$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/49f7fa60-cced-3dc5-99ae-6941116583df.roa File: 49f7fa60-cced-3dc5-99ae-6941116583df.roa (raw, json) Hash identifier: CDzFltc38naU/d+2Dtq0/v216UzIvqs7yztk3A1FkEk= Subject key identifier: BF:DF:1F:33:5B:2F:50:3B:D6:2E:8A:68:C3:18:8D:78:3F:94:80:65 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584B970CE38C2976A30064F6E400 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/49f7fa60-cced-3dc5-99ae-6941116583df.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 12129 IP address blocks: 216.150.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:e3:8c:29:76:a3:00:64:f6:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=b18a4edc-b4a2-4c00-ac28-3dec413e7513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5e:5b:85:c0:4b:da:ea:98:b1:00:e1:e1:64: 75:33:25:ec:f9:46:3e:4c:61:c3:5d:b2:31:89:f8: 74:9b:db:d2:b8:8b:78:eb:9f:5a:64:9b:64:37:c9: 6f:51:12:34:72:c6:8c:7f:16:20:30:8e:f8:39:0f: 61:95:db:57:4a:0d:7a:fd:38:b0:97:62:7c:35:89: 75:b1:e9:e1:a6:ad:26:f2:8c:41:cf:62:d4:2b:0b: b7:be:32:8e:20:8c:c3:d8:d2:47:17:ef:7d:8f:de: 10:8a:f8:1f:93:a1:11:e9:21:25:31:cf:0d:e2:6e: 72:f3:39:04:f8:c6:e9:ed:44:d0:2a:2f:ba:6a:9a: f6:af:ef:a6:2d:3e:d8:f6:9c:36:26:bb:68:b5:e2: e3:64:46:dd:69:f7:a9:46:b5:b4:23:eb:12:07:1f: 99:cb:d8:32:ed:10:68:78:8c:86:f7:73:d3:63:49: 47:8b:4e:21:7f:99:6a:c8:8a:ae:51:a1:9d:1f:5d: 92:c7:4e:b5:41:65:c3:5d:ca:de:1e:6c:f1:61:5f: 9b:c6:3d:27:4f:6a:37:43:a5:5e:5e:e8:3c:f1:7b: 95:42:28:d0:17:f7:42:f3:1f:75:ba:17:4b:49:74: eb:60:78:42:82:15:2b:07:cb:3d:b4:14:96:c5:6e: 9f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DF:1F:33:5B:2F:50:3B:D6:2E:8A:68:C3:18:8D:78:3F:94:80:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/49f7fa60-cced-3dc5-99ae-6941116583df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 216.150.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:76:f5:4d:d3:4b:fb:72:a1:71:36:b1:73:8f:3d:b2:92:ab: 03:a2:a8:ec:80:26:dc:b6:50:43:3f:fd:b1:98:a6:11:ed:dd: 67:a5:85:a6:e3:01:66:ea:60:8a:1f:8c:ec:6b:b1:f6:e5:f1: 47:80:5d:f5:95:8f:78:61:7c:8e:ea:be:a0:2d:b6:96:33:45: 69:c2:04:04:41:82:33:21:36:ea:70:2c:c3:eb:a3:64:ac:c5: 60:0f:97:11:4c:32:e7:e1:56:cf:3b:9e:f5:61:ff:a0:4d:1a: 01:c4:3d:dd:71:3e:f0:2a:3a:2e:26:fb:09:c0:e5:96:7f:47: 1f:a6:41:4b:20:9a:99:1b:e3:a0:7c:e9:f4:b1:e1:48:08:4d: 95:89:3b:1a:d9:76:53:f5:ac:bb:b8:c0:90:8c:1a:02:b7:29: 72:2c:18:3b:fc:08:4d:0a:0b:95:c0:42:e6:09:be:13:04:fd: f0:4f:1e:31:3e:12:b0:d3:8a:f1:2e:ca:98:fc:7c:0f:8b:36: 14:b3:ba:6e:a4:5e:95:b0:ee:ea:c1:18:d2:37:0b:35:18:08: cf:85:8d:fa:29:d2:c8:6c:6b:7a:f4:c5:e2:f5:d1:d7:ce:60: 0e:9a:16:3d:9b:11:0f:53:49:23:4e:9a:3d:c6:c5:5b:4b:4a: 5f:6f:db:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDOOMKXajAGT25AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YjE4YTRlZGMtYjRhMi00YzAwLWFjMjgtM2RlYzQxM2U3NTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol5bhcBL2uqYsQDh4WR1MyXs+UY+TGHDXbIx ifh0m9vSuIt4659aZJtkN8lvURI0csaMfxYgMI74OQ9hldtXSg16/Tiwl2J8NYl1 senhpq0m8oxBz2LUKwu3vjKOIIzD2NJHF+99j94Qivgfk6ER6SElMc8N4m5y8zkE +Mbp7UTQKi+6apr2r++mLT7Y9pw2JrtoteLjZEbdafepRrW0I+sSBx+Zy9gy7RBo eIyG93PTY0lHi04hf5lqyIquUaGdH12Sx061QWXDXcreHmzxYV+bxj0nT2o3Q6Ve Xug88XuVQijQF/dC8x91uhdLSXTrYHhCghUrB8s9tBSWxW6fDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/fHzNbL1A71i6KaMMYjXg/lIBlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvNDlmN2ZhNjAtY2NlZC0z ZGM1LTk5YWUtNjk0MTExNjU4M2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2JbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGV29U3TS/tyoXE2sXOPPbKSqwOiqOyAJty2UEM//bGYphHt3Welhabj AWbqYIofjOxrsfbl8UeAXfWVj3hhfI7qvqAttpYzRWnCBARBgjMhNupwLMPro2Ss xWAPlxFMMufhVs87nvVh/6BNGgHEPd1xPvAqOi4m+wnA5ZZ/Rx+mQUsgmpkb46B8 6fSx4UgITZWJOxrZdlP1rLu4wJCMGgK3KXIsGDv8CE0KC5XAQuYJvhME/fBPHjE+ ErDTivEuypj8fA+LNhSzum6kXpWw7urBGNI3CzUYCM+Fjfop0shsa3r0xeL10dfO YA6aFj2bEQ9TSSNOmj3GxVtLSl9v27E= -----END CERTIFICATE-----Generated at Wed Nov 5 00:59:07 2025 by rpki-client