$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a17f0a1-0ade-3e21-a559-98f1db6d2de7.roa File: 8a17f0a1-0ade-3e21-a559-98f1db6d2de7.roa (raw, json) Hash identifier: pnAFjb6iUqpMGuUQQtNLdJaCIavHcwV9vh2FLZHcK64= Subject key identifier: 69:5D:0E:EA:16:39:F3:1E:37:81:B1:36:96:FB:68:85:76:3C:E3:8F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CD2EC82FB87106F6CC000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a17f0a1-0ade-3e21-a559-98f1db6d2de7.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 29877 IP address blocks: 66.55.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:d2:ec:82:fb:87:10:6f:6c:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=3b68779f-2912-417f-a606-f277c96c6888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0a:dc:43:10:be:34:cb:3f:88:6d:84:22:ab: b3:cc:05:08:ad:18:97:b0:e4:3d:06:00:4a:af:44: 8c:67:90:2e:0e:30:8f:82:f3:64:67:15:29:6d:8d: 19:44:5f:a7:9a:42:38:47:e6:59:52:21:6f:59:24: f0:d0:16:69:f6:c5:b2:c8:e8:63:36:e6:38:07:bf: ad:1a:3a:e7:19:aa:a2:9e:10:67:48:9f:80:c5:89: 1d:ab:58:f2:14:22:8f:87:8c:ac:b9:d3:27:ad:20: 9b:22:5e:4c:c9:da:ac:80:6d:d6:5f:aa:64:b7:11: 88:79:84:7e:e5:8a:f0:9c:d1:cc:11:9e:92:60:df: 30:91:16:b0:28:9b:66:19:0e:c9:10:94:a8:a5:e9: 4c:b8:de:24:49:3c:f7:2e:12:86:ef:95:68:d1:15: 7c:3b:9b:fe:6b:a4:f1:32:6d:25:85:2e:ab:3f:da: 8c:9a:b8:23:3d:8d:61:9f:3c:bd:07:f9:77:d8:f7: 0f:52:35:19:d0:b7:de:0f:fd:0d:64:ec:9d:2d:74: b8:40:b1:4d:2a:9a:dc:71:b6:ce:53:63:97:a9:d0: 97:75:b4:5d:e1:cf:ee:5e:a6:ae:d3:1f:41:a2:26: ae:9e:bc:63:95:e5:eb:ef:27:4a:4c:23:c9:4f:3e: d3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:5D:0E:EA:16:39:F3:1E:37:81:B1:36:96:FB:68:85:76:3C:E3:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a17f0a1-0ade-3e21-a559-98f1db6d2de7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.55.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:33:e2:3b:e4:6e:68:c9:c1:85:cb:11:5c:99:30:85:a2:e4: f6:53:3a:3d:13:56:e7:95:27:4a:cc:f5:44:c2:e2:25:96:f4: 82:cf:8f:a5:c6:27:a0:df:81:ba:5f:34:b9:32:6f:ca:63:00: cb:18:cc:ed:f9:65:6c:38:9d:75:bf:37:e2:2a:b8:7a:08:3d: 56:f2:f3:fe:cd:67:9f:3d:22:2b:40:7f:0e:4a:4d:fe:81:69: 3e:26:27:61:33:64:d6:3b:ef:24:15:47:10:9c:61:ed:4b:d2: ea:35:bb:35:1d:f8:c6:96:bd:34:bc:2e:2c:27:c6:68:64:90: 3e:77:6f:01:c2:16:19:9a:f5:56:70:d8:4f:9e:10:9f:97:ed: 0a:60:b8:23:58:d9:d3:6c:40:e9:d8:9d:8a:4b:ea:78:c4:58: 07:75:4b:82:14:be:8e:3f:f2:af:a0:45:e8:8c:d8:f3:66:9f: 8d:d2:06:71:1f:e0:c1:23:9e:67:3a:31:e2:da:0c:cb:e4:f8: 59:92:62:d8:71:fb:d3:ff:b5:a2:1e:06:0e:b7:8a:96:c3:89: a1:7c:92:37:a5:7b:ac:36:02:bb:e4:65:e6:41:b4:44:6a:96: 04:f3:30:c1:83:c9:61:99:56:20:bc:c5:43:95:e7:73:14:48: 26:60:42:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXNLsgvuHEG9swAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk M2I2ODc3OWYtMjkxMi00MTdmLWE2MDYtZjI3N2M5NmM2ODg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwrcQxC+NMs/iG2EIquzzAUIrRiXsOQ9BgBK r0SMZ5AuDjCPgvNkZxUpbY0ZRF+nmkI4R+ZZUiFvWSTw0BZp9sWyyOhjNuY4B7+t GjrnGaqinhBnSJ+AxYkdq1jyFCKPh4ysudMnrSCbIl5MydqsgG3WX6pktxGIeYR+ 5YrwnNHMEZ6SYN8wkRawKJtmGQ7JEJSopelMuN4kSTz3LhKG75Vo0RV8O5v+a6Tx Mm0lhS6rP9qMmrgjPY1hnzy9B/l32PcPUjUZ0LfeD/0NZOydLXS4QLFNKprccbbO U2OXqdCXdbRd4c/uXqau0x9BoiaunrxjleXr7ydKTCPJTz7T+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGldDuoWOfMeN4GxNpb7aIV2POOPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGExN2YwYTEtMGFkZS0z ZTIxLWE1NTktOThmMWRiNmQyZGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQjewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoz4jvkbmjJwYXLEVyZMIWi5PZTOj0TVueVJ0rM9UTC4iWW9ILPj6XG J6DfgbpfNLkyb8pjAMsYzO35ZWw4nXW/N+IquHoIPVby8/7NZ589IitAfw5KTf6B aT4mJ2EzZNY77yQVRxCcYe1L0uo1uzUd+MaWvTS8LiwnxmhkkD53bwHCFhma9VZw 2E+eEJ+X7QpguCNY2dNsQOnYnYpL6njEWAd1S4IUvo4/8q+gReiM2PNmn43SBnEf 4MEjnmc6MeLaDMvk+FmSYthx+9P/taIeBg63ipbDiaF8kjele6w2ArvkZeZBtERq lgTzMMGDyWGZViC8xUOV53MUSCZgQqE= -----END CERTIFICATE-----Generated at Fri Oct 10 17:57:14 2025 by rpki-client