$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca87d08f-0a5e-32e2-b1b7-af1fd6946fdb.roa File: ca87d08f-0a5e-32e2-b1b7-af1fd6946fdb.roa (raw, json) Hash identifier: X0iz2bNBQjJ2cOPEK+CnrEeafg4YX4g0PbjfXxWtb6E= Subject key identifier: 93:41:05:F6:56:DA:CF:08:64:9A:DA:33:5A:83:44:4A:3A:F4:32:11 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CFAD8C7C0B7BFA8AE3800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca87d08f-0a5e-32e2-b1b7-af1fd6946fdb.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 207.7.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:fa:d8:c7:c0:b7:bf:a8:ae:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=84bd6308-de80-40c9-adce-3288bd0a68a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f6:c8:93:31:91:4c:d1:f1:97:bb:07:4f:ed: 11:22:11:ef:84:a1:71:31:c5:73:bb:7a:1c:a7:28: 43:3a:14:cc:5e:1c:89:b7:96:7f:24:fe:06:6a:ab: cb:73:c5:bc:7b:1c:8e:45:d9:76:9e:b3:b7:09:73: 02:4b:34:57:12:64:a3:e9:9d:85:56:d3:35:3c:12: c3:af:92:02:19:3f:fd:56:06:3c:f1:5e:a8:91:45: 5c:bc:6c:a3:e9:27:f4:28:be:c5:f6:4e:a8:3f:ad: ad:34:48:53:d4:3c:66:0f:34:9f:ef:8b:72:86:52: 6c:18:21:e2:07:91:72:49:54:a7:f2:70:f1:0a:0b: 66:08:0b:bf:83:fc:f6:ab:c8:fa:df:83:8f:b4:dc: 5b:00:5a:f8:64:8d:e1:5d:9e:9e:33:09:f9:97:7f: 6d:6b:06:1b:9f:3c:a2:37:80:78:ed:54:f2:59:13: 07:ce:87:96:bd:e4:81:6e:0d:1c:df:56:96:b4:76: ea:b9:5d:34:eb:3d:a3:95:7b:4e:c1:d8:3d:e5:94: 5f:f6:1d:2f:6b:7d:4c:ea:ce:32:cd:81:2e:03:a1: 88:e6:6f:dc:4b:86:9f:74:53:7c:c1:2e:ea:83:cf: b2:18:88:a0:22:31:8e:85:50:b3:e7:c9:d2:ef:e0: a2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:41:05:F6:56:DA:CF:08:64:9A:DA:33:5A:83:44:4A:3A:F4:32:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca87d08f-0a5e-32e2-b1b7-af1fd6946fdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.7.74.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:6f:0a:47:24:53:da:de:23:cb:32:13:bc:7e:e4:8a:5e:93: bd:19:48:cb:40:40:d9:76:55:d3:76:e3:50:48:73:5b:21:b6: 62:d1:55:dc:bc:ec:f2:ae:05:40:00:50:80:57:2b:54:52:54: 44:16:b0:75:04:6b:f0:a2:cc:db:06:87:38:d4:0a:9e:1c:21: 83:5d:25:7a:ea:ab:25:50:99:7e:df:fa:a5:75:d8:b7:c6:8b: 20:94:ed:ec:34:ca:96:09:e2:30:35:36:3e:61:53:18:49:86: d8:f0:3d:ef:aa:4b:e3:af:58:cd:74:3f:da:a5:47:58:21:5d: 0a:f2:c7:df:0f:fb:ea:2a:42:4c:69:39:97:04:cc:91:49:66: 70:63:ab:46:08:c5:06:36:52:aa:d4:9d:20:87:dd:de:ca:6a: a2:5e:52:51:06:62:a7:0e:ac:3e:48:42:6c:64:48:39:11:af: 32:89:a9:f0:b0:fe:99:81:36:fa:df:8b:91:4c:63:6e:8c:a3: 17:92:83:8d:22:53:60:73:7a:26:b3:76:90:03:b3:a1:5a:24: e1:14:eb:31:50:50:9a:90:0b:05:42:f5:19:d7:e6:47:79:52: 06:5d:0a:31:c8:98:76:92:0a:7c:b1:b2:26:0b:5d:27:8d:91: c3:a2:6d:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPrYx8C3v6iuOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ODRiZDYzMDgtZGU4MC00MGM5LWFkY2UtMzI4OGJkMGE2OGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfbIkzGRTNHxl7sHT+0RIhHvhKFxMcVzu3oc pyhDOhTMXhyJt5Z/JP4GaqvLc8W8exyORdl2nrO3CXMCSzRXEmSj6Z2FVtM1PBLD r5ICGT/9VgY88V6okUVcvGyj6Sf0KL7F9k6oP62tNEhT1DxmDzSf74tyhlJsGCHi B5FySVSn8nDxCgtmCAu/g/z2q8j634OPtNxbAFr4ZI3hXZ6eMwn5l39tawYbnzyi N4B47VTyWRMHzoeWveSBbg0c31aWtHbquV006z2jlXtOwdg95ZRf9h0va31M6s4y zYEuA6GI5m/cS4afdFN8wS7qg8+yGIigIjGOhVCz58nS7+CiOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNBBfZW2s8IZJraM1qDREo69DIRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2E4N2QwOGYtMGE1ZS0z MmUyLWIxYjctYWYxZmQ2OTQ2ZmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzwdKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1vCkckU9reI8syE7x+5Ipek70ZSMtAQNl2VdN241BIc1shtmLRVdy8 7PKuBUAAUIBXK1RSVEQWsHUEa/CizNsGhzjUCp4cIYNdJXrqqyVQmX7f+qV12LfG iyCU7ew0ypYJ4jA1Nj5hUxhJhtjwPe+qS+OvWM10P9qlR1ghXQryx98P++oqQkxp OZcEzJFJZnBjq0YIxQY2UqrUnSCH3d7KaqJeUlEGYqcOrD5IQmxkSDkRrzKJqfCw /pmBNvrfi5FMY26MoxeSg40iU2BzeiazdpADs6FaJOEU6zFQUJqQCwVC9RnX5kd5 UgZdCjHImHaSCnyxsiYLXSeNkcOibRA= -----END CERTIFICATE-----Generated at Tue Nov 4 16:56:57 2025 by rpki-client