$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c0a3825-9f11-31bb-9289-dde54bd64525.roa File: 4c0a3825-9f11-31bb-9289-dde54bd64525.roa (raw, json) Hash identifier: jo/TTaBTJZrTKMZtJW0nUQkw8sm5I6LPJ0BO2q/TzUE= Subject key identifier: FB:59:ED:9E:AD:8A:0A:4C:E1:F7:2F:17:64:6D:E8:C6:F7:DE:8C:A9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B0CDC21429B5CBCD6B4DF4C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c0a3825-9f11-31bb-9289-dde54bd64525.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 7029 IP address blocks: 66.19.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:21:42:9b:5c:bc:d6:b4:df:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=6b1f0b1a-e611-430e-a381-e7cde42811df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:28:f0:5a:76:d3:3e:91:7f:d3:d0:c8:ff:da: 0c:37:20:71:15:c9:0f:ad:ce:b6:41:f8:00:ab:79: ee:0e:31:9b:82:6b:e7:08:bf:79:1f:3e:6a:42:6f: 2c:51:49:c0:34:de:1a:4c:15:1e:3a:bc:e1:6c:a8: 01:92:67:b3:73:1a:3f:7f:18:43:d4:d3:42:97:ba: d1:1d:ff:2f:f5:44:7a:3b:92:94:7a:da:f2:41:7e: bd:8d:13:d4:8e:ed:b4:8e:cf:75:c5:6f:a8:c1:5e: 35:ac:ba:d8:61:b9:b3:4a:71:84:76:86:ac:9c:3b: 11:9d:d3:4e:2e:1b:a2:8f:9f:2b:c4:99:6c:c6:81: 74:c8:69:37:c9:6a:c2:62:4e:c4:77:14:06:17:54: 2e:ef:b9:e0:27:7b:31:b7:4e:00:a1:0d:0b:14:2f: af:96:f1:b9:86:01:cb:3a:b8:4e:4d:f8:56:0b:77: 7b:09:5b:b8:57:b3:67:99:05:a2:4a:9e:4a:90:b0: 31:42:e6:f5:e5:6e:5b:8f:aa:72:c7:b1:d9:cd:72: e5:a3:5c:e0:6f:7b:8e:5a:66:b9:10:ff:6a:ca:36: ea:e2:b6:3c:c3:dc:ed:f8:fe:49:b6:de:83:7f:c0: 32:55:38:80:95:de:6f:67:ec:b2:0f:23:6f:65:43: c5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:59:ED:9E:AD:8A:0A:4C:E1:F7:2F:17:64:6D:E8:C6:F7:DE:8C:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c0a3825-9f11-31bb-9289-dde54bd64525.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.19.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:45:23:be:7b:96:7d:2e:84:a6:d5:5c:93:dd:5b:0b:12:3b: b9:33:cb:88:a4:bc:58:9d:d5:89:5a:7a:82:c4:a9:24:00:b5: d5:0c:71:c7:96:57:72:10:e0:75:59:93:29:28:b9:1d:55:9a: 81:6b:72:07:5d:92:60:58:1d:52:fd:36:a1:56:c9:d0:b4:7f: d4:74:b4:17:2f:e0:58:b1:d4:22:a1:ec:77:2c:98:5b:c7:07: cc:17:bf:4f:3c:80:b5:5a:35:f6:bc:2d:bb:6a:3d:16:eb:02: 82:9c:69:04:84:13:3a:63:44:c9:76:66:54:6f:6d:70:ac:df: dd:1c:d6:c2:03:04:17:2d:0b:1e:08:41:de:3d:48:29:b1:9e: 07:70:21:21:1d:bd:8e:13:09:8c:32:3e:e6:98:67:cc:ec:8e: 7e:9f:ad:f1:5b:ef:5c:be:0f:ee:b4:c3:f9:5f:77:31:b5:6a: 40:35:f4:ae:9a:dd:67:da:b5:95:ba:a2:d6:8d:bf:7a:72:52: 85:d6:e9:68:b2:f8:4f:73:31:24:c3:c7:35:b8:e7:fa:0b:73: d5:c9:7b:80:91:1e:80:db:8c:2d:54:2a:60:5d:b2:eb:47:f2: a8:58:7c:42:72:a3:2e:08:bc:9f:48:f2:ee:d3:09:bd:b9:b0: be:96:86:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3CFCm1y81rTfTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk NmIxZjBiMWEtZTYxMS00MzBlLWEzODEtZTdjZGU0MjgxMWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzijwWnbTPpF/09DI/9oMNyBxFckPrc62QfgA q3nuDjGbgmvnCL95Hz5qQm8sUUnANN4aTBUeOrzhbKgBkmezcxo/fxhD1NNCl7rR Hf8v9UR6O5KUetryQX69jRPUju20js91xW+owV41rLrYYbmzSnGEdoasnDsRndNO Lhuij58rxJlsxoF0yGk3yWrCYk7EdxQGF1Qu77ngJ3sxt04AoQ0LFC+vlvG5hgHL OrhOTfhWC3d7CVu4V7NnmQWiSp5KkLAxQub15W5bj6pyx7HZzXLlo1zgb3uOWma5 EP9qyjbq4rY8w9zt+P5Jtt6Df8AyVTiAld5vZ+yyDyNvZUPFTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPtZ7Z6tigpM4fcvF2Rt6Mb33oypMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGMwYTM4MjUtOWYxMS0z MWJiLTkyODktZGRlNTRiZDY0NTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQhPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhFI757ln0uhKbVXJPdWwsSO7kzy4ikvFid1YlaeoLEqSQAtdUMcceW V3IQ4HVZkykouR1VmoFrcgddkmBYHVL9NqFWydC0f9R0tBcv4Fix1CKh7HcsmFvH B8wXv088gLVaNfa8LbtqPRbrAoKcaQSEEzpjRMl2ZlRvbXCs390c1sIDBBctCx4I Qd49SCmxngdwISEdvY4TCYwyPuaYZ8zsjn6frfFb71y+D+60w/lfdzG1akA19K6a 3WfatZW6otaNv3pyUoXW6Wiy+E9zMSTDxzW45/oLc9XJe4CRHoDbjC1UKmBdsutH 8qhYfEJyoy4IvJ9I8u7TCb25sL6Whnc= -----END CERTIFICATE-----Generated at Fri Oct 10 17:54:30 2025 by rpki-client