$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/520be285-2429-3ad0-8ae4-5cc51f14e87e.roa File: 520be285-2429-3ad0-8ae4-5cc51f14e87e.roa (raw, json) Hash identifier: 6V1dde4xIu6UoRujKLY3DsiKgDGjLIu8H+RddXBcGBU= Subject key identifier: 7B:02:F7:BC:90:6E:56:CA:43:9A:1F:37:6E:18:76:8C:17:CB:E4:A0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF2DF327D04CB6C389A40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/520be285-2429-3ad0-8ae4-5cc51f14e87e.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 66.0.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f2:df:32:7d:04:cb:6c:38:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=729e036c-2494-4e0a-8a41-c1ff8cadc66a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9b:fb:74:78:36:e9:13:22:7b:40:85:1d:12: 98:0d:e8:46:ef:a6:0b:de:e6:c8:21:c6:5d:fc:58: ea:6a:96:ce:b6:97:5c:ae:ca:79:3d:fa:c0:cc:29: 50:a2:1d:31:01:2b:47:a7:b2:f2:db:32:fb:30:fc: d6:e7:71:04:60:e4:63:21:be:ed:61:6c:51:b5:68: f2:14:2f:95:36:f6:41:ea:3e:50:90:8c:c1:92:86: 9f:db:c4:76:a4:91:d6:4e:7c:77:e8:f7:be:ec:36: 85:eb:52:62:d7:57:ad:f0:33:df:22:09:4c:37:7e: 6f:38:f7:66:87:61:0d:9d:87:1e:03:5a:e5:c1:62: e6:1c:79:0a:ab:56:f0:da:1e:8a:ef:0b:50:24:56: 11:50:c3:fa:89:4f:72:52:ed:c3:72:e4:5f:2b:97: 8b:e0:ea:c2:ec:4f:00:16:e8:3f:7c:77:82:ea:41: f0:7c:97:b1:0a:20:a9:97:17:84:58:04:5f:46:73: 52:fb:12:8c:ab:e8:dd:27:35:f7:17:69:08:6f:65: cf:1c:93:0b:2c:03:ee:49:78:33:08:25:37:0e:8d: e2:2f:cd:e7:ee:56:6b:fe:9e:f2:eb:e9:73:d9:b9: 0a:34:75:7b:db:b3:c3:0c:22:10:6e:cf:ee:a1:45: 74:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:02:F7:BC:90:6E:56:CA:43:9A:1F:37:6E:18:76:8C:17:CB:E4:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/520be285-2429-3ad0-8ae4-5cc51f14e87e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.0.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:69:b8:f1:55:6c:4c:5f:13:08:19:7f:ba:b7:82:4a:47:e8: 0e:76:0d:7b:5d:8b:8c:47:d0:77:06:6c:fe:40:52:81:da:d3: b0:79:63:e2:c0:ba:7c:f9:d0:2f:2e:e8:ed:c4:96:04:42:e3: 24:0f:11:bc:a1:82:07:92:0e:71:38:14:d1:84:ee:a1:2c:c4: b3:f9:11:06:aa:1b:ca:c3:9b:1a:6c:27:3f:b7:b0:17:80:39: f5:c1:53:37:7f:98:63:22:8b:8d:8e:21:d2:8a:56:01:1e:50: 9f:ee:c5:db:c8:fb:62:24:e3:17:f6:a1:42:73:17:ed:04:fc: a3:9b:ff:95:a5:5d:51:3a:b0:77:bd:9c:e5:78:47:f4:0a:95: 5a:6b:02:78:b5:ef:34:45:7d:53:55:37:b1:ac:0b:f6:cd:1a: 30:e5:7d:0b:db:ea:16:cd:eb:d6:08:58:8d:44:d8:8a:32:ad: 14:a3:53:2d:7d:2c:c1:a5:8e:b7:2c:20:a2:b2:ec:32:0c:f6: bd:42:af:06:d7:05:4a:a1:4a:c5:34:51:a3:7d:82:6d:57:68: 39:09:a1:77:fa:1d:c9:fc:05:5a:9a:6b:a8:d5:f7:55:60:1b: b3:a6:ae:f3:26:48:b9:ed:b5:85:3f:79:a2:c4:2c:d6:d9:34: 9e:8e:88:f2 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtxXPLfMn0Ey2w4mkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NzI5ZTAzNmMtMjQ5NC00ZTBhLThhNDEtYzFmZjhjYWRjNjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopv7dHg26RMie0CFHRKYDehG76YL3ubIIcZd /FjqapbOtpdcrsp5PfrAzClQoh0xAStHp7Ly2zL7MPzW53EEYORjIb7tYWxRtWjy FC+VNvZB6j5QkIzBkoaf28R2pJHWTnx36Pe+7DaF61Ji11et8DPfIglMN35vOPdm h2ENnYceA1rlwWLmHHkKq1bw2h6K7wtQJFYRUMP6iU9yUu3DcuRfK5eL4OrC7E8A Fug/fHeC6kHwfJexCiCplxeEWARfRnNS+xKMq+jdJzX3F2kIb2XPHJMLLAPuSXgz CCU3Do3iL83n7lZr/p7y6+lz2bkKNHV727PDDCIQbs/uoUV0bwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHsC97yQblbKQ5ofN24YdowXy+SgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTIwYmUyODUtMjQyOS0z YWQwLThhZTQtNWNjNTFmMTRlODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQgAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAHWm48VVsTF8TCBl/ureCSkfoDnYNe12LjEfQdwZs/kBSgdrTsHlj4sC6 fPnQLy7o7cSWBELjJA8RvKGCB5IOcTgU0YTuoSzEs/kRBqobysObGmwnP7ewF4A5 9cFTN3+YYyKLjY4h0opWAR5Qn+7F28j7YiTjF/ahQnMX7QT8o5v/laVdUTqwd72c 5XhH9AqVWmsCeLXvNEV9U1U3sawL9s0aMOV9C9vqFs3r1ghYjUTYijKtFKNTLX0s waWOtywgorLsMgz2vUKvBtcFSqFKxTRRo32CbVdoOQmhd/odyfwFWpprqNX3VWAb s6au8yZIue21hT95osQs1tk0no6I8g== -----END CERTIFICATE-----Generated at Sat Oct 11 00:16:12 2025 by rpki-client