$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/deb5dc56-a4cd-3efa-91bd-496c0cd50a5b.roa File: deb5dc56-a4cd-3efa-91bd-496c0cd50a5b.roa (raw, json) Hash identifier: CnFLel/77g2wyyeq1p93rLjpUI5FVqoRZn/2gFgzilI= Subject key identifier: 39:1E:C0:B9:F0:94:90:F6:7C:28:BB:9F:82:8F:F5:16:6A:08:B2:EC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2CA8F966F5B8D2A3513024 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/deb5dc56-a4cd-3efa-91bd-496c0cd50a5b.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 151.213.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:a8:f9:66:f5:b8:d2:a3:51:30:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=b9ad2960-28d5-4f35-b305-67201ee683de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a0:bf:5a:8b:b4:88:be:e6:f4:ce:b5:0b:04: ed:73:de:e9:24:e2:e7:61:4f:9e:90:63:93:4f:0f: ec:f8:96:b5:19:a5:85:49:32:54:7d:9d:2b:f6:3c: 1a:43:c1:e5:61:f9:56:0f:2f:1f:b5:0a:5f:99:4b: 51:02:53:86:85:ee:ec:be:ac:6d:a8:a6:59:88:fd: d4:ab:bd:ff:0c:e9:90:60:62:17:48:e2:18:06:da: 92:36:53:15:e8:c8:6e:2d:5e:bd:e8:8d:b2:83:22: 99:7f:37:01:0f:c7:d0:66:94:1c:e7:59:97:43:36: 7d:44:42:27:3b:0f:f3:f4:25:9e:37:74:31:a1:b4: a3:57:0d:dc:71:13:2f:32:83:dc:68:9f:2f:cc:70: 21:66:dc:12:87:c7:89:9e:26:b9:e6:1f:10:c0:51: b2:31:c0:d0:44:ce:82:2a:04:af:3d:49:62:01:0a: 71:e9:d9:b8:73:3c:ac:85:b4:6b:f9:19:8b:fd:9f: 9d:cf:70:10:1a:50:1a:1f:32:83:89:bf:76:0c:8d: 01:19:a9:b7:bc:18:3b:5b:7d:52:e5:78:d5:35:88: b8:67:ba:0c:f4:31:34:b5:45:0a:df:cf:1b:16:0d: 43:a0:96:21:3f:1b:0d:9e:40:fe:fa:d9:6e:dd:d3: 8d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1E:C0:B9:F0:94:90:F6:7C:28:BB:9F:82:8F:F5:16:6A:08:B2:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/deb5dc56-a4cd-3efa-91bd-496c0cd50a5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:04:c8:42:cb:d3:85:fd:99:b3:51:f6:03:be:bd:10:d5:e1: 87:19:ef:98:f3:89:bb:78:7b:42:a6:93:39:0e:76:8b:37:07: 81:e9:1b:89:9a:bc:41:86:8b:3b:da:26:4c:37:9c:9e:d1:98: 97:77:58:98:53:94:9f:b0:be:5b:bd:80:59:ea:24:64:7c:58: 60:12:62:bf:0a:e3:7e:4a:6b:41:bf:04:d0:32:25:4c:23:f6: 9d:74:4d:74:2e:73:9b:64:87:be:61:6b:83:1e:95:55:a4:5c: 7f:4a:05:83:8e:06:e0:cc:10:39:6c:44:4b:b9:7f:0a:7b:22: e0:40:76:db:8b:7f:28:f7:0f:4c:48:21:79:7b:dc:70:12:f7: 22:78:92:b1:ce:69:e0:68:3a:2e:4d:3a:a0:cc:0f:9b:7d:dd: 24:cd:53:b0:2a:09:be:58:01:7d:4a:1e:b1:4f:70:66:e3:61: e8:da:c6:70:86:77:16:b2:90:1a:f5:7c:65:13:f4:4f:e6:72: 13:50:6d:ab:da:04:88:50:92:dd:3f:77:04:a3:91:25:2e:8c: 8e:13:60:39:a0:61:6c:dd:9e:8c:31:65:f2:cc:8e:d4:6d:7d: a4:38:0b:ad:64:04:8a:97:42:a3:bf:16:52:12:30:2b:08:98: 96:77:5a:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLKj5ZvW40qNRMCQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YjlhZDI5NjAtMjhkNS00ZjM1LWIzMDUtNjcyMDFlZTY4M2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6C/Wou0iL7m9M61CwTtc97pJOLnYU+ekGOT Tw/s+Ja1GaWFSTJUfZ0r9jwaQ8HlYflWDy8ftQpfmUtRAlOGhe7svqxtqKZZiP3U q73/DOmQYGIXSOIYBtqSNlMV6MhuLV696I2ygyKZfzcBD8fQZpQc51mXQzZ9REIn Ow/z9CWeN3QxobSjVw3ccRMvMoPcaJ8vzHAhZtwSh8eJnia55h8QwFGyMcDQRM6C KgSvPUliAQpx6dm4czyshbRr+RmL/Z+dz3AQGlAaHzKDib92DI0BGam3vBg7W31S 5XjVNYi4Z7oM9DE0tUUK388bFg1DoJYhPxsNnkD++tlu3dONxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkewLnwlJD2fCi7n4KP9RZqCLLsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGViNWRjNTYtYTRjZC0z ZWZhLTkxYmQtNDk2YzBjZDUwYTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl9VAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQEyELL04X9mbNR9gO+vRDV4YcZ75jzibt4e0KmkzkOdos3B4HpG4ma vEGGizvaJkw3nJ7RmJd3WJhTlJ+wvlu9gFnqJGR8WGASYr8K435Ka0G/BNAyJUwj 9p10TXQuc5tkh75ha4MelVWkXH9KBYOOBuDMEDlsREu5fwp7IuBAdtuLfyj3D0xI IXl73HAS9yJ4krHOaeBoOi5NOqDMD5t93STNU7AqCb5YAX1KHrFPcGbjYejaxnCG dxaykBr1fGUT9E/mchNQbavaBIhQkt0/dwSjkSUujI4TYDmgYWzdnowxZfLMjtRt faQ4C61kBIqXQqO/FlISMCsImJZ3Wn4= -----END CERTIFICATE-----Generated at Tue Nov 4 19:15:21 2025 by rpki-client