$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea867197-abe0-33d5-96cb-9f0fad10b1dd.roa File: ea867197-abe0-33d5-96cb-9f0fad10b1dd.roa (raw, json) Hash identifier: e/IkuDD8b8qrqK+71RxTpjGNWp3Kp8gvcXcLLgow6lE= Subject key identifier: 42:7F:DD:97:E7:E0:A9:77:1E:FD:E6:B7:E1:FA:38:2C:1B:A3:89:A6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2B91981404E7630ACEFC9FC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea867197-abe0-33d5-96cb-9f0fad10b1dd.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 27338 IP address blocks: 74.9.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:98:14:04:e7:63:0a:ce:fc:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=58f1cf29-2250-431b-bfdb-03bf3061d664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:28:f6:e9:41:a1:52:7f:da:15:4f:68:e1:64: e9:3a:cb:3a:16:e8:6b:53:f2:5f:5b:54:fd:2b:e2: ee:e8:03:91:c6:79:82:67:ec:17:1c:20:68:a6:32: f5:f8:a8:54:99:0c:d4:76:85:27:b9:44:80:95:24: 41:5c:21:e8:b1:26:68:74:e0:0e:84:26:d7:a6:89: 93:ca:ab:75:f2:a9:2a:ad:84:a2:bc:1a:87:2d:bc: 91:d9:cd:58:e7:ab:1f:fd:35:b4:40:a7:dc:19:aa: a8:18:cf:c6:14:af:f2:da:b0:af:ad:66:eb:b3:fb: 93:ba:f4:1c:02:0a:d8:3c:7d:45:85:9f:63:7b:91: 65:97:72:15:59:0b:84:89:4e:e4:7c:93:64:65:ba: 7d:c2:fd:6f:b1:f0:ca:6a:a6:f4:99:f6:51:88:56: bc:5d:95:47:49:5d:fe:f5:2a:a4:33:f4:2f:35:0c: 71:4f:58:e6:c2:c8:3b:19:56:f6:82:dd:cf:34:24: 05:15:b0:e6:3a:25:ca:91:8f:4b:18:25:92:f8:1c: 21:92:da:78:21:64:ad:61:36:62:de:d4:3d:1f:36: cb:61:76:74:ed:02:78:da:96:ce:9f:b7:f7:52:63: 1d:57:73:5c:2c:95:ec:41:47:0c:6b:79:0b:6e:43: 5c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7F:DD:97:E7:E0:A9:77:1E:FD:E6:B7:E1:FA:38:2C:1B:A3:89:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea867197-abe0-33d5-96cb-9f0fad10b1dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.9.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:87:4c:c9:31:a3:d9:e9:89:9e:c4:1c:f7:55:17:58:cf:0e: 13:65:0e:5d:ea:1a:4a:49:f4:99:d3:46:b4:d9:05:c5:4c:7d: 5e:26:29:6f:9a:c0:37:19:d9:76:32:f7:82:d9:6b:ee:60:c9: f2:34:5d:f9:f7:69:41:ec:b0:83:c8:e8:46:27:ce:46:e0:38: a8:30:4f:53:69:84:cc:ee:b6:ef:1b:c0:df:ff:70:19:c5:78: 33:44:26:9b:31:ec:50:dc:dc:cb:bb:14:f5:06:70:77:36:ce: 86:b9:a0:7d:e6:06:7b:88:82:5d:5e:9e:f7:f8:e0:55:6e:04: 5d:e1:82:3d:f0:c0:33:aa:78:6a:65:08:0b:a5:b3:cd:0a:c9: 66:f1:8e:2a:36:88:62:c8:bb:0b:f2:53:43:d5:c3:55:19:77: 75:97:e5:39:00:49:39:e9:d0:dc:1a:65:69:b4:48:b8:8a:a9: c2:dd:1e:e2:a4:36:be:00:66:8b:6d:25:95:30:6a:91:c5:31: f8:a5:61:46:86:2c:c8:52:a3:60:02:ef:45:35:80:76:ca:af: 51:21:30:af:b8:57:54:93:66:7d:ac:4b:31:bc:c1:0d:28:9f: 7c:ef:8e:6e:b6:13:bf:75:aa:c2:4f:56:c2:ad:8d:76:b7:a5: 20:27:98:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkZgUBOdjCs78n8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk NThmMWNmMjktMjI1MC00MzFiLWJmZGItMDNiZjMwNjFkNjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyj26UGhUn/aFU9o4WTpOss6FuhrU/JfW1T9 K+Lu6AORxnmCZ+wXHCBopjL1+KhUmQzUdoUnuUSAlSRBXCHosSZodOAOhCbXpomT yqt18qkqrYSivBqHLbyR2c1Y56sf/TW0QKfcGaqoGM/GFK/y2rCvrWbrs/uTuvQc AgrYPH1FhZ9je5Fll3IVWQuEiU7kfJNkZbp9wv1vsfDKaqb0mfZRiFa8XZVHSV3+ 9SqkM/QvNQxxT1jmwsg7GVb2gt3PNCQFFbDmOiXKkY9LGCWS+Bwhktp4IWStYTZi 3tQ9HzbLYXZ07QJ42pbOn7f3UmMdV3NcLJXsQUcMa3kLbkNcIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJ/3Zfn4Kl3Hv3mt+H6OCwbo4mmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWE4NjcxOTctYWJlMC0z M2Q1LTk2Y2ItOWYwZmFkMTBiMWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSgkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaHTMkxo9npiZ7EHPdVF1jPDhNlDl3qGkpJ9JnTRrTZBcVMfV4mKW+a wDcZ2XYy94LZa+5gyfI0Xfn3aUHssIPI6EYnzkbgOKgwT1NphMzutu8bwN//cBnF eDNEJpsx7FDc3Mu7FPUGcHc2zoa5oH3mBnuIgl1envf44FVuBF3hgj3wwDOqeGpl CAuls80KyWbxjio2iGLIuwvyU0PVw1UZd3WX5TkASTnp0NwaZWm0SLiKqcLdHuKk Nr4AZottJZUwapHFMfilYUaGLMhSo2AC70U1gHbKr1EhMK+4V1STZn2sSzG8wQ0o n3zvjm62E791qsJPVsKtjXa3pSAnmEc= -----END CERTIFICATE-----Generated at Wed Nov 5 02:03:00 2025 by rpki-client