$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/52df3669-1cbf-34e9-bcc5-f42dc059a383.roa File: 52df3669-1cbf-34e9-bcc5-f42dc059a383.roa (raw, json) Hash identifier: 8wKYX6MVdL5GkOcRZqxv2nVvzcVVrpipy3Km2wJ0UPQ= Subject key identifier: 96:6D:9E:9E:53:B2:70:E5:96:FE:13:0C:7D:9C:3D:66:49:B1:D0:9C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC196E8EDDC4D16935D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/52df3669-1cbf-34e9-bcc5-f42dc059a383.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 66.153.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c1:96:e8:ed:dc:4d:16:93:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=77cb750d-7e14-4d74-9ee3-40bc53d4140c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:02:06:76:5b:f6:57:db:32:be:d2:ba:1e:1a: 43:26:cb:12:dd:6d:08:21:ed:fd:e2:70:c5:b0:bc: d2:03:7e:bc:70:ab:eb:da:ac:7f:41:88:67:ad:88: 2a:96:fd:23:24:31:4a:1d:e5:f9:e6:a0:a4:53:f2: b5:60:42:a7:59:42:9a:88:23:56:c3:56:93:16:0a: e0:c9:b7:b2:41:b0:19:0e:f8:fb:f0:60:8a:e2:9a: a7:6c:42:dd:42:e5:aa:6a:67:2a:09:88:4f:d1:da: 4e:5c:b6:8b:24:cb:b9:5b:59:59:78:d6:85:0b:04: 52:34:e2:cc:4e:ea:ea:68:8d:5a:11:8d:0e:b8:62: 13:80:49:a4:9f:52:a2:56:a2:8b:48:a1:a9:7e:03: 02:e1:05:4f:d4:d7:6d:7e:22:e1:5d:ff:1b:51:9a: aa:34:ca:b3:46:a3:f9:4f:58:e1:39:6d:6e:5c:28: 28:d4:a7:a0:ab:70:48:30:41:d4:ca:a3:52:b6:c0: 31:d6:2a:f8:a5:97:cc:28:c1:d3:b2:8e:80:dc:13: c8:13:f3:61:c2:45:72:4a:62:a9:85:16:e4:c3:60: 65:70:33:b6:24:a2:e8:d2:62:98:e4:99:52:cb:81: 58:49:09:d3:7b:e5:c1:33:e4:61:7d:a5:8e:bc:61: cf:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6D:9E:9E:53:B2:70:E5:96:FE:13:0C:7D:9C:3D:66:49:B1:D0:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/52df3669-1cbf-34e9-bcc5-f42dc059a383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.153.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:95:80:fc:af:d8:5a:62:03:62:ca:5b:f9:da:2e:33:1f:2d: da:42:02:e8:16:c2:2a:4d:ec:63:d0:d9:cc:3c:dc:5f:42:87: d5:4d:d1:cf:5e:f5:5f:31:2f:91:6d:87:08:2d:d1:84:e4:80: e6:13:ad:6a:92:15:1f:43:95:aa:0a:c9:b2:86:36:32:7c:13: 44:9f:40:f1:a2:22:a0:0c:70:07:fe:41:a4:54:a6:fb:dc:4c: 47:2c:70:eb:b4:db:62:ce:1f:a6:52:c7:20:b5:8e:a3:aa:55: bc:14:e6:e6:79:4d:80:41:45:46:76:ed:8a:ad:ef:70:c9:2f: e5:71:b4:e3:58:0f:d4:d0:df:96:71:32:61:2d:89:02:c6:02: f1:e5:15:3a:ab:2a:be:44:0e:bf:8f:9a:25:88:9a:99:05:e8: 77:23:d9:60:e4:af:77:37:8c:c1:e6:0b:04:94:20:07:8a:28: 36:e2:6d:02:0d:00:f1:a5:c1:d4:09:28:77:1f:9f:39:dd:b2: bc:e2:97:c9:76:28:5d:71:28:56:46:98:aa:bc:7b:71:92:a3: 56:7c:2f:7c:de:82:09:16:45:ce:2b:8a:6a:61:b9:a0:04:40: f2:d9:3e:de:c9:a0:fe:14:3f:3d:4c:c6:1b:44:a8:89:f0:03: 2a:30:24:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMGW6O3cTRaTXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NzdjYjc1MGQtN2UxNC00ZDc0LTllZTMtNDBiYzUzZDQxNDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwIGdlv2V9syvtK6HhpDJssS3W0IIe394nDF sLzSA368cKvr2qx/QYhnrYgqlv0jJDFKHeX55qCkU/K1YEKnWUKaiCNWw1aTFgrg ybeyQbAZDvj78GCK4pqnbELdQuWqamcqCYhP0dpOXLaLJMu5W1lZeNaFCwRSNOLM TurqaI1aEY0OuGITgEmkn1KiVqKLSKGpfgMC4QVP1NdtfiLhXf8bUZqqNMqzRqP5 T1jhOW1uXCgo1Kegq3BIMEHUyqNStsAx1ir4pZfMKMHTso6A3BPIE/NhwkVySmKp hRbkw2BlcDO2JKLo0mKY5JlSy4FYSQnTe+XBM+RhfaWOvGHPkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZtnp5TsnDllv4TDH2cPWZJsdCcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTJkZjM2NjktMWNiZi0z NGU5LWJjYzUtZjQyZGMwNTlhMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQpkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWVgPyv2FpiA2LKW/naLjMfLdpCAugWwipN7GPQ2cw83F9Ch9VN0c9e 9V8xL5Fthwgt0YTkgOYTrWqSFR9DlaoKybKGNjJ8E0SfQPGiIqAMcAf+QaRUpvvc TEcscOu022LOH6ZSxyC1jqOqVbwU5uZ5TYBBRUZ27Yqt73DJL+VxtONYD9TQ35Zx MmEtiQLGAvHlFTqrKr5EDr+PmiWImpkF6Hcj2WDkr3c3jMHmCwSUIAeKKDbibQIN APGlwdQJKHcfnzndsrzil8l2KF1xKFZGmKq8e3GSo1Z8L3zeggkWRc4rimphuaAE QPLZPt7JoP4UPz1MxhtEqInwAyowJFg= -----END CERTIFICATE-----Generated at Fri Oct 10 19:49:01 2025 by rpki-client