$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f156dafc-4e5a-3bd6-9bea-783cddf20268.roa File: f156dafc-4e5a-3bd6-9bea-783cddf20268.roa (raw, json) Hash identifier: XIxzjlt7jzv+/vgj8v/GuQ8DJXQLhOsslaqUpqKvGLc= Subject key identifier: 60:D7:87:8A:1A:41:4F:BD:E1:D5:6C:E5:A3:96:68:2F:F4:D3:88:4A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D03EA0E75B386A0AF5A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f156dafc-4e5a-3bd6-9bea-783cddf20268.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 29877 IP address blocks: 66.163.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:03:ea:0e:75:b3:86:a0:af:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=c696c03f-7711-4ddf-9861-769c4671a07b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bf:e7:18:e6:c6:c3:14:86:c9:ab:f4:9b:96: 03:c0:cb:b3:96:a7:1d:76:b4:7f:03:45:10:4e:5b: 57:c2:64:ad:c5:fd:f0:dd:e6:21:4b:5a:2a:4e:2f: 75:05:23:db:fb:d7:e3:ce:52:1b:58:a2:4f:0a:33: cb:ac:3f:2c:c4:a8:06:bb:e4:c0:a6:a0:f9:be:a2: fd:97:6c:49:98:9f:38:e4:6d:a1:75:19:87:25:31: 65:e1:e0:4c:c1:97:46:b7:24:0a:02:ce:fe:33:c7: 0a:9a:60:b6:5b:8a:5f:a1:20:ae:d7:fe:8f:96:04: cb:e3:55:dd:ef:5c:0f:cb:1f:32:88:94:48:3b:b0: c6:0f:c0:10:03:2f:b1:1e:ac:86:94:cb:78:3f:0e: c9:64:35:df:9c:b7:64:1a:42:6c:c4:a1:3c:63:f5: e7:5e:fc:4a:13:79:13:b1:0a:20:e6:98:07:64:d4: a9:8c:61:e1:12:9a:fc:9a:38:97:ab:b2:7d:0c:a1: a1:db:d3:06:b8:17:c5:40:90:ed:dd:38:f7:d2:5b: fe:c8:93:75:c3:95:94:87:39:29:43:a1:7d:2d:e2: 08:f3:97:9b:d5:b7:8e:6d:6c:cd:12:7f:04:05:0e: c0:fc:db:d2:e1:a8:ce:d9:a0:44:0f:71:eb:e7:6a: 3f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D7:87:8A:1A:41:4F:BD:E1:D5:6C:E5:A3:96:68:2F:F4:D3:88:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f156dafc-4e5a-3bd6-9bea-783cddf20268.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.163.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:80:8d:8a:9f:71:0a:7d:b2:21:08:a5:27:52:17:de:b6:37: e0:39:9c:8a:b4:f6:bc:a8:0a:0c:b2:45:4e:2e:9b:5e:63:0f: 14:b7:04:23:38:30:3b:c9:33:3d:a2:97:5b:41:c1:d1:12:d8: 5d:d7:52:4d:a0:54:cf:1d:8c:15:8a:66:40:da:27:b5:06:e3: 8d:73:3d:ed:a4:38:a6:ac:87:3b:fe:c3:c2:77:f7:60:06:51: 87:02:15:a3:13:25:fd:37:61:05:5d:8b:75:b1:7c:54:41:10: 7c:a3:bd:50:a6:65:38:aa:9d:f1:3e:8c:53:ac:0b:e8:17:f5: c2:d6:37:87:10:33:be:fc:5a:70:72:4d:cb:db:61:db:2e:27: 19:53:01:55:29:49:77:4a:a9:f2:fe:17:87:73:ef:04:96:5e: 0c:18:0c:7f:4f:81:fa:30:b3:74:37:57:55:16:1d:62:c5:fe: 3c:4a:3e:4d:10:5c:23:32:ff:00:e0:1c:bc:19:42:9e:d6:cd: e3:8a:33:c4:04:20:a3:eb:0a:c9:f3:d8:3a:b2:23:d4:0c:74: 00:8c:e8:65:3b:d8:f0:4d:61:d8:72:81:93:c1:bf:d4:4d:db: e5:30:e1:18:9b:8e:72:40:ed:0e:9b:21:2f:76:e3:a8:7a:11: 0f:d4:40:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQPqDnWzhqCvWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YzY5NmMwM2YtNzcxMS00ZGRmLTk4NjEtNzY5YzQ2NzFhMDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArb/nGObGwxSGyav0m5YDwMuzlqcddrR/A0UQ TltXwmStxf3w3eYhS1oqTi91BSPb+9fjzlIbWKJPCjPLrD8sxKgGu+TApqD5vqL9 l2xJmJ845G2hdRmHJTFl4eBMwZdGtyQKAs7+M8cKmmC2W4pfoSCu1/6PlgTL41Xd 71wPyx8yiJRIO7DGD8AQAy+xHqyGlMt4Pw7JZDXfnLdkGkJsxKE8Y/XnXvxKE3kT sQog5pgHZNSpjGHhEpr8mjiXq7J9DKGh29MGuBfFQJDt3Tj30lv+yJN1w5WUhzkp Q6F9LeII85eb1beObWzNEn8EBQ7A/NvS4ajO2aBED3Hr52o/CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDXh4oaQU+94dVs5aOWaC/004hKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjE1NmRhZmMtNGU1YS0z YmQ2LTliZWEtNzgzY2RkZjIwMjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQqN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuAjYqfcQp9siEIpSdSF962N+A5nIq09ryoCgyyRU4um15jDxS3BCM4 MDvJMz2il1tBwdES2F3XUk2gVM8djBWKZkDaJ7UG441zPe2kOKashzv+w8J392AG UYcCFaMTJf03YQVdi3WxfFRBEHyjvVCmZTiqnfE+jFOsC+gX9cLWN4cQM778WnBy TcvbYdsuJxlTAVUpSXdKqfL+F4dz7wSWXgwYDH9Pgfows3Q3V1UWHWLF/jxKPk0Q XCMy/wDgHLwZQp7WzeOKM8QEIKPrCsnz2DqyI9QMdACM6GU72PBNYdhygZPBv9RN 2+Uw4RibjnJA7Q6bIS9246h6EQ/UQEw= -----END CERTIFICATE-----Generated at Fri Oct 10 22:06:17 2025 by rpki-client