$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e413b458-e8a3-3f16-85f4-de34e87709bf.roa File: e413b458-e8a3-3f16-85f4-de34e87709bf.roa (raw, json) Hash identifier: +MnjaZMC8osDHBJGKB7DdgwYEDz1no8x9Le5PGXCYoc= Subject key identifier: E1:6C:96:FF:4D:9C:01:44:C8:74:70:15:0D:66:CC:3F:0F:1C:29:F8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B8880B3A67B9EDBEB63DCF000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e413b458-e8a3-3f16-85f4-de34e87709bf.roa Signing time: Wed 15 Oct 2025 19:56:57 +0000 ROA not before: Wed 15 Oct 2025 19:56:57 +0000 ROA not after: Tue 13 Jan 2026 20:56:57 +0000 asID: 7029 IP address blocks: 209.2.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:88:80:b3:a6:7b:9e:db:eb:63:dc:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 15 19:56:57 2025 GMT Not After : Jan 13 20:56:57 2026 GMT Subject: CN=b41de9a9-5d5b-4fd1-8f3f-c2f0053c9cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:12:d0:71:d4:22:ec:fd:df:1a:3f:1a:da:bc: 3d:62:f5:2b:8a:85:d7:b2:04:db:c2:03:ef:57:73: 51:c4:f1:2b:82:63:66:2c:2a:1d:6d:34:ed:bd:c1: c0:e1:20:3a:78:96:5f:3a:5c:a6:7b:80:6a:55:b9: c0:fe:e1:c3:cf:28:46:f6:80:03:7f:70:7d:17:7f: fd:fb:b1:94:f9:81:80:ec:2b:6d:9f:38:4c:ab:4d: 24:27:ab:5b:7f:de:c2:54:9a:a0:82:2d:07:1d:c3: 55:55:ff:5d:ee:9e:31:7b:27:c0:59:e2:42:64:3b: ef:cb:04:10:f7:62:ee:fe:17:40:68:02:31:d7:82: 44:39:fc:32:8f:c1:1b:82:6d:a2:86:90:22:d8:56: 51:4f:4a:1a:08:72:f3:81:e4:bb:22:18:26:73:d5: c1:50:b6:04:5b:af:63:08:e1:2b:a3:85:9e:b3:a9: 23:0b:07:95:5e:76:b4:c5:cf:ac:be:8d:fc:79:c7: b5:01:b8:0b:70:27:d6:aa:58:03:e5:3e:18:c7:26: 22:92:4f:5a:67:88:20:a6:d5:d4:28:57:95:e3:d1: 1f:fa:41:7a:d3:ec:ad:9b:be:33:b1:51:f2:b2:08: 59:b8:e6:dc:49:e7:1b:6c:48:35:c4:6f:35:e3:01: 48:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:6C:96:FF:4D:9C:01:44:C8:74:70:15:0D:66:CC:3F:0F:1C:29:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e413b458-e8a3-3f16-85f4-de34e87709bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:ea:9d:49:b9:c4:02:06:b5:f9:0a:85:e4:c5:9d:44:7a:b5: 3b:99:29:d4:13:b4:82:fd:7e:5f:a1:25:82:6f:26:f5:98:07: 4e:7a:72:25:37:bc:a0:11:6c:8e:35:e8:ab:15:9b:e3:78:33: 1a:9e:8e:ec:e4:3f:86:72:c4:4c:19:cf:3c:3d:78:2e:7b:d9: 1d:59:2d:69:85:a4:85:b3:33:e8:33:12:9d:fb:45:09:be:91: 92:19:8e:99:57:c0:11:66:72:db:24:e5:d8:c3:02:52:b2:62: 16:33:34:14:ff:84:27:6c:82:cb:8b:b0:ac:fe:72:1d:90:a3: 42:1f:3f:f0:d4:6d:a1:74:5b:32:7e:62:0e:35:99:ee:21:79: e7:74:0f:77:a7:6c:da:0d:42:e4:9e:75:d2:5b:e3:f5:35:37: 80:f2:da:3f:a4:c3:8c:ad:0e:ad:8b:f6:1b:85:59:50:54:d2: fe:0a:49:fb:ad:54:b1:43:7b:3c:14:2c:f4:63:af:65:d6:9f: 95:6b:9e:7a:40:fd:1a:28:fa:fa:2b:f1:30:d1:4c:1d:8e:ab: 43:33:a7:56:9c:13:a9:f5:bd:d9:41:44:00:af:4c:df:de:21: e4:b9:89:06:4a:3a:b4:ad:89:63:02:8e:22:f5:d8:61:55:59: a3:63:af:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuIgLOme57b62Pc8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxNTE5NTY1N1oXDTI2MDExMzIwNTY1N1owLzEtMCsGA1UEAxMk YjQxZGU5YTktNWQ1Yi00ZmQxLThmM2YtYzJmMDA1M2M5Y2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hLQcdQi7P3fGj8a2rw9YvUrioXXsgTbwgPv V3NRxPErgmNmLCodbTTtvcHA4SA6eJZfOlyme4BqVbnA/uHDzyhG9oADf3B9F3/9 +7GU+YGA7CttnzhMq00kJ6tbf97CVJqggi0HHcNVVf9d7p4xeyfAWeJCZDvvywQQ 92Lu/hdAaAIx14JEOfwyj8Ebgm2ihpAi2FZRT0oaCHLzgeS7Ihgmc9XBULYEW69j COEro4Wes6kjCweVXna0xc+svo38ece1AbgLcCfWqlgD5T4YxyYikk9aZ4ggptXU KFeV49Ef+kF60+ytm74zsVHysghZuObcSecbbEg1xG814wFIAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFslv9NnAFEyHRwFQ1mzD8PHCn4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTQxM2I0NTgtZThhMy0z ZjE2LTg1ZjQtZGUzNGU4NzcwOWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0QIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPqnUm5xAIGtfkKheTFnUR6tTuZKdQTtIL9fl+hJYJvJvWYB056ciU3 vKARbI416KsVm+N4MxqejuzkP4ZyxEwZzzw9eC572R1ZLWmFpIWzM+gzEp37RQm+ kZIZjplXwBFmctsk5djDAlKyYhYzNBT/hCdsgsuLsKz+ch2Qo0IfP/DUbaF0WzJ+ Yg41me4heed0D3enbNoNQuSeddJb4/U1N4Dy2j+kw4ytDq2L9huFWVBU0v4KSfut VLFDezwULPRjr2XWn5VrnnpA/Roo+vor8TDRTB2Oq0Mzp1acE6n1vdlBRACvTN/e IeS5iQZKOrStiWMCjiL12GFVWaNjr/s= -----END CERTIFICATE-----Generated at Tue Nov 4 16:53:51 2025 by rpki-client