$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ad790f0-7776-3000-9f07-d7b9e124a34f.roa File: 6ad790f0-7776-3000-9f07-d7b9e124a34f.roa (raw, json) Hash identifier: dvEUbN1Dqxm/j7hL1Gt7LnboXciTiC6kx/lL0AfIvjE= Subject key identifier: 50:8B:61:75:D6:5B:17:C2:6B:C3:65:83:3B:57:43:DF:1C:A5:B6:E9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B95A87FADB132451CBD149100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ad790f0-7776-3000-9f07-d7b9e124a34f.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7029 IP address blocks: 216.96.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:7f:ad:b1:32:45:1c:bd:14:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=2ad7f6ae-9f07-4dca-bdf7-8dce13aa7e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cf:53:1f:73:dd:21:d1:d7:21:83:4e:03:44: 64:b2:37:6e:97:e5:80:c8:5c:18:aa:92:f3:4a:b4: dd:e9:26:ba:52:ee:12:5f:a6:57:59:2f:01:0e:e0: aa:9e:85:4c:35:7d:78:9a:ec:50:e0:9f:1b:6c:dd: 41:b9:0f:66:1f:3a:84:de:19:c7:f0:a5:29:09:97: 29:2d:bd:f7:3f:1d:54:b9:ce:3a:a3:57:87:b8:a7: e6:0f:da:f4:28:26:dc:47:86:14:da:2b:7e:06:56: 79:9d:6d:f3:a1:65:eb:2d:2d:3c:f5:e4:08:3f:2c: 91:f1:92:89:84:da:d7:9d:8e:30:3e:ce:5f:d1:7b: 52:1c:e0:fc:04:8c:39:29:f2:af:e9:50:60:4f:74: f5:f8:95:de:f0:6f:d8:26:45:97:50:91:33:ba:92: 71:81:f2:de:6a:94:3d:2d:66:e6:f1:19:e8:cb:cd: 54:da:4d:4a:38:5d:7a:00:bb:f3:6b:84:02:3a:25: da:08:54:91:28:23:e1:6d:96:13:11:74:7e:6d:15: ca:25:fd:9f:38:71:4c:aa:26:9b:39:1a:19:9b:0b: 9f:98:d7:9d:84:2c:80:09:c0:87:ee:88:fc:e7:4b: 5e:0b:e9:db:7b:ae:37:39:96:f5:8b:b2:e7:a7:05: 79:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:8B:61:75:D6:5B:17:C2:6B:C3:65:83:3B:57:43:DF:1C:A5:B6:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ad790f0-7776-3000-9f07-d7b9e124a34f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:40:7f:9b:7e:a7:7c:87:fd:1d:6b:64:08:30:8e:a5:34:cf: fd:43:de:c4:08:2b:e3:ca:94:73:b0:1e:fb:61:0b:63:3b:44: 19:f8:ad:62:0e:4c:5f:63:fa:99:c0:a2:0d:f5:8b:33:d2:2a: c9:78:7e:e2:6a:fc:d8:b7:de:96:74:5f:0c:18:6c:b3:5d:b4: 87:66:4a:ae:5a:38:9f:d9:d0:d1:8a:f0:fc:e5:ad:bb:56:22: 18:3a:d0:5c:18:e6:fd:0f:65:26:0a:56:b7:e8:e4:c6:7e:1f: 25:50:a4:1d:fb:a6:f7:87:93:7b:58:b5:aa:4d:38:26:dc:f9: 3e:29:6c:94:8c:69:8f:d8:09:ef:98:bc:aa:99:9c:85:8c:e0: 71:18:0b:43:a6:36:d2:55:b8:f8:e9:e1:f0:9f:7b:08:b9:39: 91:d3:9b:6a:fd:42:67:f5:ac:55:90:03:9f:33:0e:95:3c:a1: 79:b7:8c:36:0e:26:e6:92:26:36:76:1d:1d:e5:87:42:c6:9f: fa:b1:c0:c7:c6:ac:4d:44:2b:b2:2b:c0:ca:1a:ed:a6:5b:25: 3a:32:03:34:2b:a4:f4:30:f5:3d:78:ae:9a:de:a3:10:5e:9f: 62:4a:a3:25:ec:4e:82:0c:8a:6f:a8:f9:05:de:6a:28:47:8e: 88:22:4f:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqH+tsTJFHL0UkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MmFkN2Y2YWUtOWYwNy00ZGNhLWJkZjctOGRjZTEzYWE3ZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc9TH3PdIdHXIYNOA0Rksjdul+WAyFwYqpLz SrTd6Sa6Uu4SX6ZXWS8BDuCqnoVMNX14muxQ4J8bbN1BuQ9mHzqE3hnH8KUpCZcp Lb33Px1Uuc46o1eHuKfmD9r0KCbcR4YU2it+BlZ5nW3zoWXrLS089eQIPyyR8ZKJ hNrXnY4wPs5f0XtSHOD8BIw5KfKv6VBgT3T1+JXe8G/YJkWXUJEzupJxgfLeapQ9 LWbm8Rnoy81U2k1KOF16ALvza4QCOiXaCFSRKCPhbZYTEXR+bRXKJf2fOHFMqiab ORoZmwufmNedhCyACcCH7oj850teC+nbe643OZb1i7LnpwV5eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCLYXXWWxfCa8NlgztXQ98cpbbpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmFkNzkwZjAtNzc3Ni0z MDAwLTlmMDctZDdiOWUxMjRhMzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2GAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJAf5t+p3yH/R1rZAgwjqU0z/1D3sQIK+PKlHOwHvthC2M7RBn4rWIO TF9j+pnAog31izPSKsl4fuJq/Ni33pZ0XwwYbLNdtIdmSq5aOJ/Z0NGK8PzlrbtW Ihg60FwY5v0PZSYKVrfo5MZ+HyVQpB37pveHk3tYtapNOCbc+T4pbJSMaY/YCe+Y vKqZnIWM4HEYC0OmNtJVuPjp4fCfewi5OZHTm2r9Qmf1rFWQA58zDpU8oXm3jDYO JuaSJjZ2HR3lh0LGn/qxwMfGrE1EK7IrwMoa7aZbJToyAzQrpPQw9T14rpreoxBe n2JKoyXsToIMim+o+QXeaihHjogiT7c= -----END CERTIFICATE-----Generated at Wed Nov 5 11:15:30 2025 by rpki-client