$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7965c439-f573-377f-accd-eda8acc358ef.roa File: 7965c439-f573-377f-accd-eda8acc358ef.roa (raw, json) Hash identifier: XZP+qjdRdb1uhSByEvn7dLm7tUR6gEaRXUKUPfcKBNM= Subject key identifier: 4F:15:3D:A5:82:28:A7:F4:41:4F:DA:F0:58:F5:2B:1B:E1:2A:C3:7B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CBF19EA2B0782C37DDEC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7965c439-f573-377f-accd-eda8acc358ef.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 14 IP address blocks: 209.2.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:bf:19:ea:2b:07:82:c3:7d:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=2f0d8cb7-b4c5-45f4-bd6c-78201c3ec52e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e9:ef:dd:fe:88:4e:b4:db:d2:e4:14:64:94: 97:4c:fb:6b:fb:6a:58:57:ef:de:52:cc:60:5c:5c: e3:dc:08:87:d8:79:ba:96:84:cd:5f:c5:e0:69:c6: 32:0d:c7:6b:d5:f5:c3:5d:00:d9:a3:57:6c:07:de: 26:a0:2f:54:75:b4:22:20:56:31:5e:21:0a:b3:63: 83:1d:3c:c7:ef:df:f3:19:b2:ac:ae:46:07:19:c8: a5:52:d5:cb:50:75:26:c6:17:c6:33:6f:26:d2:2e: b4:00:76:a3:12:1e:4b:14:64:c6:48:b5:86:ae:ed: b8:0f:27:96:3b:af:7c:45:e2:c1:90:5b:9e:b9:41: 1b:db:d6:00:5b:be:fd:90:ff:0e:ac:3c:2a:9e:3c: a5:d9:84:29:9a:c8:6f:1e:1b:d8:15:98:5e:9b:b9: 95:da:9a:32:5f:6f:1b:8e:cc:14:a4:55:51:9f:0f: 3b:03:cd:a6:fb:88:ca:41:17:c6:11:00:30:7e:51: 0e:00:a1:28:3e:39:7e:47:95:28:7e:23:c6:2f:75: f3:ed:1f:34:ac:f1:1b:63:b9:36:d8:76:41:bb:1d: 90:ba:76:7b:a7:c4:c5:3a:cb:d4:8e:3d:2f:51:68: 06:21:18:19:3c:fc:f9:d6:b7:19:9c:2c:a5:f7:f6: 99:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:15:3D:A5:82:28:A7:F4:41:4F:DA:F0:58:F5:2B:1B:E1:2A:C3:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7965c439-f573-377f-accd-eda8acc358ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:48:4b:98:f8:ca:49:28:d0:23:86:36:56:d0:f7:13:4c:2c: 29:ab:8c:d2:4d:25:7e:16:12:4b:e3:40:5b:af:fe:46:7e:3d: 12:27:e5:44:d4:08:90:e8:1a:a4:f1:f7:c1:b2:ed:fe:12:28: 50:bf:c5:a2:bc:cf:0d:26:7f:04:65:3d:79:77:d9:01:be:38: 94:09:db:cc:fe:bf:87:5a:83:79:2c:48:0d:84:6d:29:2f:13: d0:71:7a:70:ef:13:8f:f3:0b:1b:1e:16:a8:74:6b:2b:f6:db: 9d:e6:a2:e7:00:af:f6:1d:a5:bf:0a:71:55:63:fa:01:ef:09: c5:a1:72:4b:25:18:60:b7:25:cd:91:7a:4e:15:c5:82:af:b0: d1:3b:14:52:b5:f9:61:79:20:3f:84:8c:60:20:9a:56:bb:9c: b0:91:f5:40:06:5c:bd:ef:61:21:34:80:84:42:82:17:ef:8b: 11:8a:9a:c0:8e:cc:e7:b8:a1:64:82:be:ec:fc:1a:21:15:11: 06:c7:12:c1:5f:62:f3:76:da:0e:32:45:87:91:70:71:21:a7: d2:91:1b:8b:b0:72:16:82:b9:5c:20:f3:12:fd:18:51:3f:2d: 19:16:81:29:5e:51:48:3f:b5:76:bf:c5:f4:e1:a4:a0:ad:a1: c6:d2:6c:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXL8Z6isHgsN93sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MmYwZDhjYjctYjRjNS00NWY0LWJkNmMtNzgyMDFjM2VjNTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+nv3f6ITrTb0uQUZJSXTPtr+2pYV+/eUsxg XFzj3AiH2Hm6loTNX8XgacYyDcdr1fXDXQDZo1dsB94moC9UdbQiIFYxXiEKs2OD HTzH79/zGbKsrkYHGcilUtXLUHUmxhfGM28m0i60AHajEh5LFGTGSLWGru24DyeW O698ReLBkFueuUEb29YAW779kP8OrDwqnjyl2YQpmshvHhvYFZhem7mV2poyX28b jswUpFVRnw87A82m+4jKQRfGEQAwflEOAKEoPjl+R5UofiPGL3Xz7R80rPEbY7k2 2HZBux2QunZ7p8TFOsvUjj0vUWgGIRgZPPz51rcZnCyl9/aZ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8VPaWCKKf0QU/a8Fj1KxvhKsN7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzk2NWM0MzktZjU3My0z NzdmLWFjY2QtZWRhOGFjYzM1OGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0QLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFIS5j4ykko0COGNlbQ9xNMLCmrjNJNJX4WEkvjQFuv/kZ+PRIn5UTU CJDoGqTx98Gy7f4SKFC/xaK8zw0mfwRlPXl32QG+OJQJ28z+v4dag3ksSA2EbSkv E9BxenDvE4/zCxseFqh0ayv2253moucAr/Ydpb8KcVVj+gHvCcWhckslGGC3Jc2R ek4VxYKvsNE7FFK1+WF5ID+EjGAgmla7nLCR9UAGXL3vYSE0gIRCghfvixGKmsCO zOe4oWSCvuz8GiEVEQbHEsFfYvN22g4yRYeRcHEhp9KRG4uwchaCuVwg8xL9GFE/ LRkWgSleUUg/tXa/xfThpKCtocbSbAw= -----END CERTIFICATE-----Generated at Wed Nov 5 02:03:56 2025 by rpki-client