$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cc865112-94e8-3c12-900e-62cfc3e36083.roa File: cc865112-94e8-3c12-900e-62cfc3e36083.roa (raw, json) Hash identifier: 1zk2/2lZF4hUQ+P5VsQhNBRU7qf6VDfrUyJ67drAp8Y= Subject key identifier: 2E:CF:FF:BA:D1:E3:00:B4:45:FE:A0:03:28:7A:AC:F6:36:D8:64:D8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE4051792BB71CC5E978E100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cc865112-94e8-3c12-900e-62cfc3e36083.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 67.141.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:51:79:2b:b7:1c:c5:e9:78:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=3ca35216-80a0-42e6-a1fc-60b936fb179b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ef:7c:00:76:ad:33:8a:d0:01:93:a0:0a:c2: 93:c3:95:f7:02:16:a2:5a:45:db:b4:5d:e2:f7:a0: 8f:f8:55:08:3e:eb:6a:80:69:ac:8d:94:63:63:34: 87:6e:fe:de:0b:2c:c5:af:07:f7:ca:a3:77:dc:8d: 13:33:ab:88:4d:7d:88:23:53:5b:05:fd:d8:3e:0c: 07:d2:a2:9a:34:9a:99:ff:f7:50:4f:eb:ee:43:eb: 88:bd:3a:7f:e0:fe:37:df:80:16:5d:11:36:64:42: e1:c6:bd:88:40:dc:0c:8c:6b:71:85:5e:72:48:4d: 3b:d1:1a:c0:ab:79:df:be:38:f8:99:b2:68:70:21: 50:1c:03:3f:d2:63:a6:19:59:78:43:91:5d:4b:e5: f6:6d:f1:99:d9:36:7e:f7:5a:06:dc:40:05:23:45: 69:ee:7d:40:f5:92:e5:97:27:c6:34:54:03:6a:1d: 38:d9:6d:04:8b:7e:84:f4:d6:16:6d:69:af:07:df: 9f:1f:18:67:80:32:a6:97:36:1f:81:5c:75:0f:4b: 9d:1f:e9:02:17:b2:bf:70:a9:5d:80:08:d6:58:9d: 82:4a:89:b3:01:9d:e7:5b:6b:d1:ba:97:29:9a:57: 2a:66:a5:97:72:32:21:7b:f7:c8:e5:b9:71:08:3e: f2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CF:FF:BA:D1:E3:00:B4:45:FE:A0:03:28:7A:AC:F6:36:D8:64:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cc865112-94e8-3c12-900e-62cfc3e36083.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:ea:4a:7f:9c:c5:66:6f:4f:ca:23:ff:fd:fa:ff:5b:0a:c4: 7e:3d:8e:31:34:2f:e3:dc:c7:66:2a:9d:68:40:4f:11:e1:2b: 62:00:2f:13:d2:a4:cf:2c:7b:53:76:e1:90:4a:7e:90:93:a6: 04:4c:6d:23:48:19:c9:c5:8e:06:35:a2:cc:b1:e7:5c:55:d9: cc:41:06:13:10:d8:cd:fc:f9:4d:86:ba:c8:72:e7:74:1d:88: 93:a1:fe:f3:87:d7:73:41:c9:de:00:b8:dc:75:8f:05:8c:62: df:de:fa:30:c1:d1:b8:b6:70:80:43:69:85:0f:dc:7b:af:d9: fd:d5:63:e5:fa:72:61:ec:72:c8:94:fc:19:09:04:7a:d1:0a: 61:d8:44:f5:8c:d5:ce:f8:24:d4:bf:3e:9e:3e:f3:85:1a:5a: f6:a8:6b:e2:5b:95:4b:85:2f:cc:23:42:87:b1:18:5f:54:ec: 4a:0a:87:67:54:98:4e:d6:08:82:5f:42:85:2e:78:c3:08:60: 3c:b3:c1:2f:ff:69:87:ce:15:28:a8:33:8c:b3:9a:ef:cd:af: d7:51:5a:22:8b:81:cb:02:1e:11:48:6f:d5:a9:eb:ac:04:4c: 5c:43:f6:6c:90:13:07:04:58:11:2b:0e:56:f3:c3:11:4b:3c: c5:f9:bf:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFF5K7ccxel44QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk M2NhMzUyMTYtODBhMC00MmU2LWExZmMtNjBiOTM2ZmIxNzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie98AHatM4rQAZOgCsKTw5X3AhaiWkXbtF3i 96CP+FUIPutqgGmsjZRjYzSHbv7eCyzFrwf3yqN33I0TM6uITX2II1NbBf3YPgwH 0qKaNJqZ//dQT+vuQ+uIvTp/4P4334AWXRE2ZELhxr2IQNwMjGtxhV5ySE070RrA q3nfvjj4mbJocCFQHAM/0mOmGVl4Q5FdS+X2bfGZ2TZ+91oG3EAFI0Vp7n1A9ZLl lyfGNFQDah042W0Ei36E9NYWbWmvB9+fHxhngDKmlzYfgVx1D0udH+kCF7K/cKld gAjWWJ2CSomzAZ3nW2vRupcpmlcqZqWXcjIhe/fI5blxCD7ykQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7P/7rR4wC0Rf6gAyh6rPY22GTYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2M4NjUxMTItOTRlOC0z YzEyLTkwMGUtNjJjZmMzZTM2MDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ41WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7qSn+cxWZvT8oj//36/1sKxH49jjE0L+Pcx2YqnWhATxHhK2IALxPS pM8se1N24ZBKfpCTpgRMbSNIGcnFjgY1osyx51xV2cxBBhMQ2M38+U2Gushy53Qd iJOh/vOH13NByd4AuNx1jwWMYt/e+jDB0bi2cIBDaYUP3Huv2f3VY+X6cmHscsiU /BkJBHrRCmHYRPWM1c74JNS/Pp4+84UaWvaoa+JblUuFL8wjQoexGF9U7EoKh2dU mE7WCIJfQoUueMMIYDyzwS//aYfOFSioM4yzmu/Nr9dRWiKLgcsCHhFIb9Wp66wE TFxD9myQEwcEWBErDlbzwxFLPMX5v/E= -----END CERTIFICATE-----Generated at Tue Nov 4 19:16:01 2025 by rpki-client