$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b034b285-5373-34b9-838f-174cb0c76488.roa File: b034b285-5373-34b9-838f-174cb0c76488.roa (raw, json) Hash identifier: 1dSXane1HtW3HZ+n8qkZguXLAieAEs3CflGis8TSNPw= Subject key identifier: 40:E6:E9:80:6D:07:3F:BC:DB:30:9E:C4:23:9E:55:6E:42:8B:90:53 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCA21BB9C8DA15830D480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b034b285-5373-34b9-838f-174cb0c76488.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 209.253.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ca:21:bb:9c:8d:a1:58:30:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=79baab24-de2c-4546-99a3-e910ad06a0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:be:ee:a8:3f:1e:d8:b4:b2:9d:99:22:5d:c7: ab:d0:4c:35:1b:46:d8:e6:46:1f:e9:b1:aa:80:82: 00:b8:1a:a5:f2:cd:ca:31:8c:4d:3f:03:ac:34:ea: d6:34:f1:a7:ae:07:0e:ab:b4:1a:89:b7:95:ba:ba: d3:39:5c:a7:a4:06:13:c2:cb:b1:30:c0:b5:33:4b: c9:ba:22:aa:1d:f4:84:e8:64:c2:dd:22:9a:a4:21: 9a:81:69:8b:76:b1:bd:36:e9:06:9c:00:ce:25:f7: 41:ea:19:4c:07:3b:dd:b9:81:28:ed:3c:1a:3a:88: b2:5c:a8:37:87:2e:8a:ec:12:47:7f:9f:42:6b:64: f0:e9:77:78:7e:c2:0b:08:91:2d:0b:b5:d9:20:18: 0d:d1:b8:2e:5f:01:e1:3e:60:04:f0:f0:5f:83:81: 96:be:51:9d:1e:26:70:bd:33:bc:93:82:90:41:16: 2c:17:46:d5:4f:b2:7e:b3:85:1f:b1:20:59:d1:0d: a0:2e:10:0c:b5:12:bc:79:ad:88:2c:d4:4e:71:3f: 4d:c5:62:af:ed:af:e5:d6:f6:9f:f8:0f:65:b1:4f: f1:35:49:34:17:47:2f:c0:aa:fc:90:ae:04:f4:6a: 80:69:91:e8:45:f0:25:2a:83:3f:8e:5b:f4:a2:48: c5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E6:E9:80:6D:07:3F:BC:DB:30:9E:C4:23:9E:55:6E:42:8B:90:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b034b285-5373-34b9-838f-174cb0c76488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.253.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:07:2f:82:f0:92:1a:27:0b:a7:0a:73:3d:f2:5e:a2:9a:e0: 8b:31:c7:57:48:86:ec:ba:b9:cf:6d:a3:b9:16:92:68:12:9a: eb:f0:be:e4:59:1e:3e:71:bb:be:18:57:7c:a6:e8:a7:5c:94: 03:ec:0a:bd:02:f6:4a:ea:69:12:22:69:e4:0b:da:d5:24:e1: 87:e8:4c:b8:c2:53:10:40:19:f9:10:db:5e:a1:66:b8:a6:f0: 99:79:6c:92:c7:bc:02:2e:12:9d:de:22:f4:07:1a:f9:30:1c: fc:55:87:ed:47:84:f0:42:17:3b:d1:ee:35:be:a4:c6:64:a5: 36:32:5f:73:27:25:90:2e:0b:11:44:35:dc:3b:ea:c7:d2:9e: 0b:57:10:9b:84:a4:dc:e2:06:8a:61:e1:cd:2e:94:d1:81:9f: 5d:1f:52:ce:f7:57:af:b9:65:f2:ef:af:73:3b:3d:72:09:c6: f4:78:07:25:21:40:6e:d1:e0:98:b3:f6:78:11:e4:4e:1c:5c: f6:79:e2:49:10:3f:24:d6:f8:0e:f0:c7:04:7e:d7:4c:61:b2: f6:3e:df:38:70:b6:6b:4a:d2:a8:9e:33:e3:8e:c6:3e:e5:1c: cc:fa:2a:14:6c:dc:69:e2:a6:bd:62:6f:15:b4:cb:e7:18:06: ef:ac:3b:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMohu5yNoVgw1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NzliYWFiMjQtZGUyYy00NTQ2LTk5YTMtZTkxMGFkMDZhMGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA177uqD8e2LSynZkiXcer0Ew1G0bY5kYf6bGq gIIAuBql8s3KMYxNPwOsNOrWNPGnrgcOq7QaibeVurrTOVynpAYTwsuxMMC1M0vJ uiKqHfSE6GTC3SKapCGagWmLdrG9NukGnADOJfdB6hlMBzvduYEo7TwaOoiyXKg3 hy6K7BJHf59Ca2Tw6Xd4fsILCJEtC7XZIBgN0bguXwHhPmAE8PBfg4GWvlGdHiZw vTO8k4KQQRYsF0bVT7J+s4UfsSBZ0Q2gLhAMtRK8ea2ILNROcT9NxWKv7a/l1vaf +A9lsU/xNUk0F0cvwKr8kK4E9GqAaZHoRfAlKoM/jlv0okjFmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDm6YBtBz+82zCexCOeVW5Ci5BTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjAzNGIyODUtNTM3My0z NGI5LTgzOGYtMTc0Y2IwYzc2NDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f2dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUHL4LwkhonC6cKcz3yXqKa4Isxx1dIhuy6uc9to7kWkmgSmuvwvuRZ Hj5xu74YV3ym6KdclAPsCr0C9krqaRIiaeQL2tUk4YfoTLjCUxBAGfkQ216hZrim 8Jl5bJLHvAIuEp3eIvQHGvkwHPxVh+1HhPBCFzvR7jW+pMZkpTYyX3MnJZAuCxFE Ndw76sfSngtXEJuEpNziBoph4c0ulNGBn10fUs73V6+5ZfLvr3M7PXIJxvR4ByUh QG7R4Jiz9ngR5E4cXPZ54kkQPyTW+A7wxwR+10xhsvY+3zhwtmtK0qieM+OOxj7l HMz6KhRs3Gnipr1ibxW0y+cYBu+sO7I= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:19 2025 by rpki-client