$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/810a915d-1f99-3fb4-b020-a6a8f0fd67b4.roa File: 810a915d-1f99-3fb4-b020-a6a8f0fd67b4.roa (raw, json) Hash identifier: ZPj8bkKAiR9Ly7kVHG/Xe9Du3fJPaXr77QX6+MJm3Jk= Subject key identifier: FD:3C:A6:40:AD:CB:DC:47:11:CF:8F:A5:01:89:15:08:AC:9D:83:0C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF84D255C33EF1FF33E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/810a915d-1f99-3fb4-b020-a6a8f0fd67b4.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 173.184.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f8:4d:25:5c:33:ef:1f:f3:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=f4724f80-c036-44f7-acdc-e632e6f0ff03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:38:38:8c:0d:2d:93:52:85:28:d2:36:52:89: aa:cb:d8:94:ca:42:a7:2a:1c:f8:45:a8:dd:ee:ff: b1:1d:aa:dc:c6:0f:22:09:06:0c:6e:b3:6d:2f:64: d7:78:9a:00:dc:72:57:08:18:ec:bd:07:1a:58:05: a3:f9:b2:df:f0:c7:24:a0:49:bf:21:6a:87:5b:aa: 56:85:2f:17:f9:28:ac:ed:64:59:86:67:d6:cc:83: af:49:f7:3e:49:6c:81:8f:b0:cc:77:b7:15:a6:e7: ac:ad:cb:ff:31:4e:9b:2b:59:92:f0:9b:ce:9f:63: 94:dc:dd:eb:a8:2f:fd:c0:32:81:02:f8:35:38:60: 90:bf:a2:9a:d4:bc:fc:8b:c8:a5:22:d6:af:6e:02: 2a:c0:54:3b:69:59:20:79:4f:16:bb:7b:35:85:46: 49:fd:a8:b5:8f:74:cc:b8:0b:84:2e:43:d3:cb:aa: 16:e6:fa:b4:a4:71:87:95:6f:c9:85:94:a6:65:9e: 83:a5:a3:28:33:ca:81:a8:29:11:52:19:8a:9c:59: 34:e4:75:ad:c8:e1:83:c8:38:cc:ea:78:06:c4:76: 5b:dd:75:84:f8:2a:fa:b2:0a:eb:82:05:a5:19:bc: 65:c4:36:bf:07:3b:96:e2:c4:ef:14:88:90:dc:59: dc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:3C:A6:40:AD:CB:DC:47:11:CF:8F:A5:01:89:15:08:AC:9D:83:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/810a915d-1f99-3fb4-b020-a6a8f0fd67b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.184.0.0/13 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:c8:76:6b:ba:6d:b9:aa:f4:f0:0b:03:49:5d:3f:6c:aa:32: 5d:24:d6:bc:ae:59:ed:7c:3e:41:d0:d2:91:e8:ee:19:2f:c9: 00:25:41:a5:33:8f:a3:c1:5f:b1:92:bb:77:15:01:9b:f6:dd: 47:a0:75:25:09:ca:b4:61:cd:85:4a:fd:64:39:7c:e7:8c:aa: c7:6e:09:33:eb:40:62:23:87:81:43:f5:b0:08:a1:ea:3b:b0: 37:6c:8a:ac:d9:62:e0:ea:e5:61:01:d9:e6:56:b8:44:b3:6e: 9c:81:ab:ab:13:27:21:dd:05:08:c7:c1:64:63:09:d2:97:f9: bb:8e:42:da:c8:8b:41:30:10:dc:a4:f1:19:1e:5f:80:a9:99: f0:ee:a6:ab:ed:29:10:b6:0f:df:5d:50:a2:74:1c:aa:6d:90: e3:57:f9:d2:34:f8:c6:2b:cf:23:a1:47:6b:21:f5:21:95:db: b8:63:a8:69:fd:ed:0d:32:b2:7d:d2:9e:85:09:a4:8d:53:8b: 78:fa:0a:0d:2e:ba:1f:5c:2d:66:c2:2a:44:c1:65:50:91:15: 59:e4:3c:d0:1e:30:03:23:60:12:2c:7f:1c:d1:f3:ce:31:24: 04:3f:9a:96:0f:9d:9b:b0:b1:39:26:42:37:aa:59:1b:bd:53: 19:0f:f3:53 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtxXPhNJVwz7x/zPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZjQ3MjRmODAtYzAzNi00NGY3LWFjZGMtZTYzMmU2ZjBmZjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjg4jA0tk1KFKNI2Uomqy9iUykKnKhz4Rajd 7v+xHarcxg8iCQYMbrNtL2TXeJoA3HJXCBjsvQcaWAWj+bLf8MckoEm/IWqHW6pW hS8X+Sis7WRZhmfWzIOvSfc+SWyBj7DMd7cVpuesrcv/MU6bK1mS8JvOn2OU3N3r qC/9wDKBAvg1OGCQv6Ka1Lz8i8ilItavbgIqwFQ7aVkgeU8Wu3s1hUZJ/ai1j3TM uAuELkPTy6oW5vq0pHGHlW/JhZSmZZ6DpaMoM8qBqCkRUhmKnFk05HWtyOGDyDjM 6ngGxHZb3XWE+Cr6sgrrggWlGbxlxDa/BzuW4sTvFIiQ3FncgwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFP08pkCty9xHEc+PpQGJFQisnYMMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODEwYTkxNWQtMWY5OS0z ZmI0LWIwMjAtYTZhOGYwZmQ2N2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDrbgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEATch2a7ptuar08AsDSV0/bKoyXSTWvK5Z7Xw+QdDSkejuGS/JACVBpTOP o8FfsZK7dxUBm/bdR6B1JQnKtGHNhUr9ZDl854yqx24JM+tAYiOHgUP1sAih6juw N2yKrNli4OrlYQHZ5la4RLNunIGrqxMnId0FCMfBZGMJ0pf5u45C2siLQTAQ3KTx GR5fgKmZ8O6mq+0pELYP311QonQcqm2Q41f50jT4xivPI6FHayH1IZXbuGOoaf3t DTKyfdKehQmkjVOLePoKDS66H1wtZsIqRMFlUJEVWeQ80B4wAyNgEix/HNHzzjEk BD+alg+dm7CxOSZCN6pZG71TGQ/zUw== -----END CERTIFICATE-----Generated at Tue Nov 4 16:57:09 2025 by rpki-client