$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4b7878c-1ed5-3ae5-b43c-01573638dc2a.roa File: d4b7878c-1ed5-3ae5-b43c-01573638dc2a.roa (raw, json) Hash identifier: SuOz8ff8jldBCHoE7Hy61J56vJgJN36eJQjaEUQHElc= Subject key identifier: 13:03:69:25:23:1B:B4:43:EF:A9:B2:CB:47:4A:57:B7:31:51:96:B7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF371071740F5610DCBC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4b7878c-1ed5-3ae5-b43c-01573638dc2a.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 66.83.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f3:71:07:17:40:f5:61:0d:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=9b401f76-82fa-4925-bf28-4f1eaba2d40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:cf:1e:93:a1:55:98:8b:27:4f:8d:a0:82:ea: 09:83:d9:c4:a8:3b:9e:de:e6:08:33:90:bb:cf:e9: 36:dc:8f:6a:87:75:7c:5c:51:e6:38:5e:5b:9c:8c: 60:c6:ba:b5:8b:b4:a1:3f:f9:71:3c:ff:8c:b1:c7: 45:58:8f:57:af:88:5d:63:d2:48:1f:3d:da:a1:88: 5b:1b:30:7d:0e:c1:29:31:be:6c:04:37:85:3b:26: 5b:d6:9d:bd:87:77:36:4a:62:07:59:ac:65:12:31: 61:aa:8f:d2:47:2e:d9:1c:d6:60:d3:95:b3:11:21: 0f:c7:26:32:81:61:4e:03:c1:19:c4:9a:69:6c:ca: 38:e3:4e:ab:96:be:bf:a0:6e:4a:81:9d:c2:ac:d7: 08:f3:fe:63:d6:a9:7b:e3:7c:bb:4a:f2:2e:da:3a: f4:2c:fa:5b:37:b8:04:3c:89:9f:26:65:8b:83:51: 0b:3b:56:c7:33:91:06:ad:bf:0b:a3:71:3c:18:4e: 6d:ff:26:85:42:42:c0:88:08:05:63:3d:12:1a:6e: 72:2c:ea:c7:45:e5:99:db:78:18:ea:20:1d:49:e3: 1b:33:64:28:21:72:cf:10:09:f8:0a:f9:32:1c:c6: f6:88:a1:8a:2f:66:cd:61:ff:d4:32:6b:5c:52:4f: 4e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:03:69:25:23:1B:B4:43:EF:A9:B2:CB:47:4A:57:B7:31:51:96:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4b7878c-1ed5-3ae5-b43c-01573638dc2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.83.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:d1:ab:ae:e3:bf:f9:7d:16:27:cc:ff:b9:cd:ef:a5:dc:26: 8d:41:9a:93:f4:91:74:fe:7a:89:f9:a4:b2:e2:32:ae:81:e6: 25:1a:4e:fa:64:5e:0f:32:1d:13:15:a5:03:f4:80:52:1c:d1: 35:6e:b9:fd:f5:69:21:ce:bc:93:33:ec:e1:96:d3:aa:35:8d: d7:9d:63:e0:d1:7c:f5:2e:38:f6:d3:df:3b:32:5e:1b:cc:db: 37:66:78:45:fd:2f:f9:31:0d:59:af:28:e6:58:3a:dd:20:4a: 15:4f:9b:a0:a2:38:55:88:af:97:f2:9e:49:f5:2d:ae:63:0f: 74:f8:05:e9:77:f2:4a:e1:62:6d:b5:92:b0:ed:f8:a0:b0:64: 26:d0:a1:99:6f:2f:f2:10:bf:c5:d7:c1:92:b9:ed:1d:df:9e: 55:a5:db:25:15:0e:e2:90:45:55:c6:5d:e6:e3:4b:0e:d1:6c: d6:67:9e:5e:aa:e3:11:26:7e:c3:1a:dc:c7:11:f9:8a:ff:1d: 15:f0:54:07:8d:4e:9a:5a:b7:4b:15:74:b5:df:44:7a:a4:af: 6d:44:30:81:32:85:ad:68:36:d1:00:45:ed:ee:f2:60:2d:f8: d3:26:ce:be:ca:86:5d:9e:fc:aa:7b:1b:6a:f2:ab:49:b1:49: 85:00:fc:e4 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtxXPNxBxdA9WENy8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk OWI0MDFmNzYtODJmYS00OTI1LWJmMjgtNGYxZWFiYTJkNDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkM8ek6FVmIsnT42gguoJg9nEqDue3uYIM5C7 z+k23I9qh3V8XFHmOF5bnIxgxrq1i7ShP/lxPP+MscdFWI9Xr4hdY9JIHz3aoYhb GzB9DsEpMb5sBDeFOyZb1p29h3c2SmIHWaxlEjFhqo/SRy7ZHNZg05WzESEPxyYy gWFOA8EZxJppbMo4406rlr6/oG5KgZ3CrNcI8/5j1ql743y7SvIu2jr0LPpbN7gE PImfJmWLg1ELO1bHM5EGrb8Lo3E8GE5t/yaFQkLAiAgFYz0SGm5yLOrHReWZ23gY 6iAdSeMbM2QoIXLPEAn4CvkyHMb2iKGKL2bNYf/UMmtcUk9OTQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBMDaSUjG7RD76myy0dKV7cxUZa3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDRiNzg3OGMtMWVkNS0z YWU1LWI0M2MtMDE1NzM2MzhkYzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQlMwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAEdGrruO/+X0WJ8z/uc3vpdwmjUGak/SRdP56ifmksuIyroHmJRpO+mRe DzIdExWlA/SAUhzRNW65/fVpIc68kzPs4ZbTqjWN151j4NF89S449tPfOzJeG8zb N2Z4Rf0v+TENWa8o5lg63SBKFU+boKI4VYivl/KeSfUtrmMPdPgF6XfySuFibbWS sO34oLBkJtChmW8v8hC/xdfBkrntHd+eVaXbJRUO4pBFVcZd5uNLDtFs1meeXqrj ESZ+wxrcxxH5iv8dFfBUB41Omlq3SxV0td9EeqSvbUQwgTKFrWg20QBF7e7yYC34 0ybOvsqGXZ78qnsbavKrSbFJhQD85A== -----END CERTIFICATE-----Generated at Fri Oct 10 19:48:33 2025 by rpki-client