$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fbff71be-5d2f-3d3a-9173-7e2b6b756775.roa File: fbff71be-5d2f-3d3a-9173-7e2b6b756775.roa (raw, json) Hash identifier: pbWGSSekBg7oZMx3xsy2WmERdRa6x0XS1w8URtQeCv4= Subject key identifier: DB:EE:B9:05:9D:24:AC:F5:02:23:83:99:B3:98:62:89:26:0C:FB:BC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF3DF0D3C3EC8788ED228 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fbff71be-5d2f-3d3a-9173-7e2b6b756775.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 66.216.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f3:df:0d:3c:3e:c8:78:8e:d2:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=8f769e52-9759-4e4c-b643-15f51ac01047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:50:b8:b8:c2:69:36:5b:a6:56:32:e4:be:59: 8f:73:cb:8e:5c:91:ae:9f:bd:17:9e:bd:2d:4a:6f: f5:80:61:f3:89:77:68:e8:0b:03:a6:9b:32:62:9d: ee:68:3e:a9:4c:7b:af:c1:4c:ab:d2:e3:bd:8a:f5: 9c:65:89:dc:76:90:c2:25:a3:88:29:84:c7:49:74: bf:d2:f5:74:db:11:2e:97:4d:13:3d:62:a3:7d:8d: 43:f0:67:81:e1:ab:78:f9:0a:76:31:be:aa:b3:0f: 52:9f:09:aa:d9:16:44:8a:2e:bc:a3:c2:db:ca:ea: 56:f7:61:20:f2:95:54:22:b1:86:68:81:cd:ce:86: 94:24:bf:b3:ad:6d:f9:55:ed:70:65:2c:14:c6:3c: c1:3e:9d:ee:15:09:b5:33:3f:67:38:2e:9a:ff:0d: de:62:a7:71:74:10:10:5d:c2:ca:04:44:e0:f1:61: fb:fc:c9:b9:9d:5e:10:d7:80:30:ed:bf:63:45:c5: 22:19:6d:c0:38:9f:6d:52:96:ea:ba:92:83:3b:52: dc:65:d5:87:6a:fd:8c:15:2a:c8:4a:06:48:fe:9a: f9:50:69:14:cc:b1:34:2c:bf:b4:8e:7b:d3:c1:bc: a2:51:4a:1b:0c:db:6b:2b:ac:29:05:12:54:ef:2e: 36:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:EE:B9:05:9D:24:AC:F5:02:23:83:99:B3:98:62:89:26:0C:FB:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fbff71be-5d2f-3d3a-9173-7e2b6b756775.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.216.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:a9:3e:09:68:70:63:c0:02:4c:be:45:6c:46:c2:37:3f:82: b4:8b:02:15:25:e3:41:11:f6:91:c1:b9:66:d2:dd:57:cd:65: 39:e6:ff:e9:f8:b4:27:df:2e:c1:f5:c2:1d:0c:b6:a5:2f:35: 96:7b:fc:4a:27:98:19:fd:53:95:de:e5:64:51:76:e5:49:8a: 82:8e:d9:40:6b:39:6a:96:20:28:4b:d8:58:34:84:a2:51:d3: 4e:53:8e:86:db:00:f9:90:42:da:ab:f8:46:83:27:3a:6b:ef: e1:42:84:9e:bd:0b:4c:e3:ab:a9:4d:57:7e:0d:d4:82:95:6c: 8c:21:54:49:61:63:1a:30:5f:01:bf:a8:ab:b8:87:a7:eb:8e: 64:6d:9d:87:09:77:35:67:44:75:5a:d3:9f:52:48:92:1e:d6: ca:35:dd:66:2b:80:38:1d:c1:04:04:53:83:b7:37:2c:88:17: b4:6f:85:70:83:e6:38:06:31:a5:9a:74:b4:1d:37:04:14:79: a1:44:fe:e6:50:d8:56:6b:73:1e:ba:2d:4d:1c:27:df:7b:f8: 3b:1c:a8:a2:f9:87:9b:e9:99:35:7f:0b:d0:42:52:3a:6c:e3: b0:84:6a:f7:11:04:d2:57:c0:36:ec:5c:40:d4:0d:26:83:b3: ae:11:8f:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPPfDTw+yHiO0igwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk OGY3NjllNTItOTc1OS00ZTRjLWI2NDMtMTVmNTFhYzAxMDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFC4uMJpNlumVjLkvlmPc8uOXJGun70Xnr0t Sm/1gGHziXdo6AsDppsyYp3uaD6pTHuvwUyr0uO9ivWcZYncdpDCJaOIKYTHSXS/ 0vV02xEul00TPWKjfY1D8GeB4at4+Qp2Mb6qsw9Snwmq2RZEii68o8LbyupW92Eg 8pVUIrGGaIHNzoaUJL+zrW35Ve1wZSwUxjzBPp3uFQm1Mz9nOC6a/w3eYqdxdBAQ XcLKBETg8WH7/Mm5nV4Q14Aw7b9jRcUiGW3AOJ9tUpbqupKDO1LcZdWHav2MFSrI SgZI/pr5UGkUzLE0LL+0jnvTwbyiUUobDNtrK6wpBRJU7y42UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvuuQWdJKz1AiODmbOYYokmDPu8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmJmZjcxYmUtNWQyZi0z ZDNhLTkxNzMtN2UyYjZiNzU2Nzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQtiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+pPglocGPAAky+RWxGwjc/grSLAhUl40ER9pHBuWbS3VfNZTnm/+n4 tCffLsH1wh0MtqUvNZZ7/EonmBn9U5Xe5WRRduVJioKO2UBrOWqWIChL2Fg0hKJR 005TjobbAPmQQtqr+EaDJzpr7+FChJ69C0zjq6lNV34N1IKVbIwhVElhYxowXwG/ qKu4h6frjmRtnYcJdzVnRHVa059SSJIe1so13WYrgDgdwQQEU4O3NyyIF7RvhXCD 5jgGMaWadLQdNwQUeaFE/uZQ2FZrcx66LU0cJ997+DscqKL5h5vpmTV/C9BCUjps 47CEavcRBNJXwDbsXEDUDSaDs64Rj74= -----END CERTIFICATE-----Generated at Sat Oct 11 00:15:33 2025 by rpki-client