$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b20af1d0-e956-3e29-97d7-865222ab8240.roa File: b20af1d0-e956-3e29-97d7-865222ab8240.roa (raw, json) Hash identifier: 4LRaRwD7+GMflYU+Cz/uZ38Sdx1dirqS8Ip+bdrQqQk= Subject key identifier: 89:00:AC:46:B2:92:66:EC:4B:AC:88:74:96:3A:5A:29:2B:45:78:7B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B95AA28C6DC9CE89FF9D00200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b20af1d0-e956-3e29-97d7-865222ab8240.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7029 IP address blocks: 162.40.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:28:c6:dc:9c:e8:9f:f9:d0:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=098655e6-db8b-4e0f-a9de-01760bd847ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fe:0a:d5:02:81:e2:7f:0b:a3:ab:be:1d:5c: 0f:05:42:9f:43:10:2a:33:47:0f:ec:c8:fd:c5:5c: 94:09:e5:fa:d9:e1:ac:cb:02:a7:e3:6b:24:91:1f: b5:6d:ab:6c:a4:9a:04:01:7a:de:1c:57:9e:da:cf: 99:3a:8c:1e:e3:c8:46:3a:df:9f:c1:09:e9:21:37: 62:37:90:64:fe:79:18:ae:4d:36:8c:94:69:da:6c: 57:01:38:33:1f:70:8e:c5:56:8d:b1:12:ba:91:a4: 6f:ec:09:48:13:37:7c:5a:f6:ea:b5:2b:5d:0b:68: 08:3e:49:bb:0e:92:cd:e1:12:a8:2d:12:78:2f:5d: b8:05:72:4c:f4:c6:a4:62:f7:9c:54:07:ca:e3:9c: 26:b0:2c:b0:1d:48:f7:01:89:28:7b:0d:f2:05:ab: b4:2f:97:38:51:a0:c2:63:e2:17:5f:16:0b:e6:34: 83:63:8f:8d:bf:27:36:e0:60:f5:62:54:8f:ad:17: 6f:e5:49:40:76:be:24:70:86:ef:a4:1b:5e:d0:99: 48:eb:09:05:6c:a5:42:e9:3b:95:b5:a4:4c:89:e5: 6f:32:3b:b1:0a:03:92:ed:ba:25:33:f8:b8:fe:d9: 06:7b:4a:8e:d8:d8:2f:c9:74:4c:a3:fd:2a:a9:fb: 21:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:00:AC:46:B2:92:66:EC:4B:AC:88:74:96:3A:5A:29:2B:45:78:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b20af1d0-e956-3e29-97d7-865222ab8240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.40.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:82:50:0d:68:73:be:3c:d0:34:19:fd:ef:84:49:97:11:01: 56:55:74:00:72:f3:4d:73:40:88:66:64:5e:e1:dd:26:88:61: e0:80:59:cd:75:d1:06:c1:8b:d9:13:17:26:1f:0b:ac:74:59: cf:03:a0:d6:4f:d1:24:36:36:eb:75:52:29:24:a3:83:37:ee: fd:9b:d8:83:0c:c1:42:6e:8a:02:45:84:21:24:63:5d:87:d6: da:59:1e:dd:8c:2c:c2:f0:e8:83:68:f5:96:59:7e:34:7b:80: 6f:52:b6:5a:1d:86:10:d6:62:61:5b:7b:b2:a2:9d:10:57:59: ea:66:8a:25:74:0f:d9:6f:de:4f:81:03:cf:95:32:6e:a2:76: 59:00:df:5d:20:19:fe:62:5d:ed:84:87:4a:96:42:0e:01:44: ff:5b:0f:d0:d0:13:8c:ff:c2:10:d2:6e:5f:48:6e:15:50:9f: fc:e6:52:c9:a7:3a:18:c1:f2:80:49:20:2e:3e:cd:85:32:9a: f4:7b:48:d5:93:19:76:11:4f:54:33:23:4c:65:14:f0:49:53: 98:af:8b:00:62:47:e3:40:8a:eb:9c:73:f0:d0:42:6c:3c:59: 4a:34:9f:ed:56:18:d5:aa:4d:76:d7:bc:75:5c:22:7b:07:d9: 32:af:0d:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqijG3Jzon/nQAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MDk4NjU1ZTYtZGI4Yi00ZTBmLWE5ZGUtMDE3NjBiZDg0N2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP4K1QKB4n8Lo6u+HVwPBUKfQxAqM0cP7Mj9 xVyUCeX62eGsywKn42skkR+1batspJoEAXreHFee2s+ZOowe48hGOt+fwQnpITdi N5Bk/nkYrk02jJRp2mxXATgzH3COxVaNsRK6kaRv7AlIEzd8WvbqtStdC2gIPkm7 DpLN4RKoLRJ4L124BXJM9MakYvecVAfK45wmsCywHUj3AYkoew3yBau0L5c4UaDC Y+IXXxYL5jSDY4+Nvyc24GD1YlSPrRdv5UlAdr4kcIbvpBte0JlI6wkFbKVC6TuV taRMieVvMjuxCgOS7bolM/i4/tkGe0qO2NgvyXRMo/0qqfsh0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkArEaykmbsS6yIdJY6WikrRXh7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjIwYWYxZDAtZTk1Ni0z ZTI5LTk3ZDctODY1MjIyYWI4MjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoiggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSCUA1oc7480DQZ/e+ESZcRAVZVdABy801zQIhmZF7h3SaIYeCAWc11 0QbBi9kTFyYfC6x0Wc8DoNZP0SQ2Nut1Uikko4M37v2b2IMMwUJuigJFhCEkY12H 1tpZHt2MLMLw6INo9ZZZfjR7gG9StlodhhDWYmFbe7KinRBXWepmiiV0D9lv3k+B A8+VMm6idlkA310gGf5iXe2Eh0qWQg4BRP9bD9DQE4z/whDSbl9IbhVQn/zmUsmn OhjB8oBJIC4+zYUymvR7SNWTGXYRT1QzI0xlFPBJU5iviwBiR+NAiuucc/DQQmw8 WUo0n+1WGNWqTXbXvHVcInsH2TKvDcs= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:13 2025 by rpki-client