$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c674bb1b-578e-3e76-8f24-7cc5d6cf8e1e.roa File: c674bb1b-578e-3e76-8f24-7cc5d6cf8e1e.roa (raw, json) Hash identifier: zgi8zdxkhH92MYoB1PYWc04bQ54MftIwoibt+d5VQkc= Subject key identifier: 69:89:11:88:69:64:CE:A5:BF:52:9F:70:32:6B:E2:3E:54:4B:B2:24 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CD1CCAC214280CF7FE8C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c674bb1b-578e-3e76-8f24-7cc5d6cf8e1e.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 27338 IP address blocks: 66.0.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:d1:cc:ac:21:42:80:cf:7f:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=b07af4c8-d857-4c73-a50d-6f9289ba700b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:03:3d:65:56:1f:9c:a5:73:6a:b6:34:52:e0: 49:31:bc:a9:df:8c:ba:ae:2d:f6:05:1e:91:f7:45: 4d:59:37:a4:18:d5:54:8c:34:c9:1a:07:1e:9f:00: 08:b5:78:8a:a7:bc:ea:c0:16:75:56:a8:01:d3:85: 2f:48:12:52:d7:bb:e6:a6:42:b4:3d:fc:f2:82:58: aa:03:17:8a:83:55:72:69:24:99:fb:0b:76:3d:60: bf:49:3b:b7:d1:1b:97:4b:85:01:72:de:67:b0:51: f0:84:e1:1a:d1:26:8b:7e:07:5e:50:e9:58:e8:1f: f7:45:1b:07:4d:e4:e2:4b:fc:3b:55:07:b7:7c:95: c1:cf:31:7b:18:66:c2:26:56:d6:a3:6d:4b:f1:33: 89:2e:2c:16:63:a4:13:12:65:9a:e3:cd:5e:f8:50: 5b:c3:9d:de:b5:29:01:25:32:01:66:28:bc:5b:8a: 27:b4:e8:a3:9f:2b:95:82:a8:f4:63:90:53:2f:6d: 4a:42:3e:58:58:d9:81:d9:a5:52:34:dc:03:53:82: 1e:e2:ac:a6:a1:bb:3a:1e:3a:80:64:94:e6:9f:be: 30:13:9e:5a:eb:20:66:a2:52:d0:87:dd:68:5e:5b: aa:a2:41:4b:1d:a3:ee:8f:e7:1d:9b:9f:69:16:74: e0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:89:11:88:69:64:CE:A5:BF:52:9F:70:32:6B:E2:3E:54:4B:B2:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c674bb1b-578e-3e76-8f24-7cc5d6cf8e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.0.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:9d:0b:90:1a:53:8f:58:60:a8:90:9e:28:fa:b7:be:9b:17: d0:a5:27:15:d9:0a:36:65:ab:12:f8:1d:76:7e:de:14:d3:35: 7c:8b:66:e5:a7:a6:b7:0e:5c:5a:64:6a:5b:90:f9:c1:4a:7f: b7:76:89:03:82:3c:c6:5f:d2:aa:b1:89:d3:6d:5e:bf:c3:47: 0b:7b:28:a1:e0:54:05:b9:0a:5f:ae:93:cb:2d:df:29:45:ba: 8e:28:44:0e:6a:2f:af:d4:23:5c:dd:c6:5e:90:a0:a3:6c:8b: 3d:ae:4b:d4:03:b0:c3:e9:d3:34:a0:a3:04:3b:08:25:f7:b0: 02:fb:be:5f:69:7f:e8:7d:81:87:ba:76:7d:d9:cb:6b:06:31: 79:24:aa:71:bf:8b:be:75:e9:3b:05:9e:93:50:0b:13:70:93: 07:0f:bf:44:20:d8:0c:e0:1f:0f:df:99:36:27:14:98:73:f2: c7:a9:9d:4f:bf:98:07:e1:33:ae:6f:3d:75:20:2c:6c:ea:42: 63:54:8a:ea:e4:f9:da:80:89:00:35:88:42:d0:cc:fd:6d:97: cd:2a:3d:e1:0d:dd:a3:69:54:3b:27:b6:cc:69:32:7e:cd:c2: b4:98:ae:1e:df:1e:56:ce:e3:4c:60:67:0e:1d:e6:be:7e:80: b2:dc:52:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXNHMrCFCgM9/6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YjA3YWY0YzgtZDg1Ny00YzczLWE1MGQtNmY5Mjg5YmE3MDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwM9ZVYfnKVzarY0UuBJMbyp34y6ri32BR6R 90VNWTekGNVUjDTJGgcenwAItXiKp7zqwBZ1VqgB04UvSBJS17vmpkK0Pfzygliq AxeKg1VyaSSZ+wt2PWC/STu30RuXS4UBct5nsFHwhOEa0SaLfgdeUOlY6B/3RRsH TeTiS/w7VQe3fJXBzzF7GGbCJlbWo21L8TOJLiwWY6QTEmWa481e+FBbw53etSkB JTIBZii8W4ontOijnyuVgqj0Y5BTL21KQj5YWNmB2aVSNNwDU4Ie4qymobs6HjqA ZJTmn74wE55a6yBmolLQh91oXluqokFLHaPuj+cdm59pFnTgYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmJEYhpZM6lv1KfcDJr4j5US7IkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzY3NGJiMWItNTc4ZS0z ZTc2LThmMjQtN2NjNWQ2Y2Y4ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQgAvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKdC5AaU49YYKiQnij6t76bF9ClJxXZCjZlqxL4HXZ+3hTTNXyLZuWn prcOXFpkaluQ+cFKf7d2iQOCPMZf0qqxidNtXr/DRwt7KKHgVAW5Cl+uk8st3ylF uo4oRA5qL6/UI1zdxl6QoKNsiz2uS9QDsMPp0zSgowQ7CCX3sAL7vl9pf+h9gYe6 dn3Zy2sGMXkkqnG/i7516TsFnpNQCxNwkwcPv0Qg2AzgHw/fmTYnFJhz8sepnU+/ mAfhM65vPXUgLGzqQmNUiurk+dqAiQA1iELQzP1tl80qPeEN3aNpVDsntsxpMn7N wrSYrh7fHlbO40xgZw4d5r5+gLLcUk4= -----END CERTIFICATE-----Generated at Fri Oct 10 20:06:53 2025 by rpki-client