$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99b6794d-5ae8-3a26-af4c-b99404165104.roa File: 99b6794d-5ae8-3a26-af4c-b99404165104.roa (raw, json) Hash identifier: SjnDQj0lSQ9pBZ7uyxhLW7aB53g12dDfnWmILzPqYbM= Subject key identifier: E0:56:B3:CE:E4:AE:39:9E:31:4D:B8:FD:A1:0F:CC:FB:53:50:AE:89 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B33F1B608BB8FAE7BAAB13140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99b6794d-5ae8-3a26-af4c-b99404165104.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 7029 IP address blocks: 173.188.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:b6:08:bb:8f:ae:7b:aa:b1:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=b5dc32bb-4dfb-4f16-83de-949a107ba73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3c:9e:25:1d:ab:39:73:11:9d:42:96:c8:ce: b1:e1:1b:38:b0:c7:59:e6:e4:34:9c:b6:b2:54:bc: 37:bf:93:8c:0f:62:0d:bf:86:fb:20:95:c7:fd:f4: 1b:bd:81:90:7e:9b:51:f4:69:83:24:42:58:42:69: 72:4f:1d:32:37:1e:66:39:dc:94:3f:4e:db:05:4d: cd:9d:a9:6e:68:5e:68:62:72:fa:dc:37:5f:a7:07: da:ac:66:bb:c6:c8:ea:28:49:41:6c:b1:57:39:25: 9b:a5:b5:ec:f9:2d:6b:78:41:79:d9:ce:ac:55:45: ec:c1:42:ea:d1:47:34:77:c8:92:1b:1e:bc:dd:e8: 51:6c:17:93:7c:10:e9:78:b1:f3:d5:0f:dd:d7:83: 14:e8:8d:e8:e5:dd:ba:6d:32:1e:fa:32:c7:16:81: c9:72:07:c1:9f:a9:c4:ea:fb:69:98:c5:75:83:75: a4:5a:0a:0b:ec:02:94:10:5e:ba:34:07:7c:5e:7c: 5a:53:c2:24:f9:7f:64:93:6c:a2:4d:05:d7:75:be: b7:30:44:bc:eb:78:5e:4f:75:c7:b5:31:07:32:eb: 08:f0:dd:04:4d:bc:bb:f8:ae:f8:e4:ab:23:4f:f2: 4f:6b:36:3a:e2:14:c9:9b:6a:dd:d4:9f:15:37:68: a9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:56:B3:CE:E4:AE:39:9E:31:4D:B8:FD:A1:0F:CC:FB:53:50:AE:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99b6794d-5ae8-3a26-af4c-b99404165104.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:94:28:ea:bf:7f:77:17:69:8b:5d:60:93:70:5d:77:cd:36: d2:ef:c4:6f:ad:b6:86:49:d3:97:22:64:c9:1e:d9:10:04:21: 7c:83:b3:e2:91:1f:61:a8:a6:7d:3d:9d:4c:06:8d:d3:20:e7: 14:17:45:be:cd:4b:86:df:ea:9f:27:bb:7e:df:3f:fc:70:2b: eb:ac:c1:55:7e:dc:0a:bf:05:5e:e7:6a:57:a1:c8:7e:52:6f: 7a:99:cb:4c:c4:ab:91:32:c6:36:96:00:d4:6c:1c:2b:1c:fc: ea:c9:7f:6c:f0:1c:e8:08:bd:fc:7d:2f:8a:1f:e1:f2:72:d3: 6b:b9:d2:79:22:6b:e9:b9:36:21:bc:df:a9:86:5d:0c:da:9e: 5a:1e:9d:00:12:c4:ce:4e:7d:2b:66:2a:df:cd:c8:71:46:82: 44:00:fc:75:53:44:74:38:88:f7:89:16:f7:fd:40:79:59:db: 70:0a:27:c9:94:cd:94:7a:49:27:2e:2e:ee:f5:13:11:6c:73: 9b:5d:cc:83:53:84:33:76:e4:bd:94:6f:65:f3:d6:1a:58:fb: ef:97:c1:51:a7:38:0b:8b:25:31:16:95:74:00:4e:62:4e:42: 10:c8:79:bc:24:9a:a4:1b:83:43:81:ed:89:46:c7:0b:39:19: da:ee:ca:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8bYIu4+ue6qxMUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk YjVkYzMyYmItNGRmYi00ZjE2LTgzZGUtOTQ5YTEwN2JhNzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijyeJR2rOXMRnUKWyM6x4Rs4sMdZ5uQ0nLay VLw3v5OMD2INv4b7IJXH/fQbvYGQfptR9GmDJEJYQmlyTx0yNx5mOdyUP07bBU3N naluaF5oYnL63DdfpwfarGa7xsjqKElBbLFXOSWbpbXs+S1reEF52c6sVUXswULq 0Uc0d8iSGx683ehRbBeTfBDpeLHz1Q/d14MU6I3o5d26bTIe+jLHFoHJcgfBn6nE 6vtpmMV1g3WkWgoL7AKUEF66NAd8XnxaU8Ik+X9kk2yiTQXXdb63MES863heT3XH tTEHMusI8N0ETby7+K745KsjT/JPazY64hTJm2rd1J8VN2ip7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBWs87krjmeMU24/aEPzPtTUK6JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTliNjc5NGQtNWFlOC0z YTI2LWFmNGMtYjk5NDA0MTY1MTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeUKOq/f3cXaYtdYJNwXXfNNtLvxG+ttoZJ05ciZMke2RAEIXyDs+KR H2Gopn09nUwGjdMg5xQXRb7NS4bf6p8nu37fP/xwK+uswVV+3Aq/BV7nalehyH5S b3qZy0zEq5EyxjaWANRsHCsc/OrJf2zwHOgIvfx9L4of4fJy02u50nkia+m5NiG8 36mGXQzanloenQASxM5OfStmKt/NyHFGgkQA/HVTRHQ4iPeJFvf9QHlZ23AKJ8mU zZR6SScuLu71ExFsc5tdzINThDN25L2Ub2Xz1hpY+++XwVGnOAuLJTEWlXQATmJO QhDIebwkmqQbg0OB7YlGxws5Gdruymc= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:16 2025 by rpki-client