$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a7b0d97-7801-3cb6-8d30-a1c1493f86e2.roa File: 7a7b0d97-7801-3cb6-8d30-a1c1493f86e2.roa (raw, json) Hash identifier: YHOu627qk6H9ekAomduJ9zKD7AQAYWl22STx65pP2uY= Subject key identifier: B6:97:F3:F7:7D:3D:F6:2F:25:71:61:6D:EC:8C:B2:C2:F7:FD:96:A2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2A2C4A3285277058ABA02280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a7b0d97-7801-3cb6-8d30-a1c1493f86e2.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 174.131.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:4a:32:85:27:70:58:ab:a0:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=594c881a-afc3-4889-93a1-b5cc8788e2c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7b:1c:0a:1e:f9:d1:be:66:d1:9b:98:63:21: 35:a8:52:c6:9f:c3:f0:d9:26:72:7d:90:b8:cd:e5: e6:29:3a:18:98:75:87:11:aa:9f:ff:95:3e:fe:9b: 80:ec:4c:7e:fc:5c:32:28:d4:68:2d:4a:6b:5b:d9: d8:63:8f:b2:1c:a2:40:8b:c1:93:00:0d:70:89:06: 12:37:e6:86:0f:b2:73:f0:40:98:f7:93:8a:7f:37: 8c:4c:d9:29:2f:c1:8b:74:9e:6f:6f:b8:23:f9:5b: 1b:a0:bb:bd:6a:70:3d:cc:57:79:c0:31:7c:f0:32: f4:6f:9b:bc:d0:9c:af:fb:d6:f4:71:c2:d2:5d:98: 22:5f:a5:5a:c2:9d:1c:7b:8e:22:82:b3:aa:9a:9c: fd:97:57:0b:e8:aa:01:09:54:2e:14:53:ec:46:36: 63:e8:fb:dc:58:52:c6:9b:cb:41:4e:1a:a5:eb:39: df:ad:be:81:60:7d:58:2f:f0:c8:22:4e:b8:42:17: 7b:8c:8f:27:4c:c9:a6:ae:99:b0:39:c2:52:c6:f0: 67:b0:b5:0f:b9:ad:10:f5:de:99:c1:3a:43:ec:58: d0:68:d2:eb:7b:ed:d7:45:b8:be:bd:2b:35:be:64: 5d:b2:08:4c:3d:69:f0:53:d6:6c:fd:81:08:ad:92: aa:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:97:F3:F7:7D:3D:F6:2F:25:71:61:6D:EC:8C:B2:C2:F7:FD:96:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a7b0d97-7801-3cb6-8d30-a1c1493f86e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:71:94:2c:70:3e:d5:cf:42:28:29:87:08:c9:6c:98:d1:1a: 25:a3:6f:41:bc:17:37:e2:62:ce:bf:14:5e:17:4b:0c:fe:d7: e3:e1:9a:cd:85:2f:42:66:84:1e:c3:7d:72:c4:e8:36:c1:be: fd:78:0c:f5:9c:d0:cd:b4:49:18:a7:7d:8c:82:6d:33:91:0f: b0:19:69:55:6b:f0:72:2f:48:73:3d:fd:c1:3d:0b:15:0e:57: ce:3c:a3:e0:16:ca:74:69:27:be:6b:93:ba:a9:80:b4:88:69: af:19:c6:ef:6a:80:df:4c:20:af:3f:3c:0f:14:03:9e:9a:90: 53:3b:6e:d0:1e:1d:fb:14:f4:83:b4:b2:fd:a2:cd:09:dc:03: 05:6f:20:89:07:1f:08:a8:95:a1:e9:66:e8:c0:59:80:0d:da: e4:c9:7b:b2:36:ac:f2:9f:22:ad:98:51:27:81:84:d9:77:8e: 44:fc:ef:12:71:f3:cf:55:7d:b7:24:38:b5:69:4d:c6:1e:dc: d5:a0:39:1a:63:14:27:4b:22:6e:60:06:8c:98:a6:36:1e:63: fb:ba:23:5e:fe:1e:da:75:52:c8:b3:f0:eb:fc:e9:58:d1:e7: 1a:fb:d8:0c:ed:14:06:d2:cd:4d:a1:57:44:51:4b:19:2a:a9: 26:26:cb:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEoyhSdwWKugIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk NTk0Yzg4MWEtYWZjMy00ODg5LTkzYTEtYjVjYzg3ODhlMmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHscCh750b5m0ZuYYyE1qFLGn8Pw2SZyfZC4 zeXmKToYmHWHEaqf/5U+/puA7Ex+/FwyKNRoLUprW9nYY4+yHKJAi8GTAA1wiQYS N+aGD7Jz8ECY95OKfzeMTNkpL8GLdJ5vb7gj+VsboLu9anA9zFd5wDF88DL0b5u8 0Jyv+9b0ccLSXZgiX6Vawp0ce44igrOqmpz9l1cL6KoBCVQuFFPsRjZj6PvcWFLG m8tBThql6znfrb6BYH1YL/DIIk64Qhd7jI8nTMmmrpmwOcJSxvBnsLUPua0Q9d6Z wTpD7FjQaNLre+3XRbi+vSs1vmRdsghMPWnwU9Zs/YEIrZKqlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLaX8/d9PfYvJXFhbeyMssL3/ZaiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2E3YjBkOTctNzgwMS0z Y2I2LThkMzAtYTFjMTQ5M2Y4NmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDroPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5xlCxwPtXPQigphwjJbJjRGiWjb0G8FzfiYs6/FF4XSwz+1+Phms2F L0JmhB7DfXLE6DbBvv14DPWc0M20SRinfYyCbTORD7AZaVVr8HIvSHM9/cE9CxUO V848o+AWynRpJ75rk7qpgLSIaa8Zxu9qgN9MIK8/PA8UA56akFM7btAeHfsU9IO0 sv2izQncAwVvIIkHHwiolaHpZujAWYAN2uTJe7I2rPKfIq2YUSeBhNl3jkT87xJx 889VfbckOLVpTcYe3NWgORpjFCdLIm5gBoyYpjYeY/u6I17+Htp1Usiz8Ov86VjR 5xr72AztFAbSzU2hV0RRSxkqqSYmy2Y= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:07 2025 by rpki-client