$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/54f45230-5bf8-3d51-95dc-ccdaab9fac39.roa File: 54f45230-5bf8-3d51-95dc-ccdaab9fac39.roa (raw, json) Hash identifier: oRvXGTG+ZAM+RzordOekxoqtvSDZDQsn4jLjUrHp00c= Subject key identifier: 50:F4:3B:7C:6F:17:F4:FC:CC:C1:4A:CF:1B:A9:41:1E:FE:F9:FF:B9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3F1C57F08CBE4B379879E260 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/54f45230-5bf8-3d51-95dc-ccdaab9fac39.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 66.32.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:57:f0:8c:be:4b:37:98:79:e2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=662d6b78-5bb8-4ca8-bccb-7fac4e2f52c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:00:68:8d:fc:0f:58:bf:64:5a:ed:cf:ca:38: ac:71:a4:bb:4a:6d:0e:39:50:51:94:29:e3:2a:9d: 8e:af:04:84:e8:2e:27:4f:88:89:dc:84:1b:41:75: 5a:48:e9:72:71:2b:d6:46:77:be:a2:82:23:1a:db: 29:ce:67:f9:a5:c2:f6:ae:11:b4:a8:77:6d:1c:25: eb:05:45:c5:dc:ea:a1:46:2b:41:3d:fc:27:81:b0: cc:98:2f:01:a0:4b:df:bd:6c:bc:ed:6b:07:42:aa: bc:ae:a8:e7:01:39:5c:c6:3c:92:a9:09:56:41:99: 77:f3:36:c8:22:a3:b0:03:79:c2:85:0d:f2:6d:49: 01:02:8a:09:27:8e:2f:c1:fb:d7:be:96:c6:de:1a: e7:f4:39:f5:54:fe:69:5f:b1:47:2a:e9:86:45:f3: 74:ab:6e:0f:23:b4:f5:06:e9:e2:79:e4:b1:64:8b: ab:75:b1:41:4b:a2:96:06:8d:7e:ae:fc:13:5f:ff: af:73:97:0d:43:09:c6:ce:0a:20:ff:25:04:2d:a6: 47:16:7a:44:c5:d9:30:3f:18:1c:21:c3:97:69:75: cc:30:e9:80:a7:3e:3d:98:6c:41:ae:e4:7e:e0:98: 44:05:b6:08:56:19:f4:f1:7e:d9:81:fb:18:a6:9f: 72:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F4:3B:7C:6F:17:F4:FC:CC:C1:4A:CF:1B:A9:41:1E:FE:F9:FF:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/54f45230-5bf8-3d51-95dc-ccdaab9fac39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.32.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:39:ca:d9:2b:8a:13:b5:17:98:2d:06:66:ac:b8:96:74:90: c3:89:26:5f:0a:fc:d1:da:54:f8:87:eb:7c:3b:e9:f2:b9:4a: 71:80:43:67:68:b2:7c:4d:25:59:9c:da:26:5e:c9:d5:7b:ff: 21:d4:97:f8:72:12:cf:ce:5c:bd:81:2d:7f:72:15:b1:2f:fe: e1:6b:4f:cb:36:f2:bd:8c:cc:30:b1:b7:5c:7a:97:81:14:a0: 2c:8e:c9:d9:ad:ec:0b:00:13:4a:eb:d9:2a:30:ea:9c:50:a2: 14:03:e2:33:4f:fd:90:0e:ba:31:3c:ba:6e:a2:7a:7c:18:51: c7:bc:1b:b3:3c:b9:8d:64:cb:bc:df:54:10:ed:09:c3:52:e0: c5:7c:21:30:e9:0d:52:f4:68:16:db:15:21:7f:c2:62:4f:97: 42:94:14:03:65:3a:d7:0c:a4:07:ee:fe:b8:5f:c6:02:75:77: 87:3a:c0:b4:00:fe:1e:fe:2a:71:2a:ed:2a:4b:2f:92:ad:c4: a2:4a:57:37:d3:c4:bb:6c:91:e8:d8:7e:ea:6c:5f:8c:61:de: a5:76:64:cd:22:00:51:ad:4f:57:80:08:e9:50:2e:c9:6f:ef: cf:f7:43:36:53:86:a1:77:bc:9a:72:de:d1:8b:00:a5:12:98: 17:1f:e2:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HFfwjL5LN5h54mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk NjYyZDZiNzgtNWJiOC00Y2E4LWJjY2ItN2ZhYzRlMmY1MmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwBojfwPWL9kWu3PyjiscaS7Sm0OOVBRlCnj Kp2OrwSE6C4nT4iJ3IQbQXVaSOlycSvWRne+ooIjGtspzmf5pcL2rhG0qHdtHCXr BUXF3OqhRitBPfwngbDMmC8BoEvfvWy87WsHQqq8rqjnATlcxjySqQlWQZl38zbI IqOwA3nChQ3ybUkBAooJJ44vwfvXvpbG3hrn9Dn1VP5pX7FHKumGRfN0q24PI7T1 BunieeSxZIurdbFBS6KWBo1+rvwTX/+vc5cNQwnGzgog/yUELaZHFnpExdkwPxgc IcOXaXXMMOmApz49mGxBruR+4JhEBbYIVhn08X7ZgfsYpp9yWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFD0O3xvF/T8zMFKzxupQR7++f+5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTRmNDUyMzAtNWJmOC0z ZDUxLTk1ZGMtY2NkYWFiOWZhYzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQiBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEw5ytkrihO1F5gtBmasuJZ0kMOJJl8K/NHaVPiH63w76fK5SnGAQ2do snxNJVmc2iZeydV7/yHUl/hyEs/OXL2BLX9yFbEv/uFrT8s28r2MzDCxt1x6l4EU oCyOydmt7AsAE0rr2Sow6pxQohQD4jNP/ZAOujE8um6ienwYUce8G7M8uY1ky7zf VBDtCcNS4MV8ITDpDVL0aBbbFSF/wmJPl0KUFANlOtcMpAfu/rhfxgJ1d4c6wLQA /h7+KnEq7SpLL5KtxKJKVzfTxLtskejYfupsX4xh3qV2ZM0iAFGtT1eACOlQLslv 78/3QzZThqF3vJpy3tGLAKUSmBcf4qI= -----END CERTIFICATE-----Generated at Sat Oct 11 00:13:23 2025 by rpki-client