$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6cbaed8d-3ef8-33a9-8ede-4cb03c5d8826.roa File: 6cbaed8d-3ef8-33a9-8ede-4cb03c5d8826.roa (raw, json) Hash identifier: DHxZAiX53SVaWxptx5Njl4Ir38pgGd8s4hqtDSolZHI= Subject key identifier: 8B:E4:E5:C7:61:E7:8C:41:CD:64:34:92:82:0D:45:C4:78:B7:8A:A3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D037AED65F33C38457C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6cbaed8d-3ef8-33a9-8ede-4cb03c5d8826.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 26914 IP address blocks: 66.32.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:03:7a:ed:65:f3:3c:38:45:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=b858ef9a-7076-4731-93da-012cb1226ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:24:fe:15:40:75:d0:c5:ea:11:52:3e:39:fa: 1d:80:cc:f0:d9:a2:0f:7f:59:a1:f3:11:2f:b9:30: 84:ca:bc:64:15:1d:84:91:30:5c:22:f7:84:81:e8: 49:5b:a1:7a:91:d4:5a:8d:56:0c:1b:a3:9a:2e:89: c7:d0:52:3e:c6:e2:31:b1:47:ac:4c:96:3b:0a:fc: fa:cc:a1:b1:36:1f:ab:f4:75:dc:93:05:e6:a5:8e: fc:c8:29:75:66:c0:bc:5a:9c:56:90:4a:c5:59:ff: dd:0c:c6:f2:dc:bd:df:bb:97:85:f4:aa:24:d8:14: e2:79:85:f4:09:88:ba:d2:25:22:2f:da:ae:21:76: ba:dc:31:c9:6e:c0:20:6a:b1:8f:bc:a4:86:6e:6a: da:2f:95:f1:33:aa:99:5b:33:70:ca:b9:cf:80:c5: 97:7c:c6:c5:fe:df:c9:32:1d:c3:b7:52:e5:37:e3: 0e:ef:cf:38:1f:a6:e0:10:82:be:fa:84:5e:f5:b5: 58:d6:d1:35:37:92:ae:b8:97:76:88:a0:2f:81:b9: c6:3f:0c:57:e4:a5:db:83:d3:22:4d:8b:f2:36:b2: 82:2d:d5:cf:e8:fe:f3:80:a2:8f:3e:3a:c7:cc:88: 59:89:d0:dc:d4:cb:33:f4:ff:3f:2d:31:bd:30:91: c8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E4:E5:C7:61:E7:8C:41:CD:64:34:92:82:0D:45:C4:78:B7:8A:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6cbaed8d-3ef8-33a9-8ede-4cb03c5d8826.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.32.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:75:30:65:33:5c:da:a4:3f:06:16:7d:77:ae:c3:2d:27:f2: 86:b4:65:57:ae:5b:1d:62:2c:9b:53:19:ea:86:40:bd:50:d6: 0a:40:e0:1e:9c:ec:34:90:7e:94:52:62:60:a4:7a:78:4d:99: e3:18:0c:f6:da:60:bf:06:ff:8b:2d:1d:1d:7d:0a:de:6b:2b: 8b:2a:f9:f0:4d:6c:88:6e:9b:e8:3a:7f:bf:ed:61:05:fb:c6: 3f:39:ea:09:e8:f7:d3:ce:86:3b:e4:26:dc:4e:11:80:9c:8e: 3a:9a:7f:b2:81:dc:1c:79:d4:32:9e:b8:3a:6c:83:cc:f4:d9: c6:ee:90:9f:bd:d1:0b:e3:4a:6b:84:9e:20:b2:4c:3b:6c:e8: bf:b8:af:45:34:1c:34:30:a9:fd:4e:15:af:fc:49:69:07:8f: a0:eb:54:ea:e6:31:6f:8e:13:8f:98:6d:00:a9:08:35:ae:48: c9:b2:61:ad:fa:e7:95:34:54:5e:4e:8e:d3:45:88:61:09:67: 27:6e:74:81:55:1d:a4:a4:28:3b:60:ad:26:d9:6f:ae:cb:3d: 7c:18:9a:b1:48:7c:61:30:a0:fd:f7:d9:aa:59:9e:1b:ab:51: 28:89:37:23:4c:bd:43:d3:d2:76:28:3d:a5:b7:97:34:ad:9f: 27:8c:58:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQN67WXzPDhFfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk Yjg1OGVmOWEtNzA3Ni00NzMxLTkzZGEtMDEyY2IxMjI2YWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CT+FUB10MXqEVI+OfodgMzw2aIPf1mh8xEv uTCEyrxkFR2EkTBcIveEgehJW6F6kdRajVYMG6OaLonH0FI+xuIxsUesTJY7Cvz6 zKGxNh+r9HXckwXmpY78yCl1ZsC8WpxWkErFWf/dDMby3L3fu5eF9Kok2BTieYX0 CYi60iUiL9quIXa63DHJbsAgarGPvKSGbmraL5XxM6qZWzNwyrnPgMWXfMbF/t/J Mh3Dt1LlN+MO7884H6bgEIK++oRe9bVY1tE1N5KuuJd2iKAvgbnGPwxX5KXbg9Mi TYvyNrKCLdXP6P7zgKKPPjrHzIhZidDc1Msz9P8/LTG9MJHICQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvk5cdh54xBzWQ0koINRcR4t4qjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmNiYWVkOGQtM2VmOC0z M2E5LThlZGUtNGNiMDNjNWQ4ODI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQiBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACt1MGUzXNqkPwYWfXeuwy0n8oa0ZVeuWx1iLJtTGeqGQL1Q1gpA4B6c 7DSQfpRSYmCkenhNmeMYDPbaYL8G/4stHR19Ct5rK4sq+fBNbIhum+g6f7/tYQX7 xj856gno99POhjvkJtxOEYCcjjqaf7KB3Bx51DKeuDpsg8z02cbukJ+90QvjSmuE niCyTDts6L+4r0U0HDQwqf1OFa/8SWkHj6DrVOrmMW+OE4+YbQCpCDWuSMmyYa36 55U0VF5OjtNFiGEJZydudIFVHaSkKDtgrSbZb67LPXwYmrFIfGEwoP332apZnhur USiJNyNMvUPT0nYoPaW3lzStnyeMWPE= -----END CERTIFICATE-----Generated at Fri Oct 10 20:00:40 2025 by rpki-client