$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abd29bd5-d7af-3993-9a25-7daa6b570ac6.roa File: abd29bd5-d7af-3993-9a25-7daa6b570ac6.roa (raw, json) Hash identifier: ksTR5qcSQaKuwqL0SHRwQmHERaRynKyWSrzzt62aQ5I= Subject key identifier: 68:89:E9:E1:2F:14:A6:8A:C5:6F:2E:DD:B5:63:24:12:DE:69:D5:75 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE404A5BB7BB28666BA01400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abd29bd5-d7af-3993-9a25-7daa6b570ac6.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 173.191.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:4a:5b:b7:bb:28:66:6b:a0:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=9de7419c-d04f-4977-8320-87c608a91214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:87:46:90:c1:f3:d3:94:1a:ed:59:d3:40:4e: 03:4d:21:05:c4:55:12:4a:01:f3:da:8d:18:04:53: a4:0f:00:0d:f8:a4:58:bf:cd:9b:27:92:63:af:3b: f1:cc:83:2b:66:c5:5c:2f:33:d4:6e:a8:42:63:fc: 88:35:33:2c:13:1c:30:69:3f:e1:72:8c:be:f5:d8: a7:2f:bb:54:6e:64:74:3f:e5:15:cc:9c:53:c3:86: 2f:5b:f7:89:e7:29:d7:d3:51:ed:00:50:99:fc:46: 0f:8f:69:56:b2:0d:1f:01:da:53:d2:11:f9:f3:21: 2c:9b:af:88:95:d6:c1:4d:42:8e:d8:67:17:06:a7: 59:51:ca:c3:4d:3c:8d:23:89:0c:46:7e:f1:83:be: 6c:5e:14:fc:e4:15:98:5e:91:d5:53:cf:af:65:bf: 99:64:96:78:64:41:72:65:a7:a2:99:b2:2c:32:22: c6:4e:80:7c:8b:e6:8e:d8:ad:50:e9:fb:d8:76:9e: 1c:08:29:89:6e:95:f8:83:ef:f1:4d:f1:bd:3b:64: 36:e0:2e:b1:04:fc:01:3c:9e:1a:70:84:c5:e6:b3: 77:2e:31:6b:ee:ee:40:51:7c:ee:72:23:fd:9e:04: ce:00:91:79:f5:1c:0d:13:eb:fa:5e:bd:36:c4:bd: e3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:89:E9:E1:2F:14:A6:8A:C5:6F:2E:DD:B5:63:24:12:DE:69:D5:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abd29bd5-d7af-3993-9a25-7daa6b570ac6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:cc:d1:3c:27:c2:d7:4a:48:70:50:77:8c:5a:a9:b9:40:2d: 77:c8:a7:ae:a0:2f:97:d5:5a:da:75:d1:0c:be:a0:c4:2f:5b: c1:ff:06:77:34:78:a3:0f:a2:5a:5a:52:db:d4:72:a9:f4:ba: 0d:71:6b:f0:23:05:e3:e2:90:cd:3b:f7:01:34:62:27:9b:ae: a7:7a:95:8a:56:3c:20:83:8e:7e:6e:bf:9c:8c:27:94:08:fb: f4:bd:dd:44:fc:a1:ba:75:34:df:e7:13:ea:ea:ae:c3:14:93: a2:32:2e:0d:59:cc:e4:ef:2f:fd:df:d8:9a:f8:2e:b5:06:2f: ff:f1:28:86:e0:f3:52:d0:3a:c0:22:8f:36:13:12:aa:60:c1: c9:c0:a8:20:07:b2:18:32:e2:5d:e5:02:12:b7:3a:22:fb:57: b0:aa:5a:47:69:95:2e:a6:e6:8e:1e:e8:6e:23:9d:38:36:ca: ad:5f:6f:de:2e:0e:b2:d3:c2:42:b0:a5:cb:d4:db:fe:57:fe: c5:1b:97:25:99:5d:26:fd:d3:07:9c:1f:40:a0:53:6b:ee:f2: 8f:61:36:3f:27:9c:b7:d9:b2:d0:77:6f:66:05:45:08:9f:8f: 97:7f:9f:d7:f4:8d:ae:28:3b:ac:0f:5b:76:1c:ae:16:20:be: 22:e9:72:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEpbt7soZmugFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk OWRlNzQxOWMtZDA0Zi00OTc3LTgzMjAtODdjNjA4YTkxMjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYdGkMHz05Qa7VnTQE4DTSEFxFUSSgHz2o0Y BFOkDwAN+KRYv82bJ5JjrzvxzIMrZsVcLzPUbqhCY/yINTMsExwwaT/hcoy+9din L7tUbmR0P+UVzJxTw4YvW/eJ5ynX01HtAFCZ/EYPj2lWsg0fAdpT0hH58yEsm6+I ldbBTUKO2GcXBqdZUcrDTTyNI4kMRn7xg75sXhT85BWYXpHVU8+vZb+ZZJZ4ZEFy ZaeimbIsMiLGToB8i+aO2K1Q6fvYdp4cCCmJbpX4g+/xTfG9O2Q24C6xBPwBPJ4a cITF5rN3LjFr7u5AUXzuciP9ngTOAJF59RwNE+v6Xr02xL3jwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiJ6eEvFKaKxW8u3bVjJBLeadV1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWJkMjliZDUtZDdhZi0z OTkzLTlhMjUtN2RhYTZiNTcwYWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErb8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInM0TwnwtdKSHBQd4xaqblALXfIp66gL5fVWtp10Qy+oMQvW8H/Bnc0 eKMPolpaUtvUcqn0ug1xa/AjBePikM079wE0Yiebrqd6lYpWPCCDjn5uv5yMJ5QI +/S93UT8obp1NN/nE+rqrsMUk6IyLg1ZzOTvL/3f2Jr4LrUGL//xKIbg81LQOsAi jzYTEqpgwcnAqCAHshgy4l3lAhK3OiL7V7CqWkdplS6m5o4e6G4jnTg2yq1fb94u DrLTwkKwpcvU2/5X/sUblyWZXSb90wecH0CgU2vu8o9hNj8nnLfZstB3b2YFRQif j5d/n9f0ja4oO6wPW3YcrhYgviLpcjo= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:11 2025 by rpki-client