$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f10acf6c-b0f9-3aa4-9e8c-e3a8e4f92784.roa File: f10acf6c-b0f9-3aa4-9e8c-e3a8e4f92784.roa (raw, json) Hash identifier: Fed4PnJcMFUpbg1DTYPeMU7oCFv7eqlj+Akdgtx6R5M= Subject key identifier: 60:C6:F2:22:40:AA:18:B7:2C:F8:E5:5A:23:CB:EC:08:84:45:6E:35 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CD694B622209B8E656B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f10acf6c-b0f9-3aa4-9e8c-e3a8e4f92784.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 69.66.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:d6:94:b6:22:20:9b:8e:65:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=73c54970-36e6-44cc-9352-570d10599b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8d:24:d4:2a:f8:21:5b:66:1d:83:0d:82:fb: 06:4f:5c:cd:53:43:35:da:7f:82:9d:87:a8:bc:b3: bd:9a:02:63:92:e6:d6:a1:1e:50:b8:80:4a:c2:fa: 1d:ea:00:c0:c1:c0:64:40:93:c8:3f:d7:01:ee:bd: fe:e5:8b:08:d1:82:a5:15:57:30:23:58:7f:75:e2: fb:43:af:24:26:13:1e:75:49:69:a8:73:c5:2d:63: 4b:f6:8f:bd:b6:d3:80:40:50:62:de:da:c1:e8:8e: 78:25:75:51:2d:d3:3d:f7:f3:56:b5:6e:c0:c1:47: a3:dd:f3:ac:b5:74:b2:36:d2:b0:0d:33:2c:66:f5: 3e:d8:75:9d:22:77:32:9d:e5:93:3d:00:18:22:b7: b2:8f:53:ff:19:40:40:fd:f4:4d:83:45:89:4c:62: fa:5a:d6:85:fe:bc:c9:78:ef:54:e8:78:64:8f:52: 2c:72:3e:0b:64:2b:3b:f3:d2:5e:b3:b9:c5:02:2a: 3a:0b:db:9c:a4:34:22:74:cc:06:c1:11:97:75:6e: f5:5c:7b:6a:94:55:fd:5c:4f:3e:c4:bd:90:5e:df: bc:dc:c0:b9:00:31:f4:43:18:46:10:f5:43:3d:2c: 97:10:08:99:d6:89:00:af:88:e3:9d:82:56:f7:b9: 3e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C6:F2:22:40:AA:18:B7:2C:F8:E5:5A:23:CB:EC:08:84:45:6E:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f10acf6c-b0f9-3aa4-9e8c-e3a8e4f92784.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:04:0e:b4:0d:51:10:4f:38:c1:a6:18:c4:e7:a1:27:bf:46: 7b:be:d4:19:f4:bd:cd:15:29:90:77:43:5e:4e:91:56:43:7c: 22:54:91:71:10:d5:90:0f:7d:e1:7b:fc:7c:6c:95:8d:9a:91: 29:97:16:51:bd:a0:35:11:19:f9:df:e8:a4:73:2f:3e:e4:83: 31:c7:88:0e:09:7a:60:06:1e:6b:84:16:3b:5c:02:e6:d5:c0: 89:b7:83:0e:ed:30:ad:67:09:64:c4:26:1b:77:a9:2b:90:02: 0a:b0:38:37:81:80:5a:32:16:f3:f2:2b:28:46:39:65:ec:21: c4:a1:78:3d:9e:ca:da:d2:ac:2d:8f:28:94:1c:54:4b:c0:b8: e0:38:51:cc:68:b7:0e:86:d2:f9:1f:6c:eb:44:15:4e:cd:ce: f8:22:81:92:0c:ab:1b:d7:d5:bc:ee:6f:80:07:0c:8e:34:fa: 00:d7:c9:c4:0a:70:c8:01:4c:38:1f:11:f1:d8:fd:87:ed:ce: 7b:fc:a6:4a:d7:14:ca:96:c9:75:46:ad:08:ea:07:85:c2:12: 63:36:90:7d:40:de:8b:b6:c0:ee:bf:c8:23:0c:64:e1:4d:54: c4:4b:36:d7:48:02:ac:2b:fe:a0:c7:8f:68:b1:e2:3a:79:f4: 2d:23:68:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXNaUtiIgm45la4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NzNjNTQ5NzAtMzZlNi00NGNjLTkzNTItNTcwZDEwNTk5YjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm40k1Cr4IVtmHYMNgvsGT1zNU0M12n+CnYeo vLO9mgJjkubWoR5QuIBKwvod6gDAwcBkQJPIP9cB7r3+5YsI0YKlFVcwI1h/deL7 Q68kJhMedUlpqHPFLWNL9o+9ttOAQFBi3trB6I54JXVRLdM99/NWtW7AwUej3fOs tXSyNtKwDTMsZvU+2HWdIncyneWTPQAYIreyj1P/GUBA/fRNg0WJTGL6WtaF/rzJ eO9U6Hhkj1Iscj4LZCs789Jes7nFAio6C9ucpDQidMwGwRGXdW71XHtqlFX9XE8+ xL2QXt+83MC5ADH0QxhGEPVDPSyXEAiZ1okAr4jjnYJW97k+5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDG8iJAqhi3LPjlWiPL7AiERW41MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjEwYWNmNmMtYjBmOS0z YWE0LTllOGMtZTNhOGU0ZjkyNzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIEDrQNURBPOMGmGMTnoSe/Rnu+1Bn0vc0VKZB3Q15OkVZDfCJUkXEQ 1ZAPfeF7/HxslY2akSmXFlG9oDURGfnf6KRzLz7kgzHHiA4JemAGHmuEFjtcAubV wIm3gw7tMK1nCWTEJht3qSuQAgqwODeBgFoyFvPyKyhGOWXsIcSheD2eytrSrC2P KJQcVEvAuOA4Ucxotw6G0vkfbOtEFU7NzvgigZIMqxvX1bzub4AHDI40+gDXycQK cMgBTDgfEfHY/Yftznv8pkrXFMqWyXVGrQjqB4XCEmM2kH1A3ou2wO6/yCMMZOFN VMRLNtdIAqwr/qDHj2ix4jp59C0jaAw= -----END CERTIFICATE-----Generated at Fri Oct 10 19:48:34 2025 by rpki-client