$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/724e2cc9-e76f-3025-b214-7a76ab7fa9ff.roa File: 724e2cc9-e76f-3025-b214-7a76ab7fa9ff.roa (raw, json) Hash identifier: GS0Su06uqRTPMhjAliAvoDNtOX9S51RaNFSjJPjpGM8= Subject key identifier: AE:0C:52:D3:24:69:E0:DF:72:CF:E1:F1:D3:42:39:27:BD:D8:6F:87 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2A2C48B5F8DA78328F27CB00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/724e2cc9-e76f-3025-b214-7a76ab7fa9ff.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 151.213.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:48:b5:f8:da:78:32:8f:27:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=db702a3b-2eb7-4b55-9196-80f22845afff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ec:6a:26:10:da:ac:ef:09:4b:91:c8:9e:41: 1a:a1:5d:0e:db:e6:2d:e9:1d:f6:c4:b7:f7:6c:8a: b2:ca:a2:0a:d4:02:e3:b9:1c:25:2a:8e:f4:dc:14: 39:db:f9:fa:72:f3:d2:13:34:05:b9:c3:fc:20:fd: 5b:30:94:83:91:5d:86:40:c9:4d:dc:68:59:4e:e3: 58:3e:13:9f:8a:90:94:36:a6:3d:76:3c:75:e1:2f: 25:68:12:26:d1:92:43:8f:d8:af:8a:d2:dd:08:31: 64:31:05:52:c8:42:a7:91:7f:0c:fe:42:83:74:13: de:a0:d2:40:2e:61:a3:f2:7c:ad:52:f5:ff:a5:33: 90:f3:87:03:68:90:35:77:f1:61:43:ba:76:26:56: b9:31:a2:37:7b:90:54:b6:46:d8:77:d7:ff:1e:26: 21:b6:29:78:6d:8e:0d:e4:26:96:ec:a9:2e:8e:a7: b6:bd:0a:b5:22:bf:06:ed:dd:29:7f:89:1a:d4:f8: 51:55:87:2b:54:d1:11:1a:d2:ec:72:11:53:3f:12: 37:b9:36:20:c7:e9:3c:6f:fe:f5:d0:1f:72:23:eb: 7d:8c:5f:30:1d:4c:5c:b2:ec:54:72:cd:64:60:ec: d8:44:7a:0f:74:ec:22:62:04:00:9a:8c:53:72:47: d6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0C:52:D3:24:69:E0:DF:72:CF:E1:F1:D3:42:39:27:BD:D8:6F:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/724e2cc9-e76f-3025-b214-7a76ab7fa9ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:e0:ec:04:a0:a0:a6:17:72:9c:0c:e3:a4:ff:ae:35:ab:f7: 1d:fe:db:4a:fa:ac:22:60:2f:e9:ba:0c:6c:fc:b2:d4:67:a3: db:be:a5:ec:34:44:6e:01:74:b9:1a:50:bc:2f:74:9c:4e:9e: 28:c8:de:c8:19:df:b2:4c:4b:2b:d5:5b:86:ff:e8:26:91:d0: 19:4a:5d:72:ad:95:fa:a3:75:ae:c8:04:b2:7e:41:06:56:ba: a7:1e:8c:11:dd:3f:15:fd:74:40:3e:56:0f:c6:f2:06:fb:42: 25:b7:3b:b0:47:7c:32:7a:36:16:be:f7:f1:0f:bd:42:39:a8: 57:2a:4c:88:ba:e7:b8:9f:61:25:d2:77:e8:ac:9d:20:7f:22: 43:51:c3:f7:0d:31:b7:82:e3:63:a4:04:6a:57:1a:1f:04:2a: 20:45:c6:04:eb:bb:3f:15:0f:71:88:aa:84:6d:ff:88:3d:1b: bb:8c:37:87:e3:f2:42:24:dc:a8:58:1e:4e:f4:0b:b8:ff:bb: 24:4c:e3:fa:6b:ad:73:c7:62:e6:0f:81:f0:b0:c6:94:84:1f: f0:46:13:52:86:99:46:25:09:fc:01:92:58:e2:0b:b3:11:fb: a2:da:5e:11:82:db:1f:5c:11:a3:3d:3a:bd:00:c3:72:d2:e4: db:96:d0:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEi1+Np4Mo8nywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ZGI3MDJhM2ItMmViNy00YjU1LTkxOTYtODBmMjI4NDVhZmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhexqJhDarO8JS5HInkEaoV0O2+Yt6R32xLf3 bIqyyqIK1ALjuRwlKo703BQ52/n6cvPSEzQFucP8IP1bMJSDkV2GQMlN3GhZTuNY PhOfipCUNqY9djx14S8laBIm0ZJDj9ivitLdCDFkMQVSyEKnkX8M/kKDdBPeoNJA LmGj8nytUvX/pTOQ84cDaJA1d/FhQ7p2Jla5MaI3e5BUtkbYd9f/HiYhtil4bY4N 5CaW7Kkujqe2vQq1Ir8G7d0pf4ka1PhRVYcrVNERGtLschFTPxI3uTYgx+k8b/71 0B9yI+t9jF8wHUxcsuxUcs1kYOzYRHoPdOwiYgQAmoxTckfWaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4MUtMkaeDfcs/h8dNCOSe92G+HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzI0ZTJjYzktZTc2Zi0z MDI1LWIyMTQtN2E3NmFiN2ZhOWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl9WYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrg7ASgoKYXcpwM46T/rjWr9x3+20r6rCJgL+m6DGz8stRno9u+pew0 RG4BdLkaULwvdJxOnijI3sgZ37JMSyvVW4b/6CaR0BlKXXKtlfqjda7IBLJ+QQZW uqcejBHdPxX9dEA+Vg/G8gb7QiW3O7BHfDJ6Nha+9/EPvUI5qFcqTIi657ifYSXS d+isnSB/IkNRw/cNMbeC42OkBGpXGh8EKiBFxgTruz8VD3GIqoRt/4g9G7uMN4fj 8kIk3KhYHk70C7j/uyRM4/prrXPHYuYPgfCwxpSEH/BGE1KGmUYlCfwBkljiC7MR +6LaXhGC2x9cEaM9Or0Aw3LS5NuW0Bw= -----END CERTIFICATE-----Generated at Tue Nov 4 19:16:06 2025 by rpki-client