$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5f7c031-e5ea-3283-88b0-f9a112a71b4a.roa File: f5f7c031-e5ea-3283-88b0-f9a112a71b4a.roa (raw, json) Hash identifier: xN525AIJaM1NgN3+bWrvxnmi1gPC2jWzPPxbyWqE5NE= Subject key identifier: 0E:CF:00:F1:C2:EE:3F:A9:A8:BB:8B:47:2D:11:31:91:E6:E4:40:92 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B95A791D084D66F1359F7D450 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5f7c031-e5ea-3283-88b0-f9a112a71b4a.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7029 IP address blocks: 174.130.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:91:d0:84:d6:6f:13:59:f7:d4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=702d6609-218e-4c62-8c9f-b30b311aa7b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a4:b3:43:0b:dd:a8:31:71:08:62:02:db:d1: 4b:46:d9:41:f9:f3:bc:e2:b2:87:fa:0b:07:8a:0d: 40:e3:17:73:9b:08:d0:ea:65:5b:39:82:44:d6:19: fa:51:3f:5e:6b:be:f8:47:41:15:7b:97:36:5b:21: c9:ce:63:ef:c7:b5:ce:4d:e5:ca:2a:da:c3:d0:05: dd:94:8d:f9:41:d9:34:70:da:43:38:40:b8:25:80: c3:71:e5:53:f8:2c:6b:7a:0a:ca:8c:8a:a6:18:3b: 97:47:db:ac:b6:7c:d9:5a:92:b4:cf:63:f6:a0:7b: 8a:17:98:10:1d:21:c3:c3:db:fd:96:2f:53:57:f3: f9:d3:f7:8a:52:30:50:5e:42:64:dd:e3:85:e3:ef: 13:bf:b6:7a:c6:47:ab:74:4d:3a:ef:48:8b:09:3a: bc:eb:5d:d1:65:de:9a:75:08:b2:e5:56:86:da:e4: 54:be:99:c6:42:20:52:94:1e:58:b6:b1:d8:f4:ed: 30:57:55:b3:08:27:05:66:86:bf:31:27:7d:c0:ac: 9e:2f:72:09:8f:36:1a:28:e9:b6:a2:6f:d9:f8:4d: 84:69:4e:23:51:43:26:09:3d:59:0d:bf:fc:fd:f1: e2:92:00:20:f3:46:ab:3a:3b:0e:e3:a9:ff:7c:51: 33:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CF:00:F1:C2:EE:3F:A9:A8:BB:8B:47:2D:11:31:91:E6:E4:40:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5f7c031-e5ea-3283-88b0-f9a112a71b4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:28:5c:4d:e2:9f:71:39:8e:f1:cf:fb:4f:7f:db:ca:d9:d4: 46:5b:32:86:43:7c:5b:88:15:c0:2b:db:e0:32:e9:c2:30:84: 3e:2e:8c:d9:5a:c2:8c:95:02:9e:d1:cb:19:27:1a:7b:13:24: 25:ca:6b:c4:fe:8f:7f:cd:a1:1f:1c:a0:b5:9d:9c:a3:6c:a0: a5:b9:41:7e:6a:bf:e3:22:58:aa:99:22:a5:82:fa:3d:88:df: e4:83:37:d2:1e:6e:4a:ba:d5:55:05:8d:0e:47:b6:54:39:3c: c8:44:e9:62:9d:e4:4a:1c:c2:6b:88:e8:ed:8c:63:4d:28:16: 38:6e:34:65:52:be:39:72:3f:23:9e:e3:a4:00:28:04:32:5f: 06:f7:83:b9:85:78:8b:6f:4e:9e:2b:24:94:1f:86:c3:77:db: 89:f8:10:5e:08:b6:88:0c:f0:4d:1d:db:6f:1f:8c:45:ac:45: a3:fb:48:cc:03:e2:6c:04:e2:be:2e:79:d1:9b:7c:5b:db:c5: 12:d0:14:01:31:1b:25:49:74:c4:69:54:cb:d0:5d:d8:cf:3d: b2:1d:b8:61:5b:c1:11:5a:bb:14:79:56:78:2f:81:dd:d8:d1: 5f:d0:05:35:8b:ef:93:ec:d9:5c:2c:52:3d:19:18:42:d9:09: d9:01:54:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5HQhNZvE1n31FAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NzAyZDY2MDktMjE4ZS00YzYyLThjOWYtYjMwYjMxMWFhN2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaSzQwvdqDFxCGIC29FLRtlB+fO84rKH+gsH ig1A4xdzmwjQ6mVbOYJE1hn6UT9ea774R0EVe5c2WyHJzmPvx7XOTeXKKtrD0AXd lI35Qdk0cNpDOEC4JYDDceVT+CxregrKjIqmGDuXR9ustnzZWpK0z2P2oHuKF5gQ HSHDw9v9li9TV/P50/eKUjBQXkJk3eOF4+8Tv7Z6xkerdE0670iLCTq8613RZd6a dQiy5VaG2uRUvpnGQiBSlB5YtrHY9O0wV1WzCCcFZoa/MSd9wKyeL3IJjzYaKOm2 om/Z+E2EaU4jUUMmCT1ZDb/8/fHikgAg80arOjsO46n/fFEzVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7PAPHC7j+pqLuLRy0RMZHm5ECSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjVmN2MwMzEtZTVlYS0z MjgzLTg4YjAtZjlhMTEyYTcxYjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBroK4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsoXE3in3E5jvHP+09/28rZ1EZbMoZDfFuIFcAr2+Ay6cIwhD4ujNla woyVAp7RyxknGnsTJCXKa8T+j3/NoR8coLWdnKNsoKW5QX5qv+MiWKqZIqWC+j2I 3+SDN9Iebkq61VUFjQ5HtlQ5PMhE6WKd5EocwmuI6O2MY00oFjhuNGVSvjlyPyOe 46QAKAQyXwb3g7mFeItvTp4rJJQfhsN324n4EF4ItogM8E0d228fjEWsRaP7SMwD 4mwE4r4uedGbfFvbxRLQFAExGyVJdMRpVMvQXdjPPbIduGFbwRFauxR5Vngvgd3Y 0V/QBTWL75Ps2VwsUj0ZGELZCdkBVJE= -----END CERTIFICATE-----Generated at Tue Nov 4 19:15:45 2025 by rpki-client