$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5882f490-a5be-3610-9c37-d30189e9628d.roa File: 5882f490-a5be-3610-9c37-d30189e9628d.roa (raw, json) Hash identifier: X1C/28n3gzZWe1sf5nUPnwhE5lbYFnXeGmSwdvoMPus= Subject key identifier: EA:2A:FF:90:1A:4D:A4:43:AC:42:82:CB:0B:60:D0:A9:45:7E:99:5A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6BC74588C7113AD72B275000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5882f490-a5be-3610-9c37-d30189e9628d.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 7029 IP address blocks: 72.16.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:45:88:c7:11:3a:d7:2b:27:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=0dd669dc-5323-49b3-9b24-7c44444d4467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b0:17:41:94:ff:99:53:18:1c:57:b1:e3:2e: 91:f8:cf:25:16:3b:5f:5c:dd:03:f0:93:a6:43:48: 6e:36:31:fe:d5:f9:ed:bd:a6:06:c9:b6:37:c1:5a: 72:43:b0:3b:ba:76:3a:17:e4:be:93:89:99:bd:47: 61:59:82:6e:55:d6:8a:13:d9:0c:2d:d3:3b:2b:06: ea:e0:de:d3:53:10:bc:36:90:85:6e:07:52:6e:c0: 10:c5:71:fc:98:66:0d:1e:72:f5:73:89:81:46:45: 44:f4:ba:89:6f:e1:72:7d:29:c3:53:99:66:62:58: 97:aa:0a:ce:bf:29:05:89:ad:27:e2:a8:6d:a7:96: 93:aa:f9:f9:82:6f:10:aa:38:48:f1:84:17:84:42: 49:c3:8f:4e:56:58:57:2b:52:a7:7d:9e:9c:b4:cb: 49:a3:9e:22:ec:b3:0a:77:9f:25:a9:e2:a4:9c:f7: 0d:ec:cd:ac:e9:59:9b:6d:6e:c1:9c:fc:a5:63:45: 91:9b:16:62:09:16:99:ae:f0:1b:7d:37:d6:10:93: 8e:c6:e0:01:93:e7:a4:b5:07:a8:11:ad:32:bb:6e: 25:a0:1d:ff:de:74:1a:b5:01:43:53:b5:cd:ee:d9: e0:ec:a6:4c:d9:4a:a4:07:eb:a1:4e:13:e4:c8:9d: 7b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:2A:FF:90:1A:4D:A4:43:AC:42:82:CB:0B:60:D0:A9:45:7E:99:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5882f490-a5be-3610-9c37-d30189e9628d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:96:df:86:7e:ae:2a:48:59:d3:33:d1:dd:e3:1b:5c:2a:b2: f7:ef:39:58:34:5f:5c:94:fa:5d:e1:15:79:67:89:b3:02:10: f3:69:80:45:bb:f3:be:13:7a:f3:b8:e6:44:aa:28:34:06:42: f4:91:3e:c6:f4:76:37:8c:80:98:40:cf:bb:a4:99:85:84:bd: f6:4b:2b:f3:55:ac:f7:b2:3f:27:fc:c2:82:e6:d1:6d:0c:4e: fc:79:a1:bc:06:88:d1:a0:70:f8:b5:d1:13:86:fc:52:cc:70: 1c:a2:a3:02:39:67:49:e8:2e:7f:93:67:36:81:fc:90:c9:68: e4:b2:61:13:05:f7:67:5d:3c:9a:8f:17:22:c2:cb:c7:a2:e0: 01:c1:40:7c:e8:20:27:21:f5:24:fc:5f:ba:e2:81:92:6d:87: 89:67:0d:de:30:da:10:54:5f:98:d0:bd:ec:30:2b:33:97:25: 0e:25:f1:a1:df:df:9d:2c:e1:ee:60:a3:14:a9:0c:36:a7:49: a8:4b:8f:01:2c:60:6a:bd:93:ac:74:5b:c6:a3:32:86:b5:d7: c6:38:5b:e4:4c:76:cd:6a:f0:6e:24:64:0d:77:4c:61:cf:4d: a7:f1:1c:03:4b:72:e5:87:5e:a0:2f:14:a9:68:66:1a:4e:ed: c0:0a:6e:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx0WIxxE61ysnUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MGRkNjY5ZGMtNTMyMy00OWIzLTliMjQtN2M0NDQ0NGQ0NDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7AXQZT/mVMYHFex4y6R+M8lFjtfXN0D8JOm Q0huNjH+1fntvaYGybY3wVpyQ7A7unY6F+S+k4mZvUdhWYJuVdaKE9kMLdM7Kwbq 4N7TUxC8NpCFbgdSbsAQxXH8mGYNHnL1c4mBRkVE9LqJb+FyfSnDU5lmYliXqgrO vykFia0n4qhtp5aTqvn5gm8QqjhI8YQXhEJJw49OVlhXK1KnfZ6ctMtJo54i7LMK d58lqeKknPcN7M2s6VmbbW7BnPylY0WRmxZiCRaZrvAbfTfWEJOOxuABk+ektQeo Ea0yu24loB3/3nQatQFDU7XN7tng7KZM2UqkB+uhThPkyJ17RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOoq/5AaTaRDrEKCywtg0KlFfplaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTg4MmY0OTAtYTViZS0z NjEwLTljMzctZDMwMTg5ZTk2MjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSBBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+W34Z+ripIWdMz0d3jG1wqsvfvOVg0X1yU+l3hFXlnibMCEPNpgEW7 874TevO45kSqKDQGQvSRPsb0djeMgJhAz7ukmYWEvfZLK/NVrPeyPyf8woLm0W0M Tvx5obwGiNGgcPi10ROG/FLMcByiowI5Z0noLn+TZzaB/JDJaOSyYRMF92ddPJqP FyLCy8ei4AHBQHzoICch9ST8X7rigZJth4lnDd4w2hBUX5jQvewwKzOXJQ4l8aHf 350s4e5goxSpDDanSahLjwEsYGq9k6x0W8ajMoa118Y4W+RMds1q8G4kZA13TGHP TafxHANLcuWHXqAvFKloZhpO7cAKbgI= -----END CERTIFICATE-----Generated at Tue Nov 4 19:16:05 2025 by rpki-client