$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2064d14-b4d1-379e-9450-d4a3260c0758.roa File: d2064d14-b4d1-379e-9450-d4a3260c0758.roa (raw, json) Hash identifier: a6kEHeeZd4nDu2a1d61Vc4r5TNoEIBd8xi6glA0/DSA= Subject key identifier: AF:57:02:77:2F:AC:2C:7C:04:2A:73:41:83:2F:C5:85:F4:B6:82:8B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CFD330514A21036C53A40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2064d14-b4d1-379e-9450-d4a3260c0758.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 216.195.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:fd:33:05:14:a2:10:36:c5:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=142fcd8e-d467-4f38-ab62-c714e477337a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:68:4a:43:3c:3d:72:89:40:f8:d0:1c:ec:e4: e1:3c:5f:2c:99:af:85:92:a4:b9:16:22:1d:3b:54: 6b:3e:2f:4b:ef:ce:ec:73:ac:08:f6:17:c7:6c:55: cf:77:cb:46:91:38:8d:38:26:9d:78:fd:86:91:77: 03:fa:bb:3b:b3:fa:37:bf:0f:6d:15:d8:a5:3c:9b: ce:be:7b:c2:58:9f:ea:83:4f:ce:dc:d0:28:c8:c6: 59:b9:9c:04:f9:31:93:0b:0c:ee:d5:77:c1:70:07: 5a:ed:f1:1c:66:85:1b:32:f4:6a:6a:8f:3e:dc:53: 10:12:98:52:a2:60:0a:68:6c:16:4f:75:4d:3e:5f: 91:0a:0f:2c:aa:80:8d:32:98:37:c7:5e:97:9c:bd: 11:69:4f:2c:9a:30:3d:c9:05:6f:e0:7a:2c:59:5f: 42:ba:7e:61:d4:f9:87:bd:cb:11:8b:69:c6:91:2f: 5c:d8:3f:aa:0e:1a:7b:be:47:4b:b3:eb:fa:40:cd: 40:58:a1:60:0b:5e:6e:c9:18:dd:41:bc:ba:a4:53: c4:53:9c:e9:80:9f:7e:37:9b:e4:3d:c4:a8:22:18: f0:3b:0a:e2:e9:ba:13:ba:c3:b9:7f:08:2d:b8:89: 1e:1e:20:25:71:40:5f:c8:69:50:41:84:66:a3:bc: 77:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:57:02:77:2F:AC:2C:7C:04:2A:73:41:83:2F:C5:85:F4:B6:82:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2064d14-b4d1-379e-9450-d4a3260c0758.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.195.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:6c:76:0e:c7:fc:49:9f:53:0d:38:51:ab:9d:5a:6c:00:81: 33:fd:d7:04:66:f7:ea:48:a2:4f:ae:28:45:3e:86:7f:04:2d: e3:50:94:39:e5:ef:25:6f:8a:f3:25:38:62:d5:cb:aa:78:b5: c6:d0:4d:89:ad:d9:ca:0e:ca:54:2b:bb:00:db:ac:f1:01:9a: 6a:41:de:49:9f:f3:04:92:23:fb:a7:a7:59:0b:f8:08:84:a9: ac:ba:67:7c:bd:d0:f2:41:45:22:0b:9c:4c:ed:e3:bb:40:b2: 5b:72:cb:bf:3c:cd:61:bc:99:3a:de:ee:35:23:f1:b4:ab:68: e2:fb:cc:6f:c9:fb:4f:fb:14:75:33:13:e6:12:1f:64:e4:5d: 09:2b:69:59:20:fb:b7:c6:42:d5:60:f3:75:27:d0:7e:45:46: 2a:80:2f:4d:b0:8d:bf:ec:84:59:3f:9b:ab:82:be:a4:c8:19: 41:54:dc:9b:77:b4:26:eb:6f:94:fd:8c:c7:ac:ab:39:49:7e: 47:e5:27:df:17:34:70:5a:d6:b3:59:07:fe:0b:f8:88:fd:2a: b2:4f:16:84:28:7b:49:5e:9c:56:11:4f:19:61:d5:29:0e:e7: f4:01:d6:98:a0:30:d5:93:bf:e0:ab:3f:66:52:4f:3f:58:b5: eb:40:d7:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXP0zBRSiEDbFOkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MTQyZmNkOGUtZDQ2Ny00ZjM4LWFiNjItYzcxNGU0NzczMzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2hKQzw9colA+NAc7OThPF8sma+FkqS5FiId O1RrPi9L787sc6wI9hfHbFXPd8tGkTiNOCadeP2GkXcD+rs7s/o3vw9tFdilPJvO vnvCWJ/qg0/O3NAoyMZZuZwE+TGTCwzu1XfBcAda7fEcZoUbMvRqao8+3FMQEphS omAKaGwWT3VNPl+RCg8sqoCNMpg3x16XnL0RaU8smjA9yQVv4HosWV9Cun5h1PmH vcsRi2nGkS9c2D+qDhp7vkdLs+v6QM1AWKFgC15uyRjdQby6pFPEU5zpgJ9+N5vk PcSoIhjwOwri6boTusO5fwgtuIkeHiAlcUBfyGlQQYRmo7x30wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9XAncvrCx8BCpzQYMvxYX0toKLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDIwNjRkMTQtYjRkMS0z NzllLTk0NTAtZDRhMzI2MGMwNzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2MPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlsdg7H/EmfUw04UaudWmwAgTP91wRm9+pIok+uKEU+hn8ELeNQlDnl 7yVvivMlOGLVy6p4tcbQTYmt2coOylQruwDbrPEBmmpB3kmf8wSSI/unp1kL+AiE qay6Z3y90PJBRSILnEzt47tAsltyy788zWG8mTre7jUj8bSraOL7zG/J+0/7FHUz E+YSH2TkXQkraVkg+7fGQtVg83Un0H5FRiqAL02wjb/shFk/m6uCvqTIGUFU3Jt3 tCbrb5T9jMesqzlJfkflJ98XNHBa1rNZB/4L+Ij9KrJPFoQoe0lenFYRTxlh1SkO 5/QB1pigMNWTv+CrP2ZSTz9YtetA100= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:27 2025 by rpki-client