$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d039157-90b4-3a01-a7a8-ab8da2289f9d.roa File: 8d039157-90b4-3a01-a7a8-ab8da2289f9d.roa (raw, json) Hash identifier: 6pd0ejEDGeZu/X2ZKPsbZGiqq855C+Re4Z5+QYa/pmA= Subject key identifier: E0:B9:59:B5:D5:52:A0:67:0F:9D:B2:38:E7:20:BE:0D:8F:AE:2E:2A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE405686194F755B6C1AD900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d039157-90b4-3a01-a7a8-ab8da2289f9d.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 173.185.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:56:86:19:4f:75:5b:6c:1a:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=55dcc765-5fca-4471-a37d-dbfc4e4c6ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:06:12:03:7b:4b:43:c7:0e:05:a6:61:8c:d2: 62:fd:a3:b0:61:b6:25:a6:43:df:78:40:2d:fe:c1: 87:95:fe:2a:57:ce:ba:12:70:c6:f2:8a:b1:e5:7e: a8:5c:c0:a0:5f:8f:31:4b:30:2a:e6:60:29:c3:46: 89:6f:df:22:04:29:3e:28:37:20:18:0b:c8:3d:1c: c9:3f:31:b7:f7:c2:c8:db:e3:ba:d2:7c:cf:26:8d: 62:e9:dd:83:d5:da:18:fc:10:4e:a3:f4:71:b2:13: 61:8f:4d:ae:39:d4:6a:ab:eb:c0:f0:d9:3b:f2:f4: 35:fe:3e:94:7a:6c:dd:25:2a:b4:27:3f:1a:a9:2d: 58:96:48:ad:9b:99:c8:8f:38:98:60:3d:26:a3:45: 56:0e:6f:97:83:92:a3:77:81:f2:39:e8:21:cf:7c: aa:5c:42:fd:36:d4:ad:28:48:c5:ee:14:29:b2:60: e7:35:13:c5:fa:81:47:c4:bb:1c:e7:92:77:47:64: bb:34:8a:17:93:87:49:8e:fb:80:49:c3:f3:76:05: d7:47:ce:b8:99:9f:b9:64:38:2f:57:a1:de:77:b0: a9:57:c0:86:16:5d:f3:15:ea:c1:d4:73:43:f3:c8: 8a:d6:5b:1c:8c:88:50:9b:2b:c1:70:d1:56:20:fa: af:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B9:59:B5:D5:52:A0:67:0F:9D:B2:38:E7:20:BE:0D:8F:AE:2E:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d039157-90b4-3a01-a7a8-ab8da2289f9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:c2:9c:9c:21:d5:32:40:a4:a1:e1:8e:9d:50:1a:4b:75:58: 34:96:8b:fd:d0:b0:fb:fc:ac:4a:88:7b:e7:5f:cb:2c:2f:4a: dd:d5:30:bd:75:11:c8:c1:ed:6a:67:29:5b:5b:ba:94:5c:79: ce:1d:f1:26:50:5c:5f:fc:5f:79:f0:96:8c:a8:65:8d:3b:29: 8a:8c:84:7d:f8:d3:cd:1e:1d:0e:c9:82:c6:7e:4a:71:e3:dc: 30:dc:e4:a5:8c:6e:65:0e:05:83:36:c6:27:3d:35:b7:83:c9: 13:cd:2c:46:40:26:5f:63:90:cf:b8:b4:32:0e:d2:c7:c5:ca: eb:3d:4b:cf:0d:19:75:24:ad:1a:eb:80:88:82:69:c2:8b:98: 9b:df:3e:8f:6a:9d:5a:7c:74:6f:6b:81:30:9f:54:e1:d4:f9: 56:46:c0:b0:28:97:b4:74:17:f0:75:3a:c6:23:87:9f:49:12: f1:9c:c6:ac:f8:d6:47:c9:6f:e7:82:8f:8c:6f:ed:fb:00:55: 25:21:57:0e:89:f1:9e:0a:97:04:cb:80:d6:4e:39:bc:fc:65: f0:06:b6:e4:29:cb:19:17:fb:c4:40:03:74:ce:3a:3e:58:58: 07:68:a9:af:b0:87:ce:3f:a4:2a:e3:7f:e2:4c:3a:99:68:35: 9a:a0:2b:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFaGGU91W2wa2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NTVkY2M3NjUtNWZjYS00NDcxLWEzN2QtZGJmYzRlNGM2YmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAYSA3tLQ8cOBaZhjNJi/aOwYbYlpkPfeEAt /sGHlf4qV866EnDG8oqx5X6oXMCgX48xSzAq5mApw0aJb98iBCk+KDcgGAvIPRzJ PzG398LI2+O60nzPJo1i6d2D1doY/BBOo/RxshNhj02uOdRqq+vA8Nk78vQ1/j6U emzdJSq0Jz8aqS1Ylkitm5nIjziYYD0mo0VWDm+Xg5Kjd4HyOeghz3yqXEL9NtSt KEjF7hQpsmDnNRPF+oFHxLsc55J3R2S7NIoXk4dJjvuAScPzdgXXR864mZ+5ZDgv V6Hed7CpV8CGFl3zFerB1HND88iK1lscjIhQmyvBcNFWIPqvcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOC5WbXVUqBnD52yOOcgvg2Pri4qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGQwMzkxNTctOTBiNC0z YTAxLWE3YTgtYWI4ZGEyMjg5ZjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvCnJwh1TJApKHhjp1QGkt1WDSWi/3QsPv8rEqIe+dfyywvSt3VML11 EcjB7WpnKVtbupRcec4d8SZQXF/8X3nwloyoZY07KYqMhH34080eHQ7JgsZ+SnHj 3DDc5KWMbmUOBYM2xic9NbeDyRPNLEZAJl9jkM+4tDIO0sfFyus9S88NGXUkrRrr gIiCacKLmJvfPo9qnVp8dG9rgTCfVOHU+VZGwLAol7R0F/B1OsYjh59JEvGcxqz4 1kfJb+eCj4xv7fsAVSUhVw6J8Z4KlwTLgNZOObz8ZfAGtuQpyxkX+8RAA3TOOj5Y WAdoqa+wh84/pCrjf+JMOploNZqgK2g= -----END CERTIFICATE-----Generated at Wed Nov 5 01:31:49 2025 by rpki-client