$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f36c82d8-e3f2-3023-85ba-8d4a0e9a0471.roa File: f36c82d8-e3f2-3023-85ba-8d4a0e9a0471.roa (raw, json) Hash identifier: P2rY4UbcHbtS+DWqSpRRtzfTdAfjevB+6E1UMwHgbzc= Subject key identifier: 62:5A:65:4B:BB:AB:1A:CE:B9:B1:59:F8:2D:95:88:EB:15:9C:76:09 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF9C10CEA898FC6758200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f36c82d8-e3f2-3023-85ba-8d4a0e9a0471.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 174.131.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f9:c1:0c:ea:89:8f:c6:75:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=81c88d63-d238-491c-88af-5b82b6575852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:84:52:cf:18:51:6d:c4:db:d6:62:99:3f:3a: c4:8b:2a:a6:27:b3:1f:34:a8:77:b7:52:da:82:fe: b8:6d:8b:8a:17:41:07:b7:fd:1f:a3:f0:df:2e:74: cd:99:1c:7f:4a:77:d5:f2:23:76:6c:10:e9:28:1b: 29:09:73:b3:2e:c1:b6:3c:fb:de:d6:0c:f8:71:15: e6:53:b7:86:fe:ad:d1:f2:80:71:f1:ba:f5:d9:08: e8:4d:92:d4:13:ae:7e:0d:41:5c:33:9e:56:38:f3: 7a:02:a7:7f:21:97:eb:94:f0:54:d7:5b:43:70:ef: fc:7e:b3:ee:8e:eb:aa:08:e3:49:5c:7d:1c:2a:e5: b7:8b:f3:3c:d9:65:d7:51:ca:42:04:9f:38:3b:cc: f9:fd:a1:8c:3e:b2:5d:68:aa:8d:d7:98:0f:9b:fb: d0:61:df:ef:b6:a8:c6:4c:c7:d4:1c:16:cc:ca:06: 6b:1f:bc:7c:a4:2f:67:cb:91:a5:22:c2:96:83:78: a8:74:dd:6e:01:e6:ea:b2:aa:a7:17:b4:28:c3:c0: fc:1c:5b:c9:2a:a0:33:ab:04:3e:cc:7e:5a:2e:28: 49:d6:4d:62:e3:3b:b0:8c:9d:0c:7b:4f:59:2e:44: b1:95:28:92:ed:7a:e2:65:e5:ab:51:71:34:8b:df: ab:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:5A:65:4B:BB:AB:1A:CE:B9:B1:59:F8:2D:95:88:EB:15:9C:76:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f36c82d8-e3f2-3023-85ba-8d4a0e9a0471.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:3e:3e:99:ee:a2:13:de:df:04:b5:63:53:06:ad:c3:3a:82: 2f:e9:e6:a3:db:5f:a7:2e:b6:ca:78:44:d4:5b:90:17:39:c0: 12:0c:fd:b7:79:83:36:ad:6d:01:05:c2:46:6e:b6:35:91:61: b9:4e:01:2b:7c:dd:01:b8:20:86:8d:fa:c2:69:2b:e5:5c:77: bb:00:01:d1:f5:e7:64:5e:cd:49:3c:bc:5e:2f:36:e0:88:0c: ad:55:cd:ef:b3:36:f9:2e:ec:fb:01:89:3b:dc:15:74:d8:32: 68:90:42:4f:25:4d:ae:9f:b5:01:d5:d6:b1:d3:b0:f0:99:51: 22:ea:f3:16:7e:f4:f6:1d:b8:68:c4:16:2a:4e:6a:47:04:5c: b9:57:aa:a6:1b:e9:8e:d2:fc:b4:44:bc:72:66:f5:53:49:b4: 16:30:ff:ea:3a:09:98:89:ba:88:bd:94:71:65:07:79:27:c5: 14:c8:96:18:d1:54:92:0d:97:ad:ab:90:0f:00:ed:da:80:1d: bd:9a:ed:fb:f5:ab:f0:66:c8:3f:46:64:87:6a:80:b1:99:05: f6:7b:1e:b6:52:41:2e:ef:fb:b4:e7:cc:9b:2a:f4:e7:5e:52: 35:83:cd:e6:b1:23:5a:d2:53:7b:7b:96:8c:56:eb:90:10:a6: 15:35:07:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPnBDOqJj8Z1ggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ODFjODhkNjMtZDIzOC00OTFjLTg4YWYtNWI4MmI2NTc1ODUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oRSzxhRbcTb1mKZPzrEiyqmJ7MfNKh3t1La gv64bYuKF0EHt/0fo/DfLnTNmRx/SnfV8iN2bBDpKBspCXOzLsG2PPve1gz4cRXm U7eG/q3R8oBx8br12QjoTZLUE65+DUFcM55WOPN6Aqd/IZfrlPBU11tDcO/8frPu juuqCONJXH0cKuW3i/M82WXXUcpCBJ84O8z5/aGMPrJdaKqN15gPm/vQYd/vtqjG TMfUHBbMygZrH7x8pC9ny5GlIsKWg3iodN1uAebqsqqnF7Qow8D8HFvJKqAzqwQ+ zH5aLihJ1k1i4zuwjJ0Me09ZLkSxlSiS7XriZeWrUXE0i9+rBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJaZUu7qxrOubFZ+C2ViOsVnHYJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjM2YzgyZDgtZTNmMi0z MDIzLTg1YmEtOGQ0YTBlOWEwNDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCroOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0+PpnuohPe3wS1Y1MGrcM6gi/p5qPbX6cutsp4RNRbkBc5wBIM/bd5 gzatbQEFwkZutjWRYblOASt83QG4IIaN+sJpK+Vcd7sAAdH152RezUk8vF4vNuCI DK1Vze+zNvku7PsBiTvcFXTYMmiQQk8lTa6ftQHV1rHTsPCZUSLq8xZ+9PYduGjE FipOakcEXLlXqqYb6Y7S/LREvHJm9VNJtBYw/+o6CZiJuoi9lHFlB3knxRTIlhjR VJINl62rkA8A7dqAHb2a7fv1q/BmyD9GZIdqgLGZBfZ7HrZSQS7v+7TnzJsq9Ode UjWDzeaxI1rSU3t7loxW65AQphU1B8A= -----END CERTIFICATE-----Generated at Tue Nov 4 19:16:04 2025 by rpki-client