$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9234d777-a6e0-3a43-8681-3527a1ed83fa.roa File: 9234d777-a6e0-3a43-8681-3527a1ed83fa.roa (raw, json) Hash identifier: CUDthch6GXmdPbvtiOB5P3wst5CAowdZSbwm5AnGwO0= Subject key identifier: 52:4D:0E:91:76:3A:BE:8A:39:B3:02:6E:5A:5C:F7:C3:72:19:9A:85 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF4A4F4B3DC240BBCDE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9234d777-a6e0-3a43-8681-3527a1ed83fa.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 69.95.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f4:a4:f4:b3:dc:24:0b:bc:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=a2ca3c4a-6aae-4dd6-8074-eb4b0dc56422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b4:f8:4e:05:58:95:fb:ce:c5:a4:79:5b:97: a3:d6:7e:a6:19:0b:1f:b5:25:3c:1b:26:01:a4:1e: ea:e4:af:80:9a:7e:9d:61:b9:a7:df:d8:dd:3a:fe: 3b:55:65:bb:dd:38:94:5a:06:26:36:e6:a0:88:64: 5a:0b:03:ab:b8:63:10:09:55:9b:6f:28:1e:1f:c6: 8f:10:28:2f:aa:ff:71:63:3f:c6:7b:2f:d8:c0:bf: 99:86:89:6b:6e:c6:90:3b:b7:3e:51:40:92:0d:89: a1:32:65:2d:04:21:49:61:68:ae:a7:8a:5c:ba:e0: 9e:e4:84:78:18:eb:65:e8:3b:2e:d3:a7:7b:9a:2d: e5:51:6a:46:a8:ad:c6:02:f8:ca:c9:93:08:44:b6: 21:98:eb:34:b7:ea:44:0a:10:d2:7b:f9:e0:dd:0d: 52:d2:2c:b9:b6:49:80:3f:0b:7d:d1:e1:15:4f:5f: 61:36:26:8f:b9:47:d2:76:c8:82:b5:6b:2f:81:1e: e1:c2:68:8b:28:6a:4a:a0:01:3b:aa:bc:1e:eb:8a: 99:36:88:90:96:7b:c5:4c:05:c5:62:f5:99:85:4b: 4b:ab:f5:bf:30:74:00:9b:9a:9b:29:0c:0a:f5:24: 5b:a7:99:20:b5:e9:04:ce:f9:66:69:49:55:81:22: b0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4D:0E:91:76:3A:BE:8A:39:B3:02:6E:5A:5C:F7:C3:72:19:9A:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9234d777-a6e0-3a43-8681-3527a1ed83fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.95.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:7c:03:d6:bf:30:18:4f:2d:9c:76:d8:a2:da:35:50:87:a8: 61:2c:5d:5c:40:5b:60:0a:9c:bc:08:d9:7c:85:08:49:b7:1d: 51:1b:90:f5:c9:8e:00:34:74:1e:fe:48:2b:d6:03:84:25:45: f2:57:7f:a9:c9:0a:56:67:a3:f5:e5:f6:53:50:e3:64:06:fc: b9:b2:9c:09:dd:ee:93:39:5d:56:f1:bf:ae:76:e0:34:c0:88: 26:55:2b:fd:42:e7:bb:35:2c:ef:6c:40:a1:45:42:db:1f:d2: d5:70:7f:79:57:32:3e:34:0f:08:32:59:44:8d:29:64:43:00: 63:12:aa:74:36:b6:1b:2e:6f:d5:e4:78:04:5e:01:1f:76:bf: 46:4c:65:e1:19:71:f0:63:16:a2:d4:8e:77:21:02:96:96:3a: 77:40:dc:fe:a2:39:71:04:7f:17:ab:04:0b:8a:17:02:3e:98: 42:ed:3a:7e:9e:7a:c5:2c:bc:21:86:f0:b1:de:51:43:90:5d: 79:3f:21:b6:e4:4d:1b:f9:2b:c6:06:38:d2:06:2b:9a:61:fc: 19:b4:88:59:d9:dc:68:ff:86:a2:b8:72:d0:08:0d:1e:20:f9: fb:ba:bf:b8:24:6b:30:f2:90:e4:bd:bf:4f:26:bf:ff:25:74: dc:14:72:25 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtxXPSk9LPcJAu83oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YTJjYTNjNGEtNmFhZS00ZGQ2LTgwNzQtZWI0YjBkYzU2NDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rT4TgVYlfvOxaR5W5ej1n6mGQsftSU8GyYB pB7q5K+Amn6dYbmn39jdOv47VWW73TiUWgYmNuagiGRaCwOruGMQCVWbbygeH8aP ECgvqv9xYz/Gey/YwL+ZholrbsaQO7c+UUCSDYmhMmUtBCFJYWiup4pcuuCe5IR4 GOtl6Dsu06d7mi3lUWpGqK3GAvjKyZMIRLYhmOs0t+pEChDSe/ng3Q1S0iy5tkmA Pwt90eEVT19hNiaPuUfSdsiCtWsvgR7hwmiLKGpKoAE7qrwe64qZNoiQlnvFTAXF YvWZhUtLq/W/MHQAm5qbKQwK9SRbp5kgtekEzvlmaUlVgSKwBQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFJNDpF2Or6KObMCblpc98NyGZqFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTIzNGQ3NzctYTZlMC0z YTQzLTg2ODEtMzUyN2ExZWQ4M2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARV8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAcnwD1r8wGE8tnHbYoto1UIeoYSxdXEBbYAqcvAjZfIUISbcdURuQ9cmO ADR0Hv5IK9YDhCVF8ld/qckKVmej9eX2U1DjZAb8ubKcCd3ukzldVvG/rnbgNMCI JlUr/ULnuzUs72xAoUVC2x/S1XB/eVcyPjQPCDJZRI0pZEMAYxKqdDa2Gy5v1eR4 BF4BH3a/Rkxl4Rlx8GMWotSOdyEClpY6d0Dc/qI5cQR/F6sEC4oXAj6YQu06fp56 xSy8IYbwsd5RQ5BdeT8htuRNG/krxgY40gYrmmH8GbSIWdncaP+Gorhy0AgNHiD5 +7q/uCRrMPKQ5L2/Tya//yV03BRyJQ== -----END CERTIFICATE-----Generated at Fri Oct 10 17:55:37 2025 by rpki-client