$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a54fd373-08fe-3548-a890-b345203aaa0d.roa File: a54fd373-08fe-3548-a890-b345203aaa0d.roa (raw, json) Hash identifier: UCobptfvogGulc+VuUP25UjWXdxLS6lnye3OkTJfMVA= Subject key identifier: B2:E8:D4:9E:BE:4A:B1:52:75:FE:B9:A4:67:D7:B5:1A:AA:B3:BD:98 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CD21E8CDF149ED7778980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a54fd373-08fe-3548-a890-b345203aaa0d.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 27338 IP address blocks: 209.192.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:d2:1e:8c:df:14:9e:d7:77:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=ba77e6e4-7c42-400f-b9b5-f38183b16293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2e:98:7a:b7:a3:8e:7f:c1:fa:53:5e:e8:bc: 28:ac:8f:7d:54:b3:89:e8:44:58:ee:f3:fd:28:68: dc:10:e3:d6:30:d2:f6:31:a2:3d:46:e7:e4:ec:40: f5:5a:73:35:ef:83:33:1a:2a:98:89:54:ee:59:0d: 61:2c:ae:24:99:11:4e:51:3c:d9:52:f4:a7:4d:cf: 9d:1e:05:e7:86:09:20:0d:15:f4:02:d7:4e:c7:a5: c3:66:bb:49:14:23:38:3f:6c:93:98:9b:3e:8a:ee: 1b:37:05:81:fb:72:1a:cf:49:03:e1:29:6c:0d:ae: 31:4a:24:75:51:d9:8d:28:aa:fd:68:05:aa:86:35: 25:1a:68:95:42:73:82:76:b2:7f:58:06:45:75:77: 0b:6d:fc:10:ef:d9:74:31:32:d4:89:8f:a0:b2:b6: 86:e6:8d:91:1e:fc:24:e9:fb:79:71:8f:0e:53:31: 77:1e:4e:a3:5f:ff:0c:5f:13:ed:e2:df:57:9e:7d: 37:0a:25:28:cb:01:21:24:ab:6b:c5:d4:cb:8e:e3: ab:01:1c:e5:da:f8:83:03:71:21:5e:0a:d1:2b:61: 9d:80:2d:b3:13:65:95:95:fd:1f:03:a2:ef:f4:17: 8a:16:79:a6:a3:21:e5:38:f5:e1:b2:43:42:70:57: 63:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E8:D4:9E:BE:4A:B1:52:75:FE:B9:A4:67:D7:B5:1A:AA:B3:BD:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a54fd373-08fe-3548-a890-b345203aaa0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:66:e0:c1:1c:88:38:ef:63:c4:8c:84:b2:4a:18:e7:85:2b: c4:b0:9d:db:01:4f:2d:de:6b:9a:fe:55:79:80:81:b9:5f:b4: ba:50:f1:5b:98:b0:cf:13:02:c2:3e:7b:ff:59:e0:71:93:4f: fa:74:fb:5e:a6:6d:08:49:b4:b9:77:56:4f:7b:46:f5:b1:0f: 94:a9:69:da:6c:aa:a3:2f:be:e6:85:9f:78:7c:1d:3a:94:97: a9:f4:73:0e:13:b0:d0:c1:22:47:db:50:89:d3:10:5e:3c:ce: f3:24:47:3b:95:e9:18:72:df:67:00:41:f1:fe:74:7e:d6:e0: 9e:3c:e0:a3:c2:43:3f:72:3e:25:31:a4:d9:d2:5b:67:55:51: 86:3e:c7:b5:1e:21:9d:94:67:66:01:5b:01:f9:f4:74:47:b9: 03:df:45:64:5a:2a:6e:77:9a:63:b0:90:c1:85:5a:81:92:b1: 1f:28:ca:ee:22:62:c2:53:84:3a:08:42:10:e9:95:64:77:5e: 55:49:08:f1:8c:44:63:39:ed:06:dc:86:84:d6:dd:9b:13:9c: 3a:14:a6:92:7b:f8:14:e1:60:01:65:30:ed:8b:67:58:7f:e4: 00:49:d6:0e:50:df:ac:8b:9f:88:09:d8:53:0b:34:f0:f0:73: 4c:9e:89:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXNIejN8Untd3iYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YmE3N2U2ZTQtN2M0Mi00MDBmLWI5YjUtZjM4MTgzYjE2MjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy6Yerejjn/B+lNe6LworI99VLOJ6ERY7vP9 KGjcEOPWMNL2MaI9Rufk7ED1WnM174MzGiqYiVTuWQ1hLK4kmRFOUTzZUvSnTc+d HgXnhgkgDRX0AtdOx6XDZrtJFCM4P2yTmJs+iu4bNwWB+3Iaz0kD4SlsDa4xSiR1 UdmNKKr9aAWqhjUlGmiVQnOCdrJ/WAZFdXcLbfwQ79l0MTLUiY+gsraG5o2RHvwk 6ft5cY8OUzF3Hk6jX/8MXxPt4t9Xnn03CiUoywEhJKtrxdTLjuOrARzl2viDA3Eh XgrRK2GdgC2zE2WVlf0fA6Lv9BeKFnmmoyHlOPXhskNCcFdj6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLo1J6+SrFSdf65pGfXtRqqs72YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTU0ZmQzNzMtMDhmZS0z NTQ4LWE4OTAtYjM0NTIwM2FhYTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cABMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZm4MEciDjvY8SMhLJKGOeFK8SwndsBTy3ea5r+VXmAgblftLpQ8VuY sM8TAsI+e/9Z4HGTT/p0+16mbQhJtLl3Vk97RvWxD5SpadpsqqMvvuaFn3h8HTqU l6n0cw4TsNDBIkfbUInTEF48zvMkRzuV6Rhy32cAQfH+dH7W4J484KPCQz9yPiUx pNnSW2dVUYY+x7UeIZ2UZ2YBWwH59HRHuQPfRWRaKm53mmOwkMGFWoGSsR8oyu4i YsJThDoIQhDplWR3XlVJCPGMRGM57QbchoTW3ZsTnDoUppJ7+BThYAFlMO2LZ1h/ 5ABJ1g5Q36yLn4gJ2FMLNPDwc0yeiRM= -----END CERTIFICATE-----Generated at Wed Nov 5 09:04:06 2025 by rpki-client