$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8c28ca35-5a16-317d-90ca-f55d0cbfbdc3.roa File: 8c28ca35-5a16-317d-90ca-f55d0cbfbdc3.roa (raw, json) Hash identifier: QqO60EOh+43gDVuv9sCU+1ygQwJoEOgGz4sfF7sKFKg= Subject key identifier: 29:9F:D0:B1:94:BB:AB:3E:8E:D2:DF:32:1D:15:EC:2E:F9:F4:82:81 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BA667CA4E7863CF245027B000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8c28ca35-5a16-317d-90ca-f55d0cbfbdc3.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 7029 IP address blocks: 209.165.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:ca:4e:78:63:cf:24:50:27:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=d78219cf-3dd4-4078-aaf7-04e73f196860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f5:41:b0:e5:5b:2b:1b:5c:d0:e1:93:70:8f: 23:f6:e5:41:41:c3:5c:32:d9:72:65:d2:9b:9b:9c: af:b5:1d:2d:a8:da:a4:73:4b:fc:70:dd:ae:8f:02: d1:f5:9f:99:0d:ce:06:aa:03:4e:51:bf:a0:e1:f4: 22:fd:95:f3:73:49:7e:a2:f3:bc:b0:5b:42:7a:aa: 56:1b:a2:88:45:41:33:de:47:11:14:db:f2:88:ec: 86:5b:59:43:a0:c5:e6:62:0f:1d:36:69:4f:f0:ce: 42:51:35:e6:54:27:f4:50:94:d4:8e:59:12:56:50: 03:a4:07:a5:e8:11:bc:7b:a5:51:83:26:e1:56:16: 83:3e:f9:68:68:0b:05:60:73:2b:21:12:67:c8:ab: b0:cb:ad:98:7d:70:1f:9e:e1:40:6c:a2:e4:bd:dc: 2e:9a:e4:73:56:e0:bc:34:f8:7d:b5:19:01:0f:7a: d3:06:59:c0:a8:be:01:df:b2:1c:48:8f:0b:72:6f: 74:b9:09:f6:7e:3f:a9:78:92:70:4d:3c:bc:a3:5b: 57:b4:ac:54:50:41:c0:9f:e7:b6:15:49:18:c9:0c: d1:4c:b4:ab:27:34:ae:97:8b:59:41:67:92:26:1c: f4:bd:3e:c5:7c:3f:97:01:1f:4c:68:76:7a:e0:9b: 06:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:9F:D0:B1:94:BB:AB:3E:8E:D2:DF:32:1D:15:EC:2E:F9:F4:82:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8c28ca35-5a16-317d-90ca-f55d0cbfbdc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.165.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:3f:30:2f:9f:fa:d4:bc:b9:bf:f6:fb:35:a1:d3:a3:6a:4a: 16:7c:a0:da:f4:ab:af:31:86:27:c9:98:a2:27:d0:bf:bc:70: 1a:4f:0e:11:42:58:2d:0d:08:da:1e:28:96:13:60:bd:57:e0: ec:c2:3a:8f:9a:50:bb:74:84:ac:17:97:bb:74:2c:92:a3:2f: 96:51:c1:ad:58:93:ca:50:e6:87:77:e4:70:c7:9f:db:d1:f3: 2c:80:29:de:6b:69:59:d7:42:f6:cb:37:61:39:95:c5:9e:e6: d0:e2:9e:4b:1f:a7:fa:36:d5:75:08:88:da:e2:61:bb:b2:6a: 77:b2:d3:19:5f:90:7e:ca:ca:ff:09:0d:b2:46:82:83:d1:26: 8e:6c:7c:5c:22:94:f1:05:33:44:14:a4:ab:3f:4d:8d:c4:42: bc:b5:fa:0c:71:c3:17:18:b6:af:9a:c6:53:85:68:80:b8:e6: 08:62:63:a9:ad:89:04:15:63:1f:20:47:e2:01:38:f3:92:cb: 26:7e:a3:d2:62:fa:c5:ef:d7:68:25:9f:82:ec:fe:71:47:b8: f6:f0:61:07:c6:f5:f5:2e:30:a0:d4:0a:14:4f:8d:c9:d5:de: b9:8a:0c:3b:73:e2:28:f7:50:d6:8d:3d:29:0a:6d:d6:9e:7c: b1:8f:d8:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8pOeGPPJFAnsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZDc4MjE5Y2YtM2RkNC00MDc4LWFhZjctMDRlNzNmMTk2ODYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfVBsOVbKxtc0OGTcI8j9uVBQcNcMtlyZdKb m5yvtR0tqNqkc0v8cN2ujwLR9Z+ZDc4GqgNOUb+g4fQi/ZXzc0l+ovO8sFtCeqpW G6KIRUEz3kcRFNvyiOyGW1lDoMXmYg8dNmlP8M5CUTXmVCf0UJTUjlkSVlADpAel 6BG8e6VRgybhVhaDPvloaAsFYHMrIRJnyKuwy62YfXAfnuFAbKLkvdwumuRzVuC8 NPh9tRkBD3rTBlnAqL4B37IcSI8Lcm90uQn2fj+peJJwTTy8o1tXtKxUUEHAn+e2 FUkYyQzRTLSrJzSul4tZQWeSJhz0vT7FfD+XAR9MaHZ64JsG1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmf0LGUu6s+jtLfMh0V7C759IKBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGMyOGNhMzUtNWExNi0z MTdkLTkwY2EtZjU1ZDBjYmZiZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aUEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQ/MC+f+tS8ub/2+zWh06NqShZ8oNr0q68xhifJmKIn0L+8cBpPDhFC WC0NCNoeKJYTYL1X4OzCOo+aULt0hKwXl7t0LJKjL5ZRwa1Yk8pQ5od35HDHn9vR 8yyAKd5raVnXQvbLN2E5lcWe5tDinksfp/o21XUIiNriYbuyaney0xlfkH7Kyv8J DbJGgoPRJo5sfFwilPEFM0QUpKs/TY3EQry1+gxxwxcYtq+axlOFaIC45ghiY6mt iQQVYx8gR+IBOPOSyyZ+o9Ji+sXv12gln4Ls/nFHuPbwYQfG9fUuMKDUChRPjcnV 3rmKDDtz4ij3UNaNPSkKbdaefLGP2IA= -----END CERTIFICATE-----Generated at Tue Nov 4 19:22:05 2025 by rpki-client