$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/928c6e9d-44c4-3bf4-86b3-e5c822238165.roa File: 928c6e9d-44c4-3bf4-86b3-e5c822238165.roa (raw, json) Hash identifier: 9mTwVze15+GNb4EBpwqasF3BQNjhXWJ+Vg2glG9xL2w= Subject key identifier: 34:25:72:10:08:52:5E:49:2D:4A:85:B0:F6:E1:AB:FA:42:5B:93:7A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC7618937E05EFAB56280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/928c6e9d-44c4-3bf4-86b3-e5c822238165.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 173.213.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c7:61:89:37:e0:5e:fa:b5:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=b6127e3d-6a23-43ce-bc0f-f97854a6d777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:62:73:2f:3b:62:6c:47:0c:42:fd:ef:ef:9a: 11:53:7a:c4:6b:fc:ea:97:bd:38:28:85:95:8b:0b: 78:59:8c:5e:b1:b3:9d:72:17:9a:81:c3:ae:b2:56: cf:55:a9:92:8a:06:b0:34:4d:5b:17:60:03:ca:03: e8:79:e8:55:76:04:0d:ea:75:22:af:b2:05:88:e1: 26:9f:e7:55:69:78:ec:59:b7:bf:dd:83:19:ee:b4: 05:f9:0a:36:f3:6b:14:80:9c:b5:49:ba:f5:be:45: 72:5a:be:b8:1c:d3:8e:c5:08:95:80:ba:80:fa:2a: 40:f5:60:71:24:36:bb:e7:c8:e0:5e:22:1e:3b:ad: 0c:b3:7b:a7:8b:9e:d1:01:2d:55:ce:3b:f3:be:6b: d3:e2:0b:84:01:17:c6:20:1c:ce:c2:5d:b6:e8:d3: d6:51:f5:e7:99:80:5b:12:6c:e5:b3:cf:b6:22:5b: c9:ff:8f:79:fe:8b:6d:6f:1a:ea:99:71:f4:bb:4a: 12:d9:32:7d:f8:8a:a8:f1:c6:dc:92:3d:40:51:f9: 1a:0e:9d:76:98:44:24:cd:c2:14:4a:58:a8:8a:67: d7:af:39:45:27:d8:49:be:4e:34:e0:0d:0a:d7:8b: 02:ee:dc:35:51:d3:df:a6:0b:1d:1f:c1:49:9a:af: 9e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:25:72:10:08:52:5E:49:2D:4A:85:B0:F6:E1:AB:FA:42:5B:93:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/928c6e9d-44c4-3bf4-86b3-e5c822238165.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.213.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:1e:5d:e0:1e:6d:da:bb:c6:29:09:c1:14:ce:e6:5f:84:80: 99:46:03:6f:47:a4:f7:6d:ea:49:f8:4d:b3:66:07:47:f2:ec: f8:91:57:3d:01:11:6e:07:bc:12:49:75:34:2d:79:ea:87:ab: b2:11:0b:3e:88:dc:d1:a9:5b:6e:7a:d4:d2:28:d1:82:9d:6a: 06:0b:8e:49:32:4e:9b:ad:b7:47:7a:31:b3:c7:6a:ee:ca:e0: e1:a7:92:9a:fb:19:07:17:b9:2e:cd:4b:fb:c5:76:da:8b:8f: bd:5a:e7:33:61:5c:7c:34:85:8c:eb:f9:04:73:39:89:00:05: d2:97:d0:6f:11:24:80:7b:6c:8b:b1:06:0f:6a:0c:a8:21:ab: ce:13:bb:20:79:7b:9d:29:e6:e8:d6:16:18:d1:87:52:2a:03: e1:11:3c:84:9b:40:c0:bd:23:67:93:14:49:d1:98:39:d3:f6: 27:0d:d8:f3:c3:55:5b:ab:22:70:2d:fe:3c:4e:d5:be:81:d2: d0:e8:32:22:4b:a6:ea:84:7d:b0:2f:86:7d:24:8f:d3:b4:e3: 32:38:18:f8:96:51:62:06:b0:04:3f:3b:98:a8:91:30:e0:60: 7f:c9:79:23:28:62:de:8a:f7:59:fc:55:d0:6b:6e:20:1c:c2: 41:ad:10:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMdhiTfgXvq1YoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YjYxMjdlM2QtNmEyMy00M2NlLWJjMGYtZjk3ODU0YTZkNzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWJzLztibEcMQv3v75oRU3rEa/zql704KIWV iwt4WYxesbOdcheagcOuslbPVamSigawNE1bF2ADygPoeehVdgQN6nUir7IFiOEm n+dVaXjsWbe/3YMZ7rQF+Qo282sUgJy1Sbr1vkVyWr64HNOOxQiVgLqA+ipA9WBx JDa758jgXiIeO60Ms3uni57RAS1VzjvzvmvT4guEARfGIBzOwl226NPWUfXnmYBb Emzls8+2IlvJ/495/ottbxrqmXH0u0oS2TJ9+Iqo8cbckj1AUfkaDp12mEQkzcIU SlioimfXrzlFJ9hJvk404A0K14sC7tw1UdPfpgsdH8FJmq+eKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQlchAIUl5JLUqFsPbhq/pCW5N6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTI4YzZlOWQtNDRjNC0z YmY0LTg2YjMtZTVjODIyMjM4MTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrdWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAeXeAebdq7xikJwRTO5l+EgJlGA29HpPdt6kn4TbNmB0fy7PiRVz0B EW4HvBJJdTQteeqHq7IRCz6I3NGpW2561NIo0YKdagYLjkkyTputt0d6MbPHau7K 4OGnkpr7GQcXuS7NS/vFdtqLj71a5zNhXHw0hYzr+QRzOYkABdKX0G8RJIB7bIux Bg9qDKghq84TuyB5e50p5ujWFhjRh1IqA+ERPISbQMC9I2eTFEnRmDnT9icN2PPD VVurInAt/jxO1b6B0tDoMiJLpuqEfbAvhn0kj9O04zI4GPiWUWIGsAQ/O5iokTDg YH/JeSMoYt6K91n8VdBrbiAcwkGtEEM= -----END CERTIFICATE-----Generated at Tue Nov 4 19:14:54 2025 by rpki-client