$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b508d8e4-48c2-34a6-8dec-287de9c363f1.roa File: b508d8e4-48c2-34a6-8dec-287de9c363f1.roa (raw, json) Hash identifier: dmKy8J4uE0PwFrIP0S/gF4atlZmOXN1doIiU6IpQeE4= Subject key identifier: 22:EF:81:BE:98:A6:4E:CD:9D:AA:AE:8E:0B:1B:61:5C:45:A3:39:D2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CD247BCF8B33E6F250680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b508d8e4-48c2-34a6-8dec-287de9c363f1.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 27338 IP address blocks: 209.192.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:d2:47:bc:f8:b3:3e:6f:25:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=b9d9ee5c-2a46-4a97-9426-b02588de2d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:db:c6:e8:a0:35:0d:62:45:fd:ec:5c:35:7b: cf:e4:71:ce:fe:fc:10:d8:f8:be:ed:f6:92:5e:1b: 97:4f:5b:76:44:73:3e:0e:95:c1:d5:37:ad:dd:13: 92:9d:99:b8:c3:6d:8f:2f:32:13:04:4b:ac:9b:fe: 4c:ef:47:3c:ca:8c:bc:8a:69:00:fb:90:76:19:f6: 59:70:83:e2:02:a9:66:32:97:d5:b5:88:57:37:ab: 21:5b:ed:fc:51:e6:c2:9e:c2:4e:75:fd:6e:4c:3a: e3:6f:49:c7:dd:5f:a4:b9:26:9e:f0:9a:74:42:56: fa:da:0a:8e:bc:87:d7:c5:6c:5d:2d:e4:6c:05:57: 87:a3:cd:44:7b:fd:5a:0b:7d:b6:2d:8f:cd:53:98: 78:1e:e4:5c:12:64:08:d7:ab:3b:fc:37:57:59:23: d3:a8:84:ae:17:ce:6c:2b:6e:70:ce:51:21:9d:8c: 9e:5a:27:b8:e9:af:4e:dd:4f:01:cf:12:c3:34:9e: b1:2e:cb:34:65:1d:f9:b0:ce:72:64:06:c3:b1:f9: 5e:2d:03:59:db:86:f4:54:7f:0c:fa:e0:1f:a3:9b: 60:7f:c7:fa:07:88:c7:7c:89:16:bc:a1:35:60:3b: 31:98:95:fd:20:cb:1a:06:e3:81:6f:0c:d4:7d:97: 78:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EF:81:BE:98:A6:4E:CD:9D:AA:AE:8E:0B:1B:61:5C:45:A3:39:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b508d8e4-48c2-34a6-8dec-287de9c363f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:2e:3e:14:97:95:b0:a2:07:b5:75:11:7c:7b:90:bb:ad:8b: 54:80:2e:f4:02:21:8e:92:b5:6c:ce:53:b7:37:f4:42:6c:80: 67:05:47:7c:e5:71:13:09:87:e8:73:4b:01:ef:c7:47:d6:da: 4f:91:fb:1f:90:b3:9d:37:13:36:8f:f3:91:41:fa:f3:32:98: 0d:07:53:a6:23:b8:01:90:e8:10:42:0e:bf:fc:ff:c0:e3:76: 7e:ff:ba:e7:37:c0:51:3b:b6:2d:27:65:6d:e4:0f:c0:db:dd: e7:59:0a:8a:7d:9b:2f:f5:b3:5f:5b:32:aa:22:5a:95:ff:6c: 3c:ef:08:87:03:64:f2:8b:9a:21:d1:a9:d8:24:ce:73:0c:66: 5e:a1:11:fe:49:e5:47:ea:7a:4e:f7:59:a0:83:cb:e3:0c:0d: 71:43:9d:01:97:1d:aa:20:0e:4c:0a:7c:06:9e:5a:8b:a2:fd: 1b:62:e0:d0:a2:e6:ea:e6:76:16:7a:c4:c4:23:b8:cb:d5:a6: f1:1b:0b:eb:65:9c:77:5d:8c:d6:d1:b1:15:2c:b7:61:df:8c: 66:40:12:3d:53:3b:4c:75:3e:35:fe:2d:24:52:2f:0c:05:bd: 23:f8:ad:a7:8b:0d:03:75:b5:be:5b:6e:9e:55:fd:ac:e9:74: 84:7c:8f:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXNJHvPizPm8lBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YjlkOWVlNWMtMmE0Ni00YTk3LTk0MjYtYjAyNTg4ZGUyZDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9vG6KA1DWJF/excNXvP5HHO/vwQ2Pi+7faS XhuXT1t2RHM+DpXB1Tet3ROSnZm4w22PLzITBEusm/5M70c8yoy8imkA+5B2GfZZ cIPiAqlmMpfVtYhXN6shW+38UebCnsJOdf1uTDrjb0nH3V+kuSae8Jp0Qlb62gqO vIfXxWxdLeRsBVeHo81Ee/1aC322LY/NU5h4HuRcEmQI16s7/DdXWSPTqISuF85s K25wzlEhnYyeWie46a9O3U8BzxLDNJ6xLss0ZR35sM5yZAbDsfleLQNZ24b0VH8M +uAfo5tgf8f6B4jHfIkWvKE1YDsxmJX9IMsaBuOBbwzUfZd40wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLvgb6Ypk7NnaqujgsbYVxFoznSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjUwOGQ4ZTQtNDhjMi0z NGE2LThkZWMtMjg3ZGU5YzM2M2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cAnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsuPhSXlbCiB7V1EXx7kLuti1SALvQCIY6StWzOU7c39EJsgGcFR3zl cRMJh+hzSwHvx0fW2k+R+x+Qs503EzaP85FB+vMymA0HU6YjuAGQ6BBCDr/8/8Dj dn7/uuc3wFE7ti0nZW3kD8Db3edZCop9my/1s19bMqoiWpX/bDzvCIcDZPKLmiHR qdgkznMMZl6hEf5J5Ufqek73WaCDy+MMDXFDnQGXHaogDkwKfAaeWoui/Rti4NCi 5urmdhZ6xMQjuMvVpvEbC+tlnHddjNbRsRUst2HfjGZAEj1TO0x1PjX+LSRSLwwF vSP4raeLDQN1tb5bbp5V/azpdIR8jyg= -----END CERTIFICATE-----Generated at Wed Nov 5 03:01:05 2025 by rpki-client