$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b549e38e-1ece-37cd-a587-61bc424c8155.roa File: b549e38e-1ece-37cd-a587-61bc424c8155.roa (raw, json) Hash identifier: +FjsKTVG65lhBHsqpT1R0TurFvQi6cnUM/uTeI3IwvM= Subject key identifier: EA:4A:BC:5A:9B:81:9A:48:5B:0A:B3:18:B1:40:07:F2:AD:C2:6E:E7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CD02322ACBAC2EA8B9880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b549e38e-1ece-37cd-a587-61bc424c8155.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 10843 IP address blocks: 97.66.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:d0:23:22:ac:ba:c2:ea:8b:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=82d624e2-37c0-40ab-8a09-b62411450610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:12:6e:76:07:4d:9b:93:fc:d4:b6:c7:4c:cd: 34:97:d2:28:6c:9f:b0:bc:3e:41:47:19:5d:3c:06: 0e:86:f5:69:49:9a:e2:1b:62:a8:62:fc:49:70:ef: 2c:17:b3:72:ed:e6:eb:d8:13:8c:16:95:c0:5d:45: 8e:e1:ce:f2:6b:1b:7c:17:1c:42:1a:15:0c:a7:38: 9b:e5:b5:c3:a7:74:32:d4:86:9f:03:db:ce:62:b2: bf:da:9c:cb:b5:1b:1d:ac:64:c9:32:5c:f3:4f:66: 32:f5:42:3b:81:ba:f1:c4:1d:ca:62:85:5f:4d:c8: 1f:34:fb:eb:d5:38:be:9e:3c:43:58:f7:7f:72:04: b9:e8:70:7f:c2:31:cf:68:d4:a6:2a:94:21:b6:74: c7:33:97:62:d0:ca:7f:cf:9b:5a:26:43:b5:18:fa: 0c:d5:32:97:4e:73:2e:70:ca:91:e5:fd:08:19:ca: ea:c4:76:96:5f:f1:f4:72:5d:c8:db:6d:da:ab:ee: e6:7b:f1:09:62:05:1b:cf:96:02:ce:13:f4:89:a3: 5c:7a:25:db:5a:66:78:de:a8:52:59:d0:3e:cd:76: 6b:72:ea:95:6d:09:26:13:25:ef:cd:3b:40:6c:af: 2d:33:57:63:90:b3:9a:8f:1a:9a:80:d8:39:73:bd: 8e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4A:BC:5A:9B:81:9A:48:5B:0A:B3:18:B1:40:07:F2:AD:C2:6E:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b549e38e-1ece-37cd-a587-61bc424c8155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 97.66.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:e3:8c:73:35:c6:d1:c7:53:34:23:29:6a:05:35:b5:82:2f: b6:01:56:2e:33:67:ac:19:99:d4:7c:7e:0f:16:a3:0b:bf:d8: 46:03:74:91:af:82:2b:36:71:e5:de:2c:ec:6d:4c:e2:f8:f9: 4f:d1:af:60:64:66:a3:b0:89:32:ff:70:96:8c:05:5a:0d:b1: ca:d6:58:1b:ba:21:ed:ed:6a:07:c2:69:66:91:00:3c:85:d5: ae:41:1c:d4:4f:c7:50:ed:2a:f2:f0:7c:41:19:40:3f:d0:ad: bb:09:8e:c1:37:56:90:c1:c2:18:96:62:18:10:c2:df:35:f3: 8a:3a:91:a2:a5:6a:62:74:16:39:ba:65:93:a5:d8:da:1d:b5: 13:76:44:8f:cf:93:0d:29:b9:68:c2:7e:ae:e2:75:cf:ba:af: 30:e7:94:d0:db:81:96:31:68:97:3b:26:61:7f:37:bc:af:e6: 80:9a:91:5f:f2:d2:3c:23:f4:b9:5b:ba:30:c0:96:4f:f3:bc: 1c:6c:21:da:26:e8:c1:8d:18:1e:ef:b2:39:83:f8:75:3c:ba: 27:05:e8:19:8e:e8:af:15:fe:1f:f3:d8:f0:01:15:4e:7e:3d: 0a:af:09:35:62:45:35:5d:95:1f:1d:2b:dd:ae:cc:2a:6c:18: 08:bd:aa:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXNAjIqy6wuqLmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ODJkNjI0ZTItMzdjMC00MGFiLThhMDktYjYyNDExNDUwNjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRJudgdNm5P81LbHTM00l9IobJ+wvD5BRxld PAYOhvVpSZriG2KoYvxJcO8sF7Ny7ebr2BOMFpXAXUWO4c7yaxt8FxxCGhUMpzib 5bXDp3Qy1IafA9vOYrK/2pzLtRsdrGTJMlzzT2Yy9UI7gbrxxB3KYoVfTcgfNPvr 1Ti+njxDWPd/cgS56HB/wjHPaNSmKpQhtnTHM5di0Mp/z5taJkO1GPoM1TKXTnMu cMqR5f0IGcrqxHaWX/H0cl3I223aq+7me/EJYgUbz5YCzhP0iaNceiXbWmZ43qhS WdA+zXZrcuqVbQkmEyXvzTtAbK8tM1djkLOajxqagNg5c72ORwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpKvFqbgZpIWwqzGLFAB/Ktwm7nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjU0OWUzOGUtMWVjZS0z N2NkLWE1ODctNjFiYzQyNGM4MTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYULGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3jjHM1xtHHUzQjKWoFNbWCL7YBVi4zZ6wZmdR8fg8Wowu/2EYDdJGv gis2ceXeLOxtTOL4+U/Rr2BkZqOwiTL/cJaMBVoNscrWWBu6Ie3tagfCaWaRADyF 1a5BHNRPx1DtKvLwfEEZQD/QrbsJjsE3VpDBwhiWYhgQwt8184o6kaKlamJ0Fjm6 ZZOl2NodtRN2RI/Pkw0puWjCfq7idc+6rzDnlNDbgZYxaJc7JmF/N7yv5oCakV/y 0jwj9LlbujDAlk/zvBxsIdom6MGNGB7vsjmD+HU8uicF6BmO6K8V/h/z2PABFU5+ PQqvCTViRTVdlR8dK92uzCpsGAi9qog= -----END CERTIFICATE-----Generated at Sat Oct 11 00:05:38 2025 by rpki-client