$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/958402c9-3b0d-36b2-be3e-11fd05143ae2.roa File: 958402c9-3b0d-36b2-be3e-11fd05143ae2.roa (raw, json) Hash identifier: t5cNTYuf0VkmgiTro8jOlENDhlQ8Z1/G10ARjuS0E0s= Subject key identifier: 46:84:7E:E1:47:E6:E4:0F:14:18:0B:F8:A2:D0:C8:E7:9F:0E:01:CD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2CA04701204758BC2AF520 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/958402c9-3b0d-36b2-be3e-11fd05143ae2.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 174.131.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:a0:47:01:20:47:58:bc:2a:f5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=1412f260-1e79-4648-a218-d525961679f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2a:d7:a8:ee:b5:c8:40:f7:3c:c4:52:e9:62: 3f:15:2c:03:f2:60:73:fc:2b:51:74:4a:e8:13:18: 96:e5:45:2b:be:be:32:b6:25:6c:22:16:2d:9f:a0: f6:9c:82:b7:41:f4:a4:df:88:0f:0a:8e:c9:4a:4b: 4b:ff:71:1f:ab:8e:9b:2b:6b:bd:9a:f3:e5:ad:c7: 3f:b7:62:71:8b:54:46:fe:9f:bb:17:5d:b8:98:88: 9b:1f:22:b0:98:d0:84:f7:cd:5b:38:cf:ab:38:2d: d1:aa:09:1b:c8:32:ee:3a:fa:fa:5d:70:9a:48:2a: 84:89:be:f6:cc:99:94:e6:f5:f2:4c:e6:ad:79:65: f6:80:f2:0e:be:61:66:ab:04:20:31:05:09:d6:eb: e8:cd:39:d8:e6:14:56:a6:35:a0:1b:ee:b4:c3:4d: 08:50:d4:0a:2b:60:36:8b:ce:bb:2d:9f:c4:85:9f: 67:dd:01:c8:38:60:12:63:a3:9d:73:10:67:e3:94: 70:b1:27:ab:ec:5f:71:14:e5:99:68:d0:69:a8:11: 57:d0:a0:31:c1:db:7a:0e:b9:cd:0a:7c:a4:d1:2b: 82:39:4c:9e:10:84:37:6d:32:34:84:8a:b5:86:23: 13:24:f5:c5:c8:62:3e:05:71:1a:ed:66:f4:85:dd: ad:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:84:7E:E1:47:E6:E4:0F:14:18:0B:F8:A2:D0:C8:E7:9F:0E:01:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/958402c9-3b0d-36b2-be3e-11fd05143ae2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:17:f1:c5:ed:4a:a9:86:2c:77:d4:0b:d1:6c:b0:ae:d4:3e: 27:e5:1f:69:4f:a0:4a:8b:bd:28:32:42:b3:89:b0:0f:5b:63: 64:90:16:37:23:f0:fc:71:23:ec:ff:13:ad:0a:76:b3:44:0c: 99:6f:84:17:5c:35:71:a6:ce:1e:ef:8d:b2:65:23:86:a4:d5: 09:77:ee:46:72:b1:3a:17:6f:9e:c6:72:72:4f:20:9a:7a:1f: 5c:6f:8d:32:63:dc:4a:55:cb:1b:ef:df:8d:65:e4:c0:d0:c0: 85:42:f9:b1:6a:51:15:3d:4f:9f:93:81:d7:49:88:b6:a7:9e: b0:d4:de:68:87:fb:a0:08:0b:c8:17:ce:0b:7c:22:59:b5:7f: ef:34:73:70:35:60:85:fd:1d:ed:9c:53:ea:4e:c9:b0:17:51: 3c:62:fe:9f:93:8b:23:ab:fe:9a:7c:ab:83:89:09:65:06:95: 87:01:c8:05:ee:01:be:ca:73:93:62:68:2f:29:93:d7:3f:13: c0:c5:87:0a:22:cb:80:8f:28:1b:2c:70:58:2b:1b:e2:46:37: 2d:07:0a:80:dc:09:d1:2c:ac:10:dc:b7:9b:f5:99:e7:53:91: 2f:c7:67:4e:8e:93:83:4d:eb:b4:61:98:f8:b7:4f:a2:28:30: 09:9d:bc:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLKBHASBHWLwq9SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MTQxMmYyNjAtMWU3OS00NjQ4LWEyMTgtZDUyNTk2MTY3OWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyrXqO61yED3PMRS6WI/FSwD8mBz/CtRdEro ExiW5UUrvr4ytiVsIhYtn6D2nIK3QfSk34gPCo7JSktL/3Efq46bK2u9mvPlrcc/ t2Jxi1RG/p+7F124mIibHyKwmNCE981bOM+rOC3RqgkbyDLuOvr6XXCaSCqEib72 zJmU5vXyTOateWX2gPIOvmFmqwQgMQUJ1uvozTnY5hRWpjWgG+60w00IUNQKK2A2 i867LZ/EhZ9n3QHIOGASY6OdcxBn45RwsSer7F9xFOWZaNBpqBFX0KAxwdt6DrnN Cnyk0SuCOUyeEIQ3bTI0hIq1hiMTJPXFyGI+BXEa7Wb0hd2t3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEaEfuFH5uQPFBgL+KLQyOefDgHNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTU4NDAyYzktM2IwZC0z NmIyLWJlM2UtMTFmZDA1MTQzYWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEroOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUX8cXtSqmGLHfUC9FssK7UPiflH2lPoEqLvSgyQrOJsA9bY2SQFjcj 8PxxI+z/E60KdrNEDJlvhBdcNXGmzh7vjbJlI4ak1Ql37kZysToXb57GcnJPIJp6 H1xvjTJj3EpVyxvv341l5MDQwIVC+bFqURU9T5+TgddJiLannrDU3miH+6AIC8gX zgt8Ilm1f+80c3A1YIX9He2cU+pOybAXUTxi/p+TiyOr/pp8q4OJCWUGlYcByAXu Ab7Kc5NiaC8pk9c/E8DFhwoiy4CPKBsscFgrG+JGNy0HCoDcCdEsrBDct5v1medT kS/HZ06Ok4NN67RhmPi3T6IoMAmdvAM= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:02 2025 by rpki-client