:4b:ef:06:76:21:1e:3e:5f: c2:fb:36:aa:94:48:ce:eb:d4:4d:b0:b0:05:21:f8: 41:6f:a5:39:bb:8e:30:01:c1:64:f7:d4:07:df:83: ac:b4:b7:88:45:e9:ea:bc:e5:1b:58:d4:bd:02:f1: d5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B9:54:B8:72:B0:32:76:C9:F9:59:FB:89:C4:97:29:23:9E:AA:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5400a5f1-6b08-3c9e-9e25-22d26516e4af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:82:1f:58:35:a9:e5:4c:e9:d1:3d:92:96:1b:e5:5a:c1:ad: 0d:74:4d:84:12:08:d0:3c:5d:b0:0d:7a:25:39:91:94:e7:2d: fa:9e:db:91:b5:2a:da:a9:6e:9f:9c:a2:d8:60:44:74:80:60: 09:d4:d8:d5:b8:82:43:84:d1:cb:b8:02:b4:2d:31:90:1f:af: 06:60:3a:32:e1:98:ae:67:41:bf:87:6e:d6:84:08:a0:22:bd: 4d:a7:f1:c2:97:4f:45:f2:b5:ae:2b:d8:a6:c7:ca:cb:22:9f: a9:39:b3:4b:af:4a:79:78:fd:17:8e:b0:2e:a5:22:c8:77:fd: 2c:e2:23:44:b6:0f:19:d0:19:81:a7:11:fc:e3:85:a0:e9:06: 52:eb:31:e4:d5:e3:9d:89:33:75:64:e9:d5:88:c3:33:60:fb: ea:e5:82:aa:ab:78:d2:98:e8:ba:f5:6e:3e:f8:0e:99:1e:cc: 57:b0:95:32:fb:80:56:95:ae:46:13:1b:c7:3c:71:82:9e:e2: 2f:4a:22:f0:fe:44:94:69:a0:16:21:b3:e2:23:55:d3:18:d3: f2:9d:75:3d:56:63:3e:b9:ad:10:2c:92:23:36:2d:de:75:5d: 59:9a:3c:e2:e4:0b:68:99:90:67:ec:89:fa:1f:d0:ae:6e:bd: 6c:78:ad:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLKd7zJC7q7ID4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YTJmOWJhOTItNTRmYy00Y2RmLWJlYTAtMmEwM2ExNGVmNmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMmD8EdSTXZhDgcz3vPJPpWApsFaexZgArQH A6ZIPA6FvK5ao9Svvr4sJRBE5JKScvA7IJFjdDWU0e8Q/uSSQll5oKXfh2LhQPIx J67kz4pXNGFluVPkqEtmqNlBs0hq0IohnDwjbMH7zo49O4pTa2f32INOXldjv5D5 b+VL+/8tXZaZcjKfffzVjNBboIh0OXIJ2p5uXmOjITjo8d1JwlrXrVicv2+/ibP5 L1TKiLch7sLejzvqXObFTrBRUNcKbjgTY/jBe+/3S+8GdiEePl/C+zaqlEjO69RN sLAFIfhBb6U5u44wAcFk99QH34OstLeIRenqvOUbWNS9AvHVGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJG5VLhysDJ2yflZ+4nElykjnqr1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTQwMGE1ZjEtNmIwOC0z YzllLTllMjUtMjJkMjY1MTZlNGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASCH1g1qeVM6dE9kpYb5VrBrQ10TYQSCNA8XbANeiU5kZTnLfqe25G1 Ktqpbp+cothgRHSAYAnU2NW4gkOE0cu4ArQtMZAfrwZgOjLhmK5nQb+HbtaECKAi vU2n8cKXT0Xyta4r2KbHyssin6k5s0uvSnl4/ReOsC6lIsh3/SziI0S2DxnQGYGn EfzjhaDpBlLrMeTV452JM3Vk6dWIwzNg++rlgqqreNKY6Lr1bj74DpkezFewlTL7 gFaVrkYTG8c8cYKe4i9KIvD+RJRpoBYhs+IjVdMY0/KddT1WYz65rRAskiM2Ld51 XVmaPOLkC2iZkGfsifof0K5uvWx4rfU= -----END CERTIFICATE-----Generated at Wed Nov 5 16:21:35 2025 by rpki-client