$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c9941a8-fb10-3e1d-b9b6-1e5109915c3c.roa File: 0c9941a8-fb10-3e1d-b9b6-1e5109915c3c.roa (raw, json) Hash identifier: B2pYix3R4No7DEB5rHPCB8ITFh70/xFHdxtf7CxJuAE= Subject key identifier: AE:D4:F0:85:CF:0C:41:85:DD:DA:9C:3F:30:C3:38:67:E7:12:E4:B7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AAB266D8E9E0674996C76A940 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c9941a8-fb10-3e1d-b9b6-1e5109915c3c.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 69.66.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:6d:8e:9e:06:74:99:6c:76:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=1c5afa47-c444-415b-aec0-9b8d588f46cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a0:ac:07:d3:70:ba:97:a5:28:0d:e8:b6:b5: 95:f9:c3:10:f0:36:fc:23:41:9e:eb:d2:24:91:f3: 30:76:58:ea:6c:9c:52:f7:7e:99:96:d1:df:07:f2: 0b:93:06:44:db:78:af:a9:06:0f:87:70:c8:b0:36: d9:51:a7:05:da:b7:78:f1:42:13:ad:70:05:f3:b7: d5:a7:05:8a:7f:46:8a:1b:90:06:3a:8f:d9:e6:5d: 88:c5:07:6f:88:4b:52:16:13:49:44:84:b6:64:cc: f1:d1:fc:2d:fa:d7:c1:a8:99:e0:3d:ea:6d:7e:78: b5:5e:bc:78:ce:33:90:12:8d:9b:e3:38:b7:3d:bf: 09:0c:f4:ad:f8:b6:57:2a:de:5e:73:a9:c9:36:30: 5a:7f:6c:5b:70:aa:23:ac:a0:72:7a:07:26:51:55: 94:33:fe:68:c0:82:59:0b:2d:6e:81:69:e2:8e:c4: 34:52:2a:d3:f7:6f:c5:fb:0d:4e:bd:91:be:1d:65: a8:25:4d:c1:43:96:c1:03:0b:95:22:13:94:a1:e4: 7c:a5:de:6b:41:5e:0e:67:bc:e9:ea:3f:91:23:4a: 86:22:c2:b2:2d:2c:01:69:98:dc:fb:54:52:42:cb: 26:c7:e9:03:2e:d4:c8:67:b6:92:01:0d:f9:ab:37: 7c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D4:F0:85:CF:0C:41:85:DD:DA:9C:3F:30:C3:38:67:E7:12:E4:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c9941a8-fb10-3e1d-b9b6-1e5109915c3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:1e:d6:ff:24:56:fa:7d:00:f1:6e:b2:07:f7:54:9f:25:f2: 33:84:6b:44:67:40:44:5d:31:91:cd:c3:83:41:d9:7b:1d:60: f7:ad:44:df:64:e2:5c:fb:f1:80:c4:13:b0:ec:fd:20:06:60: a0:37:2c:c2:2e:03:07:47:00:24:7d:4f:7d:c2:7e:57:55:54: 8c:32:8b:db:6d:a3:f8:54:eb:f8:3d:6f:43:26:97:1b:e1:c0: ff:86:b3:26:81:43:3f:11:78:4f:72:01:93:43:8f:7d:1e:92: f0:ae:bd:a6:3e:95:b8:b2:5d:e0:21:5a:55:ae:57:00:98:5b: d1:55:17:9a:ec:78:b7:ad:5e:62:3a:1c:df:7d:29:e4:d2:a4: 8e:db:1b:db:10:55:e0:a8:a7:d2:11:94:2f:9c:2e:d0:1c:3d: d2:dc:0f:69:ef:22:4b:bc:f0:88:93:71:ff:b7:e4:af:8f:b3: b4:90:31:27:a4:4e:39:5a:1b:ce:0f:34:7a:49:d5:00:86:7f: 3c:46:5a:10:a6:7e:ec:24:e6:9c:55:36:53:15:c6:0f:3e:78: 04:e6:1d:49:0d:03:cd:2c:3f:50:af:3a:40:c3:8a:51:f8:6c: 1a:c3:c3:6f:ee:8c:f2:09:36:c8:42:80:aa:a6:ca:3d:0e:57: 0b:b0:8a:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJm2OngZ0mWx2qUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk MWM1YWZhNDctYzQ0NC00MTViLWFlYzAtOWI4ZDU4OGY0NmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKCsB9NwupelKA3otrWV+cMQ8Db8I0Ge69Ik kfMwdljqbJxS936ZltHfB/ILkwZE23ivqQYPh3DIsDbZUacF2rd48UITrXAF87fV pwWKf0aKG5AGOo/Z5l2IxQdviEtSFhNJRIS2ZMzx0fwt+tfBqJngPeptfni1Xrx4 zjOQEo2b4zi3Pb8JDPSt+LZXKt5ec6nJNjBaf2xbcKojrKByegcmUVWUM/5owIJZ Cy1ugWnijsQ0UirT92/F+w1OvZG+HWWoJU3BQ5bBAwuVIhOUoeR8pd5rQV4OZ7zp 6j+RI0qGIsKyLSwBaZjc+1RSQssmx+kDLtTIZ7aSAQ35qzd8TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7U8IXPDEGF3dqcPzDDOGfnEuS3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGM5OTQxYTgtZmIxMC0z ZTFkLWI5YjYtMWU1MTA5OTE1YzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRUIuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFse1v8kVvp9APFusgf3VJ8l8jOEa0RnQERdMZHNw4NB2XsdYPetRN9k 4lz78YDEE7Ds/SAGYKA3LMIuAwdHACR9T33CfldVVIwyi9tto/hU6/g9b0Mmlxvh wP+GsyaBQz8ReE9yAZNDj30ekvCuvaY+lbiyXeAhWlWuVwCYW9FVF5rseLetXmI6 HN99KeTSpI7bG9sQVeCop9IRlC+cLtAcPdLcD2nvIku88IiTcf+35K+Ps7SQMSek TjlaG84PNHpJ1QCGfzxGWhCmfuwk5pxVNlMVxg8+eATmHUkNA80sP1CvOkDDilH4 bBrDw2/ujPIJNshCgKqmyj0OVwuwirE= -----END CERTIFICATE-----Generated at Mon Aug 4 16:07:09 2025 by rpki-client