$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8054b298-15d0-3837-b2e8-fc6f15c33432.roa File: 8054b298-15d0-3837-b2e8-fc6f15c33432.roa (raw, json) Hash identifier: gOBltCBvvsOjvfbaWStYDOnV0zzUEU9fgaPp0OQfHC0= Subject key identifier: 60:3B:52:6C:86:D4:D7:15:D1:8B:D0:C0:9A:28:A7:F9:4B:6B:65:86 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE404B76B31816242B26D280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8054b298-15d0-3837-b2e8-fc6f15c33432.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 72.16.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:4b:76:b3:18:16:24:2b:26:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=e83bd1c4-c91e-4585-a06e-c980baef02bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0c:75:a1:cd:f7:ea:fa:3a:72:47:ec:26:21: 6f:02:01:29:12:2f:0e:f1:b6:5f:34:a1:e1:ea:b8: 81:fa:02:87:f4:a8:60:56:ee:c5:57:d6:1d:33:9c: 69:df:4d:aa:6e:34:48:a0:23:2d:eb:12:06:34:08: 83:7e:6a:fb:e2:60:a1:ab:ea:05:a0:65:d3:1a:cc: 02:7b:31:72:01:77:68:b7:93:c1:5c:bb:f0:34:3f: 63:2e:db:52:b4:07:ba:b1:e4:93:d2:93:a1:5a:41: e9:f8:dd:b0:c1:df:0f:80:6c:e2:dd:ef:d4:c0:2d: 9b:5b:75:08:63:d7:fe:e6:2a:72:7c:1f:03:ae:0f: e8:84:5b:61:14:0e:01:ed:e7:c5:d7:72:7e:cc:55: 64:5c:2e:fc:b7:86:22:1b:dc:c7:94:17:9f:4e:84: 5a:ad:d0:00:e2:38:7c:3f:57:6e:69:e5:44:11:9f: 31:5d:26:dd:3c:e1:94:e3:c3:d3:9a:a4:a7:e3:7f: 76:35:7e:59:68:d2:4e:7b:e8:b7:71:9a:d2:68:81: 6c:88:fc:a0:f4:33:b6:17:51:09:5c:24:44:ee:b7: 40:8f:0c:18:59:4c:34:d9:e5:4e:88:9d:0a:79:eb: 9d:39:fa:ba:60:3b:d6:0d:42:8f:bf:02:e2:b1:23: e6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3B:52:6C:86:D4:D7:15:D1:8B:D0:C0:9A:28:A7:F9:4B:6B:65:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8054b298-15d0-3837-b2e8-fc6f15c33432.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:dd:85:65:4b:11:dc:08:b2:f3:6c:59:50:57:b8:9b:f0:a0: f0:77:a2:02:c1:67:50:d2:9c:de:ac:e9:c1:49:ca:a0:44:08: a1:20:2f:64:92:39:d5:33:8c:30:fd:31:53:8e:b7:ae:fd:18: bf:c4:6f:2e:b8:06:a4:f1:55:39:d4:29:99:5e:a0:b5:2f:14: af:5c:94:f4:12:69:dc:0d:e6:2e:58:99:8b:f7:0b:40:48:f8: f7:1f:f0:ff:c9:3b:6f:c5:8d:b3:f5:32:88:37:a9:6a:8d:a8: bd:f6:31:e0:e7:60:9e:f4:10:a6:6a:06:52:f4:cd:19:24:ba: 1d:84:59:a9:b3:9b:5d:a4:6f:79:b9:f3:31:44:0e:a0:3c:b1: 13:2a:5c:56:a2:d2:67:9c:cd:a7:12:5e:9d:a2:c6:1b:16:d4: 27:d6:d9:58:bf:e9:b2:56:fd:dc:c5:11:a6:d4:e6:3c:39:6d: 64:af:4a:e8:5d:96:0d:f2:ad:ca:98:87:fb:68:25:55:9a:4d: 24:cb:ec:63:9c:44:07:17:c3:40:57:bb:85:02:67:26:39:83: 7e:35:73:60:4e:7e:2b:77:56:e3:2c:2a:cd:19:db:da:21:25: 41:2b:53:9b:80:ec:ba:f2:2a:4b:0c:50:5a:33:ad:dd:de:56: 1c:19:83:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEt2sxgWJCsm0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZTgzYmQxYzQtYzkxZS00NTg1LWEwNmUtYzk4MGJhZWYwMmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgx1oc336vo6ckfsJiFvAgEpEi8O8bZfNKHh 6riB+gKH9KhgVu7FV9YdM5xp302qbjRIoCMt6xIGNAiDfmr74mChq+oFoGXTGswC ezFyAXdot5PBXLvwND9jLttStAe6seST0pOhWkHp+N2wwd8PgGzi3e/UwC2bW3UI Y9f+5ipyfB8Drg/ohFthFA4B7efF13J+zFVkXC78t4YiG9zHlBefToRardAA4jh8 P1duaeVEEZ8xXSbdPOGU48PTmqSn4392NX5ZaNJOe+i3cZrSaIFsiPyg9DO2F1EJ XCRE7rdAjwwYWUw02eVOiJ0KeeudOfq6YDvWDUKPvwLisSPmNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGA7UmyG1NcV0YvQwJoop/lLa2WGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODA1NGIyOTgtMTVkMC0z ODM3LWIyZTgtZmM2ZjE1YzMzNDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBAfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbdhWVLEdwIsvNsWVBXuJvwoPB3ogLBZ1DSnN6s6cFJyqBECKEgL2SS OdUzjDD9MVOOt679GL/Eby64BqTxVTnUKZleoLUvFK9clPQSadwN5i5YmYv3C0BI +Pcf8P/JO2/FjbP1Mog3qWqNqL32MeDnYJ70EKZqBlL0zRkkuh2EWamzm12kb3m5 8zFEDqA8sRMqXFai0meczacSXp2ixhsW1CfW2Vi/6bJW/dzFEabU5jw5bWSvSuhd lg3yrcqYh/toJVWaTSTL7GOcRAcXw0BXu4UCZyY5g341c2BOfit3VuMsKs0Z29oh JUErU5uA7LryKksMUFozrd3eVhwZg24= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:38 2025 by rpki-client