$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6843534b-1a43-3625-8e71-418959811e16.roa File: 6843534b-1a43-3625-8e71-418959811e16.roa (raw, json) Hash identifier: WFT1MV5SPVmgci/bALTVKAwOH8ypsGQHjqy76PotDZk= Subject key identifier: EF:4D:98:76:8F:9F:67:6B:02:9F:45:DD:2C:65:A6:04:92:20:6D:C2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CD0F9C94B41B7E0CE8A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6843534b-1a43-3625-8e71-418959811e16.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 20458 IP address blocks: 216.204.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:d0:f9:c9:4b:41:b7:e0:ce:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=cd325db4-22ce-461c-b17f-f7fc958f09cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3f:9e:c3:8d:02:2f:12:01:43:c5:96:4e:0f: 13:2b:0b:93:c7:87:ad:4a:ce:b4:14:62:90:a7:d4: 1b:9a:43:79:38:d6:26:a0:a3:6a:15:07:6e:2c:e0: 2b:e1:6b:b6:20:15:99:de:7d:2f:ad:3e:bf:5b:9a: 5d:80:e9:60:b9:1c:46:1e:44:df:cf:ad:e2:69:4d: 2d:33:1b:dc:15:00:74:4e:8f:21:08:08:98:10:d4: 60:5c:0d:eb:f5:6a:c1:56:3f:ed:99:9c:ec:aa:b8: a1:87:39:2a:9d:0e:67:86:29:8d:3c:25:aa:1e:2c: 51:1d:6d:e4:58:9e:cc:1e:b6:6a:f9:ff:8d:19:46: f9:40:54:84:17:18:e9:d4:78:d9:fa:41:83:ee:5c: da:35:49:20:64:3a:7f:94:9e:10:ad:72:3a:1d:9a: e2:00:48:ec:1a:60:b9:13:be:64:0c:55:55:55:75: 67:e5:27:5d:3a:ca:ed:e3:40:18:bc:44:cd:4e:fd: 7b:4b:c0:0f:8a:fe:a9:7d:3b:27:b9:99:75:1a:e7: f6:5a:3e:f6:31:b7:18:44:66:ed:a4:b2:52:4c:c6: 1a:08:20:d6:3f:d7:c2:ce:ec:9a:b1:1b:58:e3:98: bb:52:01:29:de:c4:80:b1:96:6a:48:8e:6c:ec:1d: 94:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4D:98:76:8F:9F:67:6B:02:9F:45:DD:2C:65:A6:04:92:20:6D:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6843534b-1a43-3625-8e71-418959811e16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.204.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:01:e1:e0:13:df:e2:49:d8:f8:8f:a8:c8:49:93:bc:26:e9: 14:d7:f5:64:37:5b:8c:9b:fe:f3:11:f5:27:1c:71:08:87:6c: f4:47:a3:8b:5f:c8:09:ad:1f:85:0a:f5:17:1f:94:cc:fb:d2: 35:37:ff:fd:8a:46:c2:d7:9d:99:54:23:89:25:19:0e:5d:4d: 7d:2d:68:f0:5f:a9:6e:d8:02:12:ce:08:5b:5e:b0:be:87:43: de:16:44:dd:0b:5e:30:e8:d2:f8:bd:56:1e:9e:44:a0:10:3e: 28:f4:9d:b4:69:c6:3b:7a:c7:89:4f:a5:32:b3:0a:6c:61:b8: a3:44:0d:34:94:2e:cc:48:ee:67:dd:67:2b:8a:3d:e8:c8:ca: ed:27:17:94:0d:86:e5:20:0b:dd:57:36:d9:49:69:e7:8e:fa: 53:0b:fb:59:3e:3e:5b:e5:81:ab:e2:4c:41:31:14:19:1a:45: 62:61:35:b3:67:04:2e:eb:ac:d6:fe:0b:ee:19:32:9a:79:f5: fa:c3:b8:a5:c6:f5:a1:b5:96:af:a3:b1:de:40:3c:79:47:1d: dd:58:8f:7d:ea:db:6b:d3:53:df:60:87:b9:c4:20:f9:06:00: f4:bb:bd:8c:30:bc:7a:49:ce:0a:9a:08:31:97:30:ed:b7:1e: 2f:56:14:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXND5yUtBt+DOigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk Y2QzMjVkYjQtMjJjZS00NjFjLWIxN2YtZjdmYzk1OGYwOWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj+ew40CLxIBQ8WWTg8TKwuTx4etSs60FGKQ p9QbmkN5ONYmoKNqFQduLOAr4Wu2IBWZ3n0vrT6/W5pdgOlguRxGHkTfz63iaU0t MxvcFQB0To8hCAiYENRgXA3r9WrBVj/tmZzsqrihhzkqnQ5nhimNPCWqHixRHW3k WJ7MHrZq+f+NGUb5QFSEFxjp1HjZ+kGD7lzaNUkgZDp/lJ4QrXI6HZriAEjsGmC5 E75kDFVVVXVn5SddOsrt40AYvETNTv17S8APiv6pfTsnuZl1Guf2Wj72MbcYRGbt pLJSTMYaCCDWP9fCzuyasRtY45i7UgEp3sSAsZZqSI5s7B2U6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9NmHaPn2drAp9F3SxlpgSSIG3CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjg0MzUzNGItMWE0My0z NjI1LThlNzEtNDE4OTU5ODExZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2MyUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQB4eAT3+JJ2PiPqMhJk7wm6RTX9WQ3W4yb/vMR9ScccQiHbPRHo4tf yAmtH4UK9RcflMz70jU3//2KRsLXnZlUI4klGQ5dTX0taPBfqW7YAhLOCFtesL6H Q94WRN0LXjDo0vi9Vh6eRKAQPij0nbRpxjt6x4lPpTKzCmxhuKNEDTSULsxI7mfd ZyuKPejIyu0nF5QNhuUgC91XNtlJaeeO+lML+1k+PlvlgaviTEExFBkaRWJhNbNn BC7rrNb+C+4ZMpp59frDuKXG9aG1lq+jsd5APHlHHd1Yj33q22vTU99gh7nEIPkG APS7vYwwvHpJzgqaCDGXMO23Hi9WFJs= -----END CERTIFICATE-----Generated at Wed Nov 5 01:58:37 2025 by rpki-client