$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75a6223c-2cf8-30cc-bc58-4e6a0be4b1c8.roa File: 75a6223c-2cf8-30cc-bc58-4e6a0be4b1c8.roa (raw, json) Hash identifier: SchQ8CBFyQPKVzOwO+2h2sBQKd4fblj5j4mGtSsRjBs= Subject key identifier: 15:00:E2:EB:ED:A0:7A:C2:6C:FE:FB:61:8B:0A:F7:9F:D5:49:A5:FD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC47006F69137C6517480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75a6223c-2cf8-30cc-bc58-4e6a0be4b1c8.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 97.66.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c4:70:06:f6:91:37:c6:51:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=c9ff66ed-f022-4281-88f6-69646d8b4fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2d:57:25:6a:13:f1:f2:2e:83:13:1e:5a:65: 32:50:41:3c:6c:aa:5f:ea:ad:c1:ff:1c:76:f4:20: 8d:2a:00:50:19:89:67:9c:ed:3c:e5:6b:86:74:98: 14:73:52:9c:dc:e2:60:b5:ec:65:02:13:e6:52:9f: fe:63:58:ef:65:3a:fc:e9:3d:61:5c:28:29:b5:01: af:13:f8:88:d1:ba:2a:ba:e9:20:20:38:ce:31:1f: 3d:57:50:ae:17:e4:0e:6a:b2:44:c8:d9:91:5e:b1: 79:b7:d2:f8:a9:a6:85:52:dd:dd:4d:c5:33:5d:81: 04:68:4f:63:eb:01:29:2f:db:4c:b6:19:9b:9e:f9: 1e:29:df:e9:71:d9:86:16:ed:51:f3:df:86:09:8f: 7c:c8:a5:70:46:21:21:ec:ec:72:95:51:cc:24:db: c3:96:ad:9c:96:e9:e1:bc:e6:3c:3d:18:7f:92:9e: 65:2d:6c:e0:99:ae:74:dc:d5:7b:53:17:7b:42:55: 4b:12:4e:df:07:a0:c6:58:29:d8:96:70:2f:c8:90: 57:d3:ea:16:13:e2:20:48:63:d0:32:5b:f9:84:39: b3:7a:0e:43:17:49:73:89:86:24:da:9d:2f:e1:1c: 2f:30:62:c0:25:85:d6:a8:25:66:81:a3:84:aa:9c: d8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:00:E2:EB:ED:A0:7A:C2:6C:FE:FB:61:8B:0A:F7:9F:D5:49:A5:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75a6223c-2cf8-30cc-bc58-4e6a0be4b1c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 97.66.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:07:bc:52:89:a7:36:66:9f:16:69:1c:bd:ad:02:c3:bc:b8: 91:25:65:11:66:d2:a4:d4:2f:63:43:0c:84:a9:b9:f6:76:7b: 51:70:86:8f:67:3a:6e:98:83:ee:b5:a0:a8:b9:b5:2b:69:7e: 61:27:e2:62:e2:c6:1c:95:be:95:d9:81:7f:31:2b:24:82:8d: 07:1c:a9:06:d6:c9:fc:56:20:e4:12:42:42:5e:2a:b1:1f:12: bb:58:ea:fd:b9:48:cc:a5:fd:92:2d:5c:ad:40:a0:de:a7:6e: de:40:bf:f0:93:fc:59:de:b4:76:d3:3e:27:6e:28:cc:c4:bf: 71:23:40:aa:82:8c:38:98:86:c2:f5:92:af:d1:7f:fa:89:f1: 9d:01:00:d8:e0:df:a0:44:75:b7:91:0d:e6:bd:c9:27:97:21: 84:37:88:ab:f4:07:b9:4a:da:a6:16:11:b1:92:91:4f:bb:23: 69:8c:02:5f:12:59:92:64:ec:f6:f1:f8:b1:51:c2:35:e4:c4: 54:71:9e:53:7f:52:31:90:57:9c:af:18:c9:71:3d:0a:0e:b6: 55:22:de:08:52:b8:47:79:26:81:b2:6b:45:dd:a3:34:b7:f0: 0d:22:c2:d9:66:8e:75:cc:91:c2:c0:98:76:3a:08:01:d6:24: ac:bb:73:8a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtxXMRwBvaRN8ZRdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YzlmZjY2ZWQtZjAyMi00MjgxLTg4ZjYtNjk2NDZkOGI0ZmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky1XJWoT8fIugxMeWmUyUEE8bKpf6q3B/xx2 9CCNKgBQGYlnnO085WuGdJgUc1Kc3OJgtexlAhPmUp/+Y1jvZTr86T1hXCgptQGv E/iI0boquukgIDjOMR89V1CuF+QOarJEyNmRXrF5t9L4qaaFUt3dTcUzXYEEaE9j 6wEpL9tMthmbnvkeKd/pcdmGFu1R89+GCY98yKVwRiEh7OxylVHMJNvDlq2clunh vOY8PRh/kp5lLWzgma503NV7Uxd7QlVLEk7fB6DGWCnYlnAvyJBX0+oWE+IgSGPQ Mlv5hDmzeg5DF0lziYYk2p0v4RwvMGLAJYXWqCVmgaOEqpzYKwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBUA4uvtoHrCbP77YYsK95/VSaX9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzVhNjIyM2MtMmNmOC0z MGNjLWJjNTgtNGU2YTBiZTRiMWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBYUIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAMge8UomnNmafFmkcva0Cw7y4kSVlEWbSpNQvY0MMhKm59nZ7UXCGj2c6 bpiD7rWgqLm1K2l+YSfiYuLGHJW+ldmBfzErJIKNBxypBtbJ/FYg5BJCQl4qsR8S u1jq/blIzKX9ki1crUCg3qdu3kC/8JP8Wd60dtM+J24ozMS/cSNAqoKMOJiGwvWS r9F/+onxnQEA2ODfoER1t5EN5r3JJ5chhDeIq/QHuUraphYRsZKRT7sjaYwCXxJZ kmTs9vH4sVHCNeTEVHGeU39SMZBXnK8YyXE9Cg62VSLeCFK4R3kmgbJrRd2jNLfw DSLC2WaOdcyRwsCYdjoIAdYkrLtzig== -----END CERTIFICATE-----Generated at Fri Oct 10 23:59:46 2025 by rpki-client