$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5686d275-7655-3c09-9ac1-b87e7f1c2b80.roa File: 5686d275-7655-3c09-9ac1-b87e7f1c2b80.roa (raw, json) Hash identifier: WnCBaYCyjGfBcgJ7mGoZuFRJHHmO1LnP0iK5nbdZjS4= Subject key identifier: 03:F0:92:9F:4D:CA:92:EE:B3:BF:2C:BF:EE:C6:70:C3:49:47:0D:8C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF6ED50AB2BFDE0FF2020 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5686d275-7655-3c09-9ac1-b87e7f1c2b80.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 97.66.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f6:ed:50:ab:2b:fd:e0:ff:20:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=ff729b2b-6283-4778-8205-11c0ecde51ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:66:ef:d9:ef:a7:11:e9:80:08:ae:eb:7d:60: 1b:49:3d:7d:53:88:ee:1b:3c:b9:83:66:47:e5:e7: 21:84:cb:2c:5a:85:54:6f:df:80:28:7a:f6:c7:52: 51:1e:23:42:81:6b:9e:46:12:d6:ca:ce:20:ec:8e: 9d:e1:c3:c7:4f:02:20:dc:27:8f:0e:fd:d3:2c:26: fa:09:04:17:61:f6:5c:5a:1b:7c:50:2e:1c:8d:da: d9:fe:05:7f:16:ac:ff:ed:79:2c:13:1f:59:a3:a6: c5:dc:c5:18:05:c4:40:04:87:ed:48:42:72:07:dd: 2f:71:5c:91:7c:1e:8a:2e:8b:fa:bc:b3:e4:14:60: 77:e1:da:57:20:0f:d5:04:8b:00:b6:bd:1c:4a:a7: c2:16:9d:c8:e6:1d:78:27:90:34:82:f3:22:67:30: 13:21:7b:18:f3:ea:d3:1b:a0:42:8f:8e:35:84:cb: 1e:ee:c8:43:94:c9:10:de:4c:58:b0:1d:08:52:68: aa:e3:8f:f0:ea:c3:7e:8b:4d:f5:d8:4c:a4:f4:38: 62:25:c4:6d:03:11:6f:50:70:9d:fc:e1:34:d4:7f: fe:8d:77:52:57:1c:71:54:87:9f:85:b4:5c:4d:38: 1f:e7:37:14:0b:03:9b:93:48:25:77:32:ef:5e:9f: f6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F0:92:9F:4D:CA:92:EE:B3:BF:2C:BF:EE:C6:70:C3:49:47:0D:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5686d275-7655-3c09-9ac1-b87e7f1c2b80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 97.66.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:a5:c3:fa:51:48:8e:f3:54:0e:4b:bd:7e:1f:35:15:18:29: 23:28:ff:f3:b5:d1:67:59:0a:7d:c5:f5:8c:f0:7a:bc:3e:65: 08:29:2e:e9:71:a7:a3:40:a2:41:2e:fa:3c:09:83:d9:9e:e9: 60:97:8b:fa:2a:d2:44:a7:de:ca:d9:7b:57:85:19:3c:e0:f1: 6f:5e:52:8b:fe:7e:f3:6e:f2:c2:15:93:e5:69:b4:af:9d:7b: aa:4e:2e:07:f8:f5:52:7b:75:bb:d7:34:c4:77:0f:d4:16:ea: 5c:77:66:5e:59:bc:05:35:82:d0:3f:49:2f:33:31:e5:54:01: bb:ba:69:ef:a0:8b:51:e0:d1:06:66:8d:23:fb:46:ae:38:39: c3:15:94:50:b0:6b:d1:04:44:4d:38:79:a2:05:3d:f2:17:86: 79:cd:ec:31:55:52:dc:6d:22:84:34:7a:96:b4:db:7c:57:06: 7e:19:30:1e:b8:20:cf:d0:29:83:78:39:7d:38:77:21:56:10: 11:2a:8a:a4:0f:51:d3:49:6d:6e:ba:b7:56:0e:a0:93:4c:01: dd:65:b1:e0:da:a3:a8:20:d2:fe:09:51:2d:fe:5a:2e:91:23: 31:3c:ad:8b:5b:ce:35:a9:a0:85:64:d8:1e:7c:90:21:04:54: 53:2c:ec:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPbtUKsr/eD/ICAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZmY3MjliMmItNjI4My00Nzc4LTgyMDUtMTFjMGVjZGU1MWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWbv2e+nEemACK7rfWAbST19U4juGzy5g2ZH 5echhMssWoVUb9+AKHr2x1JRHiNCgWueRhLWys4g7I6d4cPHTwIg3CePDv3TLCb6 CQQXYfZcWht8UC4cjdrZ/gV/Fqz/7XksEx9Zo6bF3MUYBcRABIftSEJyB90vcVyR fB6KLov6vLPkFGB34dpXIA/VBIsAtr0cSqfCFp3I5h14J5A0gvMiZzATIXsY8+rT G6BCj441hMse7shDlMkQ3kxYsB0IUmiq44/w6sN+i0312Eyk9DhiJcRtAxFvUHCd /OE01H/+jXdSVxxxVIefhbRcTTgf5zcUCwObk0gldzLvXp/2owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPwkp9NypLus78sv+7GcMNJRw2MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTY4NmQyNzUtNzY1NS0z YzA5LTlhYzEtYjg3ZTdmMWMyYjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUL/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqlw/pRSI7zVA5LvX4fNRUYKSMo//O10WdZCn3F9Yzwerw+ZQgpLulx p6NAokEu+jwJg9me6WCXi/oq0kSn3srZe1eFGTzg8W9eUov+fvNu8sIVk+VptK+d e6pOLgf49VJ7dbvXNMR3D9QW6lx3Zl5ZvAU1gtA/SS8zMeVUAbu6ae+gi1Hg0QZm jSP7Rq44OcMVlFCwa9EERE04eaIFPfIXhnnN7DFVUtxtIoQ0epa023xXBn4ZMB64 IM/QKYN4OX04dyFWEBEqiqQPUdNJbW66t1YOoJNMAd1lseDao6gg0v4JUS3+Wi6R IzE8rYtbzjWpoIVk2B58kCEEVFMs7Ds= -----END CERTIFICATE-----Generated at Fri Oct 10 20:01:06 2025 by rpki-client