$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5dae7c24-e4d7-33ee-96fd-b80628dcbf04.roa File: 5dae7c24-e4d7-33ee-96fd-b80628dcbf04.roa (raw, json) Hash identifier: QcCWyqYWWcI0Jcg276dEHIIZkYqpdocoA9y+Q8JEvyk= Subject key identifier: 47:D2:0E:DB:40:8E:C1:51:51:B0:88:EA:10:5D:B2:2E:2C:BF:1C:13 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE405446E8C12DD884564880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5dae7c24-e4d7-33ee-96fd-b80628dcbf04.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 69.40.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:54:46:e8:c1:2d:d8:84:56:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=75d0caba-fff2-45b9-918d-7550a234bd13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:38:7d:1c:d9:c1:72:0a:3d:49:c6:76:f9:4d: 7a:89:bd:29:59:2b:90:e3:2a:1d:73:18:c9:74:35: 8b:95:bc:6e:b9:93:58:9f:40:9f:fe:9d:bb:f6:fd: 34:a7:9f:29:f4:5e:36:06:83:41:1c:41:45:fd:0c: 09:16:3c:57:0d:be:de:55:7a:c3:c3:3c:09:0c:db: a7:bb:9e:1a:1a:ed:09:96:f1:53:3a:29:aa:0a:cb: 1f:51:93:83:23:11:de:66:2f:19:89:d4:1a:fb:31: 94:e5:3d:86:35:ae:5a:13:c5:c7:9f:e9:88:9d:ee: 27:42:60:82:1c:43:db:a6:40:b1:7c:cc:e2:cb:1c: 48:d4:79:1d:bd:b4:1c:fc:2c:7c:64:1c:c4:50:86: 3b:34:20:00:93:8d:97:e7:39:c3:78:a5:33:c2:ad: b0:8b:bb:8d:a9:ff:91:f3:82:5a:ee:35:1a:03:fb: 19:2d:08:66:3a:ee:e1:15:08:f5:c1:50:63:b8:fe: ce:21:8c:64:eb:aa:c2:92:ea:0e:10:95:aa:60:e9: a9:82:e1:31:da:63:04:da:0f:4e:86:c9:89:6e:84: 60:7f:84:10:cb:17:ba:70:02:c7:72:18:33:f9:69: 94:e6:bf:e6:94:c5:9d:78:c9:05:cf:9f:24:a4:3d: 26:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D2:0E:DB:40:8E:C1:51:51:B0:88:EA:10:5D:B2:2E:2C:BF:1C:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5dae7c24-e4d7-33ee-96fd-b80628dcbf04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:8d:23:b6:39:99:7d:e8:d9:68:2d:2b:1e:f7:e5:37:e1:35: 74:bd:67:30:75:c6:81:5e:f2:26:ad:d8:bd:59:c9:a4:1f:5a: 2c:3a:14:4e:7e:75:52:97:9a:00:8a:30:de:26:47:19:a0:76: 73:0f:8f:4e:42:04:f5:fb:65:4b:12:6b:e7:f0:bf:c1:01:55: 0c:b7:eb:a4:0c:6f:80:02:e4:f2:bf:39:d9:fb:43:26:cf:b6: de:d8:f6:b6:bc:05:44:d1:89:31:f4:1f:0d:20:72:c0:f9:04: 2f:63:32:7b:b5:7a:0a:cf:11:f7:8c:c5:4d:a9:5b:27:cf:52: ef:d1:01:61:f1:ea:c3:4f:7d:7c:d0:97:e2:60:ca:67:71:5b: aa:0e:9f:3c:cc:e3:e9:0f:83:48:18:aa:d5:d0:e8:3b:cd:79: 9f:3c:5c:6b:a4:51:8b:fc:49:c5:3a:13:5b:e1:50:11:71:67: ea:41:68:ac:f3:26:6b:a1:cb:70:e1:38:4f:12:d6:4f:8e:e5: 91:4d:53:8f:5a:8e:fa:d9:1a:e3:a1:59:7c:71:d5:a7:67:d9: b2:39:58:bc:78:b8:96:e0:4f:51:ba:25:39:d3:79:fb:cc:fd: c7:9d:2f:c1:62:aa:22:7f:58:a3:a5:79:da:e9:05:60:f1:8d: e9:0a:c7:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFRG6MEt2IRWSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NzVkMGNhYmEtZmZmMi00NWI5LTkxOGQtNzU1MGEyMzRiZDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTh9HNnBcgo9ScZ2+U16ib0pWSuQ4yodcxjJ dDWLlbxuuZNYn0Cf/p279v00p58p9F42BoNBHEFF/QwJFjxXDb7eVXrDwzwJDNun u54aGu0JlvFTOimqCssfUZODIxHeZi8ZidQa+zGU5T2GNa5aE8XHn+mIne4nQmCC HEPbpkCxfMziyxxI1HkdvbQc/Cx8ZBzEUIY7NCAAk42X5znDeKUzwq2wi7uNqf+R 84Ja7jUaA/sZLQhmOu7hFQj1wVBjuP7OIYxk66rCkuoOEJWqYOmpguEx2mME2g9O hsmJboRgf4QQyxe6cALHchgz+WmU5r/mlMWdeMkFz58kpD0mswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfSDttAjsFRUbCI6hBdsi4svxwTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWRhZTdjMjQtZTRkNy0z M2VlLTk2ZmQtYjgwNjI4ZGNiZjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRSgOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaNI7Y5mX3o2WgtKx735TfhNXS9ZzB1xoFe8iat2L1ZyaQfWiw6FE5+ dVKXmgCKMN4mRxmgdnMPj05CBPX7ZUsSa+fwv8EBVQy366QMb4AC5PK/Odn7QybP tt7Y9ra8BUTRiTH0Hw0gcsD5BC9jMnu1egrPEfeMxU2pWyfPUu/RAWHx6sNPfXzQ l+JgymdxW6oOnzzM4+kPg0gYqtXQ6DvNeZ88XGukUYv8ScU6E1vhUBFxZ+pBaKzz Jmuhy3DhOE8S1k+O5ZFNU49ajvrZGuOhWXxx1adn2bI5WLx4uJbgT1G6JTnTefvM /cedL8FiqiJ/WKOledrpBWDxjekKxxw= -----END CERTIFICATE-----Generated at Tue Nov 4 19:14:56 2025 by rpki-client