$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba90d395-c250-39f8-858a-8d91bddc257d.roa File: ba90d395-c250-39f8-858a-8d91bddc257d.roa (raw, json) Hash identifier: BzpsImutYfojk29jTul7Wv6mA8UFjT15Ob5i5KpUmvU= Subject key identifier: 87:F3:B1:CA:05:FA:12:20:8D:C8:B4:CD:89:C5:F9:B5:94:B9:65:F6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B8880E6D856F00B9099115480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba90d395-c250-39f8-858a-8d91bddc257d.roa Signing time: Wed 15 Oct 2025 19:57:21 +0000 ROA not before: Wed 15 Oct 2025 19:57:21 +0000 ROA not after: Tue 13 Jan 2026 20:57:21 +0000 asID: 7029 IP address blocks: 209.2.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:88:80:e6:d8:56:f0:0b:90:99:11:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 15 19:57:21 2025 GMT Not After : Jan 13 20:57:21 2026 GMT Subject: CN=79c9a6c4-be58-491f-8219-7399dea45b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e8:ee:d3:73:d2:56:cc:d2:45:dc:00:3a:9f: a2:5b:bf:4a:66:db:ec:0d:32:fb:21:6c:ab:6e:7f: 1b:53:b8:2f:d5:5a:68:c7:18:61:92:af:c8:69:a4: 69:5b:e6:3e:99:28:60:78:f2:35:97:52:7d:20:c9: 64:b5:c9:c9:9c:51:c9:9b:60:0d:6c:23:71:42:31: 0f:c9:5e:4f:38:cd:3e:b8:65:27:e4:5b:03:60:da: f9:0d:9f:c2:75:13:0b:e9:b4:08:8c:10:e3:29:d4: 24:24:32:f0:d3:ca:61:49:49:fc:3b:56:a3:ca:5f: a9:c1:4e:6e:88:86:6f:a8:6e:d8:fc:d9:d6:75:d4: 48:6a:c4:42:7e:0a:7a:22:6c:39:bb:88:57:48:a0: 68:ad:75:78:3c:d9:21:3c:86:fa:60:95:13:88:43: 60:cc:69:8e:f5:5c:86:8c:d9:ab:9d:2e:cb:d4:70: 39:7c:34:ac:64:98:ef:5a:22:a2:fa:64:76:01:ef: 5e:03:3f:2d:b5:3c:7c:d8:b4:17:40:f1:98:ad:5c: 44:16:cb:fb:d3:15:f1:26:fd:26:59:ea:e8:7f:51: 11:f5:d1:f9:82:5d:17:cb:fa:2c:04:fe:46:3d:dd: fa:a3:52:4f:5f:98:3e:d9:e2:8c:da:0e:bc:6f:e4: 44:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F3:B1:CA:05:FA:12:20:8D:C8:B4:CD:89:C5:F9:B5:94:B9:65:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba90d395-c250-39f8-858a-8d91bddc257d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:98:5e:44:92:2d:43:2e:5e:aa:af:2e:df:6c:77:63:4d:02: 0b:49:40:ef:d5:11:6b:6d:df:07:e6:dc:e9:b8:53:34:9b:6a: b4:22:58:5d:59:ab:18:39:2f:e7:01:85:63:33:af:f4:27:40: 31:68:60:5b:f5:dd:ac:b3:f5:f6:8e:4e:76:70:30:fd:04:69: ca:f4:c5:4d:1f:fc:84:ce:6d:1d:25:38:1b:03:16:b9:5f:09: ff:01:97:a6:51:ee:82:b6:c1:fc:cb:be:30:62:a7:5c:61:c4: 79:b6:40:97:8f:8f:ae:9c:91:b8:94:4a:c5:77:23:6f:f7:c4: fe:15:5c:08:9c:3e:ae:59:6a:6f:1b:33:cf:a7:e9:87:62:6a: 23:71:b1:bb:a2:9e:d0:bf:41:92:8c:93:45:03:4b:cd:15:04: 13:af:e4:b8:94:2c:9d:25:7e:3a:c4:d0:0d:a4:57:ae:f2:11: 8d:69:ac:e9:32:48:6f:f9:4e:7f:05:6b:04:c4:bc:0d:7b:ff: 0c:51:89:e2:9d:ef:5d:4d:7d:3b:24:28:e5:cf:16:04:5f:8d: ad:ae:cc:62:7a:1b:36:fb:7c:6c:b3:59:5b:73:d1:55:e9:69: 4a:ea:6b:6c:a0:58:12:82:7d:f1:84:df:86:b1:2b:c1:6e:9a: d9:67:cd:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuIgObYVvALkJkRVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxNTE5NTcyMVoXDTI2MDExMzIwNTcyMVowLzEtMCsGA1UEAxMk NzljOWE2YzQtYmU1OC00OTFmLTgyMTktNzM5OWRlYTQ1YjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOju03PSVszSRdwAOp+iW79KZtvsDTL7IWyr bn8bU7gv1Vpoxxhhkq/IaaRpW+Y+mShgePI1l1J9IMlktcnJnFHJm2ANbCNxQjEP yV5POM0+uGUn5FsDYNr5DZ/CdRML6bQIjBDjKdQkJDLw08phSUn8O1ajyl+pwU5u iIZvqG7Y/NnWddRIasRCfgp6Imw5u4hXSKBorXV4PNkhPIb6YJUTiENgzGmO9VyG jNmrnS7L1HA5fDSsZJjvWiKi+mR2Ae9eAz8ttTx82LQXQPGYrVxEFsv70xXxJv0m Werof1ER9dH5gl0Xy/osBP5GPd36o1JPX5g+2eKM2g68b+RE2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfzscoF+hIgjci0zYnF+bWUuWX2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmE5MGQzOTUtYzI1MC0z OWY4LTg1OGEtOGQ5MWJkZGMyNTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0QIoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByYXkSSLUMuXqqvLt9sd2NNAgtJQO/VEWtt3wfm3Om4UzSbarQiWF1Z qxg5L+cBhWMzr/QnQDFoYFv13ayz9faOTnZwMP0Eacr0xU0f/ITObR0lOBsDFrlf Cf8Bl6ZR7oK2wfzLvjBip1xhxHm2QJePj66ckbiUSsV3I2/3xP4VXAicPq5Zam8b M8+n6YdiaiNxsbuintC/QZKMk0UDS80VBBOv5LiULJ0lfjrE0A2kV67yEY1prOky SG/5Tn8FawTEvA17/wxRieKd711NfTskKOXPFgRfja2uzGJ6Gzb7fGyzWVtz0VXp aUrqa2ygWBKCffGE34axK8FumtlnzWo= -----END CERTIFICATE-----Generated at Tue Nov 4 19:22:11 2025 by rpki-client