$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e84585a5-4a69-301b-9de8-1242f9d90bed.roa File: e84585a5-4a69-301b-9de8-1242f9d90bed.roa (raw, json) Hash identifier: DzmvmlnSZQyqY11VH0m0aRd1QRL0rQLQsT6P+Hbk3HU= Subject key identifier: 19:02:8D:60:0B:0F:ED:A0:66:80:A3:22:91:2B:B4:0C:6F:6F:0C:CA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D02C6667715D6083B6600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e84585a5-4a69-301b-9de8-1242f9d90bed.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 21881 IP address blocks: 66.153.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:02:c6:66:77:15:d6:08:3b:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=c7500fb4-6eb9-4fcd-a4f9-572fa4faf7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ad:6e:fc:d3:b3:92:b1:39:10:da:2f:04:f5: 4a:32:d0:3f:58:94:e7:d0:a9:49:07:73:65:74:84: d8:8d:d8:dc:b9:c5:91:b8:d0:c5:3e:72:e4:0d:ad: 5c:14:74:d2:73:af:2b:ee:be:40:69:9b:54:58:d3: 31:e1:4e:dc:9c:e1:d1:5e:58:cd:25:c2:e4:53:66: 5d:f2:17:3a:d9:fa:eb:1b:94:8f:9b:38:93:d6:6a: 2b:ac:94:40:5c:bd:71:a8:fc:24:20:93:ea:c4:09: a9:08:43:67:61:8b:f4:e9:e5:42:0e:95:3c:47:49: 2a:f8:7f:7c:15:17:54:83:b2:f8:3c:bd:9b:9d:f2: aa:c8:5a:eb:0f:d4:4d:ef:13:b1:6d:7b:e7:dc:f3: fe:d5:26:a5:e7:3a:6f:00:58:0f:e5:bc:16:a6:77: 55:db:f8:32:88:5f:ff:ac:5d:58:fa:e6:55:37:02: 62:95:fb:94:04:95:b5:03:0d:17:cb:35:4a:9a:53: b4:82:70:9b:74:53:42:11:81:17:98:7e:d4:01:79: 48:58:2e:e0:a3:07:52:ef:1a:40:b1:b1:9f:48:9d: ba:10:4f:60:f0:74:9e:71:cf:42:be:07:f8:e1:4b: da:61:60:ab:f4:48:d4:b4:ec:24:75:cc:4b:44:e0: 72:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:02:8D:60:0B:0F:ED:A0:66:80:A3:22:91:2B:B4:0C:6F:6F:0C:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e84585a5-4a69-301b-9de8-1242f9d90bed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.153.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:6a:9f:f3:34:05:45:46:27:c2:78:0a:bf:87:4c:c7:d4:f4: 68:46:5b:46:23:a5:be:98:8a:ed:08:7f:ea:c3:0c:a5:78:da: 13:11:28:2f:e1:b3:5b:b2:b5:55:51:cb:54:a7:bf:f9:c4:a1: 2d:d6:a6:28:11:fc:d3:4c:a7:3c:5f:cf:e7:a9:6e:f8:51:8e: 50:a2:8e:82:93:e9:63:2d:28:06:01:05:43:d8:d3:e6:bb:2e: 46:a2:4a:ab:8b:17:44:60:b0:9a:47:57:f1:f8:b0:ab:13:8e: 46:5b:cf:c4:f2:c1:fa:88:61:fd:47:1e:91:a0:e9:99:26:bf: b1:89:6a:5c:57:69:b1:d1:2a:e2:51:66:97:d0:2e:60:5a:12: 45:6b:94:16:6a:9a:07:7f:db:60:fe:db:c0:42:cc:5f:57:62: 40:23:7d:5d:04:c5:31:1a:64:a4:a5:f6:36:58:82:9f:86:48: 04:c0:20:0b:25:16:74:f2:f7:3a:38:6e:76:9a:e2:3d:31:91: 3e:7e:88:1a:6e:7c:bf:5b:43:3f:fa:6d:17:3d:3a:94:f3:ca: a4:b1:c2:83:a3:6b:3d:8b:55:f1:a5:25:49:88:25:81:12:ed: 84:0e:7f:75:49:ec:0a:2c:ff:9a:bf:0a:14:1d:66:3c:3f:72: 93:e2:6e:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQLGZncV1gg7ZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk Yzc1MDBmYjQtNmViOS00ZmNkLWE0ZjktNTcyZmE0ZmFmN2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa1u/NOzkrE5ENovBPVKMtA/WJTn0KlJB3Nl dITYjdjcucWRuNDFPnLkDa1cFHTSc68r7r5AaZtUWNMx4U7cnOHRXljNJcLkU2Zd 8hc62frrG5SPmziT1morrJRAXL1xqPwkIJPqxAmpCENnYYv06eVCDpU8R0kq+H98 FRdUg7L4PL2bnfKqyFrrD9RN7xOxbXvn3PP+1Sal5zpvAFgP5bwWpndV2/gyiF// rF1Y+uZVNwJilfuUBJW1Aw0XyzVKmlO0gnCbdFNCEYEXmH7UAXlIWC7gowdS7xpA sbGfSJ26EE9g8HSecc9Cvgf44UvaYWCr9EjUtOwkdcxLROBy4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkCjWALD+2gZoCjIpErtAxvbwzKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTg0NTg1YTUtNGE2OS0z MDFiLTlkZTgtMTI0MmY5ZDkwYmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQpktMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJqn/M0BUVGJ8J4Cr+HTMfU9GhGW0Yjpb6Yiu0If+rDDKV42hMRKC/h s1uytVVRy1Snv/nEoS3WpigR/NNMpzxfz+epbvhRjlCijoKT6WMtKAYBBUPY0+a7 LkaiSquLF0RgsJpHV/H4sKsTjkZbz8TywfqIYf1HHpGg6Zkmv7GJalxXabHRKuJR ZpfQLmBaEkVrlBZqmgd/22D+28BCzF9XYkAjfV0ExTEaZKSl9jZYgp+GSATAIAsl FnTy9zo4bnaa4j0xkT5+iBpufL9bQz/6bRc9OpTzyqSxwoOjaz2LVfGlJUmIJYES 7YQOf3VJ7Aos/5q/ChQdZjw/cpPiboY= -----END CERTIFICATE-----Generated at Fri Oct 10 19:57:38 2025 by rpki-client