$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/930572d4-e45d-364b-ba9f-6ab1d5034994.roa File: 930572d4-e45d-364b-ba9f-6ab1d5034994.roa (raw, json) Hash identifier: g9vgFqI5kwXOxwiX4TSrr+XeDRDp3ggJ2Tius1fkGtY= Subject key identifier: 53:01:A6:13:6E:0D:72:7E:7C:4C:F7:8A:2B:FE:A2:F3:CE:84:04:67 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE405153BF8CFBF78696D080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/930572d4-e45d-364b-ba9f-6ab1d5034994.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 64.24.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:51:53:bf:8c:fb:f7:86:96:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=fd45861f-2e36-479f-88ac-fa95caea8049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9b:cd:93:85:b2:9d:57:ba:1e:da:b2:70:78: 96:99:7e:ec:02:b4:d5:56:30:6a:b1:52:d8:7f:14: 65:9b:88:15:1e:e8:2a:cc:e6:0b:93:09:53:28:8a: 17:c2:d4:8b:0c:59:54:90:da:4f:d1:fd:52:40:9b: 53:6b:7b:d8:68:c0:1d:6a:13:a8:0a:94:15:18:f2: 8c:fc:2b:6e:41:35:c8:60:28:34:a1:61:de:da:48: 42:52:c3:86:c4:e7:f1:67:8a:02:c4:5c:c0:d1:7a: 47:0b:28:14:da:f0:30:5f:16:c5:15:95:7a:d8:e0: 61:4a:82:2e:24:39:09:6d:4f:c7:6b:7e:37:21:6c: e5:44:dd:6e:74:79:5c:50:c8:ad:5f:9d:74:b1:2b: ae:03:8b:af:18:52:3f:86:6f:bf:81:7d:4d:33:5d: b7:8f:33:4a:e3:b3:2b:92:63:ad:9b:98:b2:b4:26: e5:f4:43:00:66:46:32:64:f9:f0:5c:fc:2b:58:74: e6:8c:ad:a0:d3:18:b5:61:d1:a0:d0:e8:a2:48:b5: 02:e5:50:d0:d3:04:10:b1:ce:0d:1a:de:db:a5:1b: 84:3c:f2:3c:72:00:4c:db:68:d8:db:d7:f2:a8:16: ee:b8:9c:52:05:6a:dd:51:35:e8:df:3f:a3:13:58: 4c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:01:A6:13:6E:0D:72:7E:7C:4C:F7:8A:2B:FE:A2:F3:CE:84:04:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/930572d4-e45d-364b-ba9f-6ab1d5034994.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.24.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:ab:30:4b:21:1d:09:7f:8c:c5:99:c7:32:da:8f:5d:16:4a: 46:1c:cb:86:61:01:1e:b4:dc:6c:be:d5:56:f5:7b:cd:8a:30: 24:1d:fb:63:af:13:61:35:16:f0:1a:87:85:8f:65:62:55:e1: 80:57:a2:03:41:65:6f:a5:83:02:f8:30:c6:fe:a1:7d:96:14: 3e:40:98:23:62:f0:27:bb:90:9d:c3:ae:e7:f5:2a:e6:b4:1b: 3e:a8:49:6a:93:e7:fc:35:b2:3b:93:ce:58:6a:19:19:83:fa: 7e:aa:1c:1a:b8:e9:b2:a4:9e:27:17:3d:f0:55:ed:e1:f2:d2: 7d:c8:28:c6:a4:bf:49:a6:c7:0f:3c:8e:b0:f3:d3:d4:00:2e: 4c:03:96:00:ec:f5:d4:b3:d0:db:eb:e4:0f:6f:1e:05:45:df: 50:bb:a9:67:b2:7a:d0:a2:f2:e9:6f:68:70:39:02:98:ec:cf: 85:54:c0:d6:4b:11:e9:83:52:96:df:79:7f:97:9c:0b:70:ce: f3:5e:a3:59:fc:83:a8:ff:a1:17:9e:61:67:cb:b8:d4:d9:c7: cb:d0:cc:3d:d8:c8:35:a2:8e:2e:06:bc:11:f6:c7:35:73:16: d3:e5:80:e7:dd:0f:5e:d4:61:83:e4:6d:30:a0:98:ac:e5:c5: 59:54:35:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFFTv4z794aW0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZmQ0NTg2MWYtMmUzNi00NzlmLTg4YWMtZmE5NWNhZWE4MDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpvNk4WynVe6HtqycHiWmX7sArTVVjBqsVLY fxRlm4gVHugqzOYLkwlTKIoXwtSLDFlUkNpP0f1SQJtTa3vYaMAdahOoCpQVGPKM /CtuQTXIYCg0oWHe2khCUsOGxOfxZ4oCxFzA0XpHCygU2vAwXxbFFZV62OBhSoIu JDkJbU/Ha343IWzlRN1udHlcUMitX510sSuuA4uvGFI/hm+/gX1NM123jzNK47Mr kmOtm5iytCbl9EMAZkYyZPnwXPwrWHTmjK2g0xi1YdGg0OiiSLUC5VDQ0wQQsc4N Gt7bpRuEPPI8cgBM22jY29fyqBbuuJxSBWrdUTXo3z+jE1hMEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMBphNuDXJ+fEz3iiv+ovPOhARnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTMwNTcyZDQtZTQ1ZC0z NjRiLWJhOWYtNmFiMWQ1MDM0OTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQBj8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6rMEshHQl/jMWZxzLaj10WSkYcy4ZhAR603Gy+1Vb1e82KMCQd+2Ov E2E1FvAah4WPZWJV4YBXogNBZW+lgwL4MMb+oX2WFD5AmCNi8Ce7kJ3Druf1Kua0 Gz6oSWqT5/w1sjuTzlhqGRmD+n6qHBq46bKknicXPfBV7eHy0n3IKMakv0mmxw88 jrDz09QALkwDlgDs9dSz0Nvr5A9vHgVF31C7qWeyetCi8ulvaHA5Apjsz4VUwNZL EemDUpbfeX+XnAtwzvNeo1n8g6j/oReeYWfLuNTZx8vQzD3YyDWiji4GvBH2xzVz FtPlgOfdD17UYYPkbTCgmKzlxVlUNTA= -----END CERTIFICATE-----Generated at Tue Nov 4 17:00:33 2025 by rpki-client