$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23d9e299-32e4-302b-bea4-dae2bfb6c7e9.roa File: 23d9e299-32e4-302b-bea4-dae2bfb6c7e9.roa (raw, json) Hash identifier: 4mN/0LWnb7e/hnx/L8//sJp1hhUwUHh2DjjIBEwD/iw= Subject key identifier: 2A:C3:FA:83:84:D9:4B:22:57:9A:CB:0D:17:BC:B4:B6:A3:EB:DF:91 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC1E0A2B4D3EA68BF7880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23d9e299-32e4-302b-bea4-dae2bfb6c7e9.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 66.248.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c1:e0:a2:b4:d3:ea:68:bf:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=80a6ec31-497e-4a00-b619-a6e6fec5828c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0c:72:21:2f:0f:4e:0b:54:f5:66:8c:d0:23: 4e:46:b1:e7:d6:c7:cf:4a:dc:7f:94:41:3f:7b:3d: 66:df:4d:59:eb:f5:b2:cb:39:ff:cd:ac:46:58:b3: d7:43:80:15:22:bc:d2:1d:f9:e6:d9:a5:83:ec:b0: 13:06:b5:7c:a8:b2:de:5c:7e:98:13:4e:10:72:42: c0:6d:ba:fc:24:29:0b:91:3b:d3:d5:12:ad:88:22: c6:06:ef:00:84:b3:2a:d6:75:92:7a:0e:9c:aa:60: 5e:45:7e:16:68:c1:f5:25:3d:9d:ec:29:51:88:75: e3:6f:a1:86:f6:6b:e4:6c:f2:c3:ff:fb:03:65:72: 54:f7:ab:aa:ba:e8:97:ad:6f:35:79:ff:48:3d:72: d5:32:eb:72:11:8b:17:3f:24:b8:56:60:1e:56:d8: 87:9a:d6:ea:10:a8:2d:b8:57:be:5c:20:83:7c:b1: f6:34:a5:9d:1c:5f:1b:18:a9:c5:ca:77:bc:79:7a: fc:df:6b:f2:38:58:45:4b:e4:8b:c3:ae:a8:0d:db: d3:87:e4:0d:ed:ac:52:82:2f:22:73:ca:0a:0a:ab: d4:06:a4:e6:84:62:e1:e4:0d:de:17:10:ec:9d:d8: 2e:f8:06:6b:df:6f:11:1b:e1:61:e3:cd:11:39:46: b3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C3:FA:83:84:D9:4B:22:57:9A:CB:0D:17:BC:B4:B6:A3:EB:DF:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23d9e299-32e4-302b-bea4-dae2bfb6c7e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.248.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ba:e0:69:eb:8c:f2:8e:96:90:8d:30:b0:35:fc:82:52:77: fe:2f:2a:bd:db:1d:6b:7d:b9:b1:37:90:57:83:9d:6d:7b:5a: 7b:86:f3:e0:da:79:df:76:fb:77:61:73:5f:8d:f6:ba:7e:83: 18:c1:ec:51:b9:65:34:7e:7e:a9:89:63:26:5f:ab:17:7e:ee: 12:a4:f5:1b:02:95:4f:ac:bd:84:b3:88:1a:e9:af:01:5f:a4: a5:77:87:a7:e2:b6:3c:c0:54:41:68:41:7d:14:52:ba:9d:d4: 69:62:cd:20:4b:10:71:d0:cb:01:93:a0:97:cc:df:b0:8d:48: 0a:ab:f8:e3:05:33:bd:ab:2c:b5:8c:61:91:de:45:c7:67:32: 15:91:2c:ed:68:af:0e:35:43:33:6b:61:61:62:aa:79:d0:d0: dc:72:3c:10:68:55:28:cd:d7:d1:2d:08:7a:e1:f8:46:59:82: 8c:3a:04:1b:61:dd:a8:ce:26:f1:ae:b3:84:c3:2e:ff:37:35: 77:4a:18:bc:1f:36:81:81:68:5d:8e:43:4f:94:d2:a6:a8:f6: 03:cc:93:d5:4a:7b:af:6a:2d:e4:6c:8f:7b:38:8b:8f:36:11: a3:c4:c3:cc:a8:fa:06:70:06:38:64:0b:69:67:f6:1b:41:a5: 08:50:42:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMHgorTT6mi/eIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ODBhNmVjMzEtNDk3ZS00YTAwLWI2MTktYTZlNmZlYzU4MjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAxyIS8PTgtU9WaM0CNORrHn1sfPStx/lEE/ ez1m301Z6/Wyyzn/zaxGWLPXQ4AVIrzSHfnm2aWD7LATBrV8qLLeXH6YE04QckLA bbr8JCkLkTvT1RKtiCLGBu8AhLMq1nWSeg6cqmBeRX4WaMH1JT2d7ClRiHXjb6GG 9mvkbPLD//sDZXJU96uquuiXrW81ef9IPXLVMutyEYsXPyS4VmAeVtiHmtbqEKgt uFe+XCCDfLH2NKWdHF8bGKnFyne8eXr832vyOFhFS+SLw66oDdvTh+QN7axSgi8i c8oKCqvUBqTmhGLh5A3eFxDsndgu+AZr328RG+Fh480ROUazfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrD+oOE2UsiV5rLDRe8tLaj69+RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjNkOWUyOTktMzJlNC0z MDJiLWJlYTQtZGFlMmJmYjZjN2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQvgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADi64GnrjPKOlpCNMLA1/IJSd/4vKr3bHWt9ubE3kFeDnW17WnuG8+Da ed92+3dhc1+N9rp+gxjB7FG5ZTR+fqmJYyZfqxd+7hKk9RsClU+svYSziBrprwFf pKV3h6fitjzAVEFoQX0UUrqd1GlizSBLEHHQywGToJfM37CNSAqr+OMFM72rLLWM YZHeRcdnMhWRLO1orw41QzNrYWFiqnnQ0NxyPBBoVSjN19EtCHrh+EZZgow6BBth 3ajOJvGus4TDLv83NXdKGLwfNoGBaF2OQ0+U0qao9gPMk9VKe69qLeRsj3s4i482 EaPEw8yo+gZwBjhkC2ln9htBpQhQQrg= -----END CERTIFICATE-----Generated at Fri Oct 10 22:03:29 2025 by rpki-client