$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/771691b3-85e2-3225-acad-f9e30b8a0d7d.roa File: 771691b3-85e2-3225-acad-f9e30b8a0d7d.roa (raw, json) Hash identifier: 5fOXnMVfIGPEB0czkkZuiCqTwGZQYlqF46wwzfbWYN0= Subject key identifier: FA:DD:0D:BE:13:18:CD:2E:41:61:6E:5B:E1:0A:C0:A7:6A:1D:5C:F6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CD6B90D3441F924FF1980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/771691b3-85e2-3225-acad-f9e30b8a0d7d.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 69.66.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:d6:b9:0d:34:41:f9:24:ff:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=651904b4-8fb4-40af-9dd5-82ebc66b11c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8e:22:57:e5:43:b7:0a:72:27:7c:78:1e:7f: 13:d6:36:f1:e0:73:54:1b:f7:c8:b4:7e:e0:d0:ca: d4:a1:93:9e:0c:dc:56:c7:4e:6e:8f:cb:16:94:e8: 02:ea:59:92:84:5f:33:3f:ca:16:c7:df:40:ef:12: 87:83:56:ee:5c:21:38:1e:75:47:51:5e:19:56:25: 2b:ce:f4:77:e7:55:d2:6c:c3:c4:62:f7:a0:04:4e: 4e:65:0d:55:3d:ad:75:de:d6:fd:3a:4f:a9:ba:f7: 14:06:11:6d:58:14:0e:f2:f6:90:6d:c4:81:67:01: 84:f0:e3:02:03:d7:f1:bb:87:45:d2:e5:7e:10:f5: 6b:86:22:4c:fa:0c:8e:04:f8:48:bb:9a:98:93:28: f4:75:0d:e8:8a:55:47:c0:a7:b5:61:91:d2:02:da: e8:77:47:9c:58:63:04:ac:31:5e:85:d8:4f:49:88: b6:f2:03:bf:79:b8:b9:b8:d8:8f:d6:5d:a2:25:5a: 87:ba:f7:52:3c:ea:88:64:d2:fe:8a:36:76:f0:6f: 48:25:39:5a:86:3e:3c:d2:57:cf:bb:0b:8e:73:c0: 5f:65:d2:83:61:1d:23:58:89:89:53:b8:65:38:b9: c0:ac:2f:e7:64:48:e1:a4:e2:d4:af:79:92:e5:9e: 2b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DD:0D:BE:13:18:CD:2E:41:61:6E:5B:E1:0A:C0:A7:6A:1D:5C:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/771691b3-85e2-3225-acad-f9e30b8a0d7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:d3:73:09:aa:68:9e:d4:96:02:5b:37:6f:ef:ea:89:46:04: 84:50:4d:3b:f5:22:d0:8f:80:16:19:c3:f9:6c:b2:92:27:e3: 57:c4:92:4f:b5:fe:03:fe:93:2f:39:77:c9:73:d2:a8:95:97: 80:86:75:8e:c8:66:8f:97:d2:f5:96:42:66:64:24:e7:82:89: 5e:fd:52:08:02:73:c9:e5:0d:52:75:99:93:a2:90:a4:fa:65: 2f:6d:c8:56:c4:f0:64:5b:27:4a:c5:ed:28:10:e0:0f:c4:62: 74:6e:fd:c8:07:65:63:df:50:df:90:5e:1e:4a:ce:3e:4d:4d: c8:1c:83:f6:50:a5:da:3c:41:38:3a:db:82:3e:f9:ab:b3:14: 04:07:4f:0e:cd:83:4a:3a:7d:5a:e6:e7:c4:90:d2:65:4b:66: 26:9b:a5:95:f8:3d:e6:bc:4d:7d:49:24:4f:6b:d7:58:3a:35: 46:fd:14:0f:8e:0f:25:cc:79:7a:73:bf:19:aa:53:6a:07:15: 18:18:ee:11:3d:1d:7e:51:d0:d4:6a:b2:23:6b:cf:5a:fe:24: bb:67:70:13:2a:11:0e:18:9d:54:95:07:6f:01:4e:32:5f:7e: c0:a7:97:a3:59:bf:d7:d8:c0:2e:8e:c5:66:7f:74:f2:d6:7a: c5:9a:c7:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXNa5DTRB+ST/GYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NjUxOTA0YjQtOGZiNC00MGFmLTlkZDUtODJlYmM2NmIxMWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI4iV+VDtwpyJ3x4Hn8T1jbx4HNUG/fItH7g 0MrUoZOeDNxWx05uj8sWlOgC6lmShF8zP8oWx99A7xKHg1buXCE4HnVHUV4ZViUr zvR351XSbMPEYvegBE5OZQ1VPa113tb9Ok+puvcUBhFtWBQO8vaQbcSBZwGE8OMC A9fxu4dF0uV+EPVrhiJM+gyOBPhIu5qYkyj0dQ3oilVHwKe1YZHSAtrod0ecWGME rDFehdhPSYi28gO/ebi5uNiP1l2iJVqHuvdSPOqIZNL+ijZ28G9IJTlahj480lfP uwuOc8BfZdKDYR0jWImJU7hlOLnArC/nZEjhpOLUr3mS5Z4rmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrdDb4TGM0uQWFuW+EKwKdqHVz2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzcxNjkxYjMtODVlMi0z MjI1LWFjYWQtZjllMzBiOGEwZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRUISMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3TcwmqaJ7UlgJbN2/v6olGBIRQTTv1ItCPgBYZw/lsspIn41fEkk+1 /gP+ky85d8lz0qiVl4CGdY7IZo+X0vWWQmZkJOeCiV79UggCc8nlDVJ1mZOikKT6 ZS9tyFbE8GRbJ0rF7SgQ4A/EYnRu/cgHZWPfUN+QXh5Kzj5NTcgcg/ZQpdo8QTg6 24I++auzFAQHTw7Ng0o6fVrm58SQ0mVLZiabpZX4Pea8TX1JJE9r11g6NUb9FA+O DyXMeXpzvxmqU2oHFRgY7hE9HX5R0NRqsiNrz1r+JLtncBMqEQ4YnVSVB28BTjJf fsCnl6NZv9fYwC6OxWZ/dPLWesWax+Q= -----END CERTIFICATE-----Generated at Fri Oct 10 22:04:40 2025 by rpki-client