$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c406f707-442e-31b7-a3ad-0e158a7f1148.roa File: c406f707-442e-31b7-a3ad-0e158a7f1148.roa (raw, json) Hash identifier: 4rfYoirD69qdTuNwzpIWN0HSsV9IxEhrHqJGkcMZ+I4= Subject key identifier: 2F:01:CF:E5:E3:5E:B2:86:37:63:7D:68:5A:D6:89:EF:A1:39:96:81 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CD1DBD52F42A8226AA460 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c406f707-442e-31b7-a3ad-0e158a7f1148.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 27338 IP address blocks: 66.0.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:d1:db:d5:2f:42:a8:22:6a:a4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=1594f2a0-5da5-4d22-a430-65bfe68b4a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bb:67:df:09:92:74:2b:93:0d:a5:ed:27:de: 3b:ae:77:b7:47:b6:de:58:05:f5:89:79:54:ab:4c: 33:6e:75:6f:a0:1c:8b:61:4c:cf:c5:e0:95:6a:5a: ae:26:f4:79:3e:5a:e0:0a:86:ea:37:99:45:0e:88: 1b:43:02:13:66:a4:7e:72:75:b0:76:e6:1e:c7:1e: f6:ea:68:e2:31:b1:97:0f:1d:8e:d6:02:3c:2f:64: a6:3d:25:68:eb:af:68:a2:6e:d8:19:56:6f:8f:0d: 33:8f:0d:67:6c:d1:f7:24:9c:c4:fe:f8:e2:b7:7c: 3c:e1:8e:f5:ed:97:04:60:3f:b1:3b:5a:e8:3c:42: 03:6f:72:d7:3e:0a:95:50:29:c5:4c:c4:ee:1b:53: 13:ab:73:b2:b3:82:d0:bc:0d:ee:51:3c:6f:6d:9d: ab:0f:3c:48:50:3d:52:84:3b:af:34:72:8f:01:76: a4:9b:b8:25:2b:fb:be:21:9a:b4:50:1f:8d:74:83: cb:ce:9a:01:da:b1:c3:e4:75:d4:a8:b5:7e:d0:af: a9:27:6f:cb:41:d1:fb:6d:20:2f:1e:3e:a8:df:a0: e1:36:71:cf:ad:57:3a:92:7d:7b:77:ff:35:c7:8a: c2:2e:88:76:1f:40:a9:f6:91:0a:79:83:d2:21:c8: ef:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:01:CF:E5:E3:5E:B2:86:37:63:7D:68:5A:D6:89:EF:A1:39:96:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c406f707-442e-31b7-a3ad-0e158a7f1148.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.0.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:60:65:79:ac:23:d2:08:b1:1a:f9:a2:8b:91:97:34:29:8c: 6f:5c:f5:21:d3:eb:58:66:1d:d9:4c:1f:64:4e:85:d9:3b:06: ad:49:f1:cd:52:18:48:eb:06:9a:3e:4a:f7:7d:f2:ae:14:38: 5c:18:aa:2e:a3:fb:80:5b:e7:68:ad:de:3d:ef:ca:a2:57:32: ca:45:70:c6:ef:e1:d1:29:51:7e:d5:d4:97:e5:12:4c:38:80: 9a:dd:e7:38:ca:4f:5d:c1:76:58:14:95:69:7a:4e:75:a6:66: 73:aa:8d:7c:f3:30:76:56:fc:80:71:c6:0c:ee:97:7c:66:a0: 09:34:3a:36:a8:0e:0f:9a:09:a8:24:40:20:c3:1d:2d:7e:b7: db:37:0d:ea:1e:49:da:48:2d:0b:b2:2f:16:d8:4f:09:f8:82: 0f:6e:68:44:04:56:95:96:55:3d:9f:79:a3:fb:04:4e:b5:c0: 76:18:ed:a9:c9:34:70:51:48:20:a6:59:59:af:f2:c0:76:0f: 77:af:60:3e:cc:ff:df:50:61:fb:04:4a:04:bf:9f:50:83:13: 33:39:e6:4c:a1:63:2c:27:00:66:22:91:e8:a7:0d:6e:45:23: 38:fe:bc:bf:ba:e2:ff:d7:e8:47:fd:11:82:bb:40:f3:b1:8e: 9a:67:88:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXNHb1S9CqCJqpGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MTU5NGYyYTAtNWRhNS00ZDIyLWE0MzAtNjViZmU2OGI0YTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLtn3wmSdCuTDaXtJ947rne3R7beWAX1iXlU q0wzbnVvoByLYUzPxeCValquJvR5PlrgCobqN5lFDogbQwITZqR+cnWwduYexx72 6mjiMbGXDx2O1gI8L2SmPSVo669oom7YGVZvjw0zjw1nbNH3JJzE/vjit3w84Y71 7ZcEYD+xO1roPEIDb3LXPgqVUCnFTMTuG1MTq3Oys4LQvA3uUTxvbZ2rDzxIUD1S hDuvNHKPAXakm7glK/u+IZq0UB+NdIPLzpoB2rHD5HXUqLV+0K+pJ2/LQdH7bSAv Hj6o36DhNnHPrVc6kn17d/81x4rCLoh2H0Cp9pEKeYPSIcjvrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8Bz+XjXrKGN2N9aFrWie+hOZaBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzQwNmY3MDctNDQyZS0z MWI3LWEzYWQtMGUxNThhN2YxMTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQgBGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRgZXmsI9IIsRr5oouRlzQpjG9c9SHT61hmHdlMH2ROhdk7Bq1J8c1S GEjrBpo+Svd98q4UOFwYqi6j+4Bb52it3j3vyqJXMspFcMbv4dEpUX7V1JflEkw4 gJrd5zjKT13BdlgUlWl6TnWmZnOqjXzzMHZW/IBxxgzul3xmoAk0OjaoDg+aCagk QCDDHS1+t9s3DeoeSdpILQuyLxbYTwn4gg9uaEQEVpWWVT2feaP7BE61wHYY7anJ NHBRSCCmWVmv8sB2D3evYD7M/99QYfsESgS/n1CDEzM55kyhYywnAGYikeinDW5F Izj+vL+64v/X6Ef9EYK7QPOxjppniH0= -----END CERTIFICATE-----Generated at Fri Oct 10 17:49:26 2025 by rpki-client