$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f6a35497-6fae-341d-acfd-7c049d22e92f.roa File: f6a35497-6fae-341d-acfd-7c049d22e92f.roa (raw, json) Hash identifier: Oa22yc6tR+9sWZgDiLU1X246rdEf8+PrPq8pszEzNyo= Subject key identifier: 2E:ED:27:45:19:C7:D2:5D:7A:27:81:1D:5D:D6:B9:C4:0B:D7:DE:D9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF37F219833992CBFBB00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f6a35497-6fae-341d-acfd-7c049d22e92f.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 66.84.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f3:7f:21:98:33:99:2c:bf:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=fb0d83ee-1794-4abc-b1a8-8b4ebc162b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7b:ca:ba:ba:7c:06:ef:61:f1:13:42:66:94: 96:47:d5:2e:f4:ce:8c:08:b8:30:a6:38:d4:8d:d3: f3:b6:01:08:65:7f:5e:64:0d:b4:7a:da:f9:ec:e7: a9:de:95:36:fb:e3:f2:8e:c6:8a:34:16:e9:cc:6f: ea:70:e7:c0:9f:17:cb:9c:9c:69:8a:4d:8e:f4:37: ee:fd:3b:a9:f7:ac:34:f0:67:5f:08:89:8c:0a:0f: c8:ba:d7:c8:88:e6:e4:6e:de:64:6f:a4:03:fa:bc: 37:20:08:25:d2:2d:35:81:c9:63:45:fe:b7:c7:99: 2b:7f:30:02:d7:05:8b:65:bf:df:14:fa:5b:85:4e: e0:e5:18:47:24:95:bd:35:81:1f:66:3d:25:e4:e0: 78:7e:9b:29:82:48:ac:39:ff:07:81:f3:c4:95:3a: f2:7a:8d:e3:d8:59:36:6d:74:ba:2b:80:fa:a9:6d: 29:ae:1a:ff:5e:4a:cd:9c:da:28:14:72:39:07:1a: 41:de:a2:b1:9e:16:c7:b1:56:6c:46:1c:d7:e8:85: 0b:59:ea:fb:72:61:9b:2d:e2:61:02:aa:6f:93:21: 5c:55:44:eb:65:9e:b8:3d:7b:de:b1:74:71:37:8c: 98:28:12:a2:ab:9e:26:9e:0d:ec:de:5d:72:53:48: e0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:ED:27:45:19:C7:D2:5D:7A:27:81:1D:5D:D6:B9:C4:0B:D7:DE:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f6a35497-6fae-341d-acfd-7c049d22e92f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.84.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:12:04:b0:13:5f:b4:97:92:82:98:ea:04:d5:58:a3:ae:8a: ad:ea:6a:8e:98:2f:e1:08:3f:98:fc:b4:d0:23:b0:c9:55:48: 24:98:29:5e:30:28:0a:35:cc:13:eb:a7:eb:f7:23:4e:61:29: 9d:b3:ea:93:db:ac:56:42:b3:ef:c2:5e:98:4b:49:93:6c:bb: fd:8d:d0:cb:65:b4:a2:eb:bc:a7:a7:4b:b9:fe:f5:a8:85:fa: 14:dc:f9:56:54:ba:66:50:d1:2d:2b:59:76:f0:c1:72:39:60: df:7c:c9:85:1e:e1:fa:f6:2f:2b:73:8c:b9:d4:f3:10:d7:55: ea:3b:f4:a7:0f:09:38:5e:75:58:e8:ac:0a:34:e0:19:89:82: 06:d6:87:37:49:79:54:4f:b8:ea:f2:72:9b:2d:3a:a1:5d:de: 12:ba:1e:d8:f8:79:38:4b:39:a0:16:10:e8:dc:8e:6c:4c:f9: 2b:55:09:c4:4f:f1:ba:72:89:2a:63:d1:98:bb:9f:43:7e:7b: 2c:b2:3e:c2:8e:db:79:98:cb:4f:09:68:42:9a:41:d8:35:03: 58:bb:ea:3a:18:6c:d4:93:eb:65:f8:d8:e8:b7:e9:6d:88:4e: db:40:9b:e7:32:73:60:a2:ec:a9:ba:d9:00:84:1e:79:e1:11: 07:ed:ff:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPN/IZgzmSy/uwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZmIwZDgzZWUtMTc5NC00YWJjLWIxYTgtOGI0ZWJjMTYyYjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33vKurp8Bu9h8RNCZpSWR9Uu9M6MCLgwpjjU jdPztgEIZX9eZA20etr57Oep3pU2++PyjsaKNBbpzG/qcOfAnxfLnJxpik2O9Dfu /Tup96w08GdfCImMCg/IutfIiObkbt5kb6QD+rw3IAgl0i01gcljRf63x5krfzAC 1wWLZb/fFPpbhU7g5RhHJJW9NYEfZj0l5OB4fpspgkisOf8HgfPElTryeo3j2Fk2 bXS6K4D6qW0prhr/XkrNnNooFHI5BxpB3qKxnhbHsVZsRhzX6IULWer7cmGbLeJh AqpvkyFcVUTrZZ64PXvesXRxN4yYKBKiq54mng3s3l1yU0jgUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7tJ0UZx9JdeieBHV3WucQL197ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjZhMzU0OTctNmZhZS0z NDFkLWFjZmQtN2MwNDlkMjJlOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQlSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoSBLATX7SXkoKY6gTVWKOuiq3qao6YL+EIP5j8tNAjsMlVSCSYKV4w KAo1zBPrp+v3I05hKZ2z6pPbrFZCs+/CXphLSZNsu/2N0MtltKLrvKenS7n+9aiF +hTc+VZUumZQ0S0rWXbwwXI5YN98yYUe4fr2LytzjLnU8xDXVeo79KcPCThedVjo rAo04BmJggbWhzdJeVRPuOrycpstOqFd3hK6Htj4eThLOaAWEOjcjmxM+StVCcRP 8bpyiSpj0Zi7n0N+eyyyPsKO23mYy08JaEKaQdg1A1i76joYbNST62X42Oi36W2I TttAm+cyc2Ci7Km62QCEHnnhEQft/5Y= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:55 2025 by rpki-client