$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ea66b86-5648-3598-868f-d655bca90280.roa File: 0ea66b86-5648-3598-868f-d655bca90280.roa (raw, json) Hash identifier: W0GTQefQ7KwO4NV+gYpSh2u4KMpXrTn6dgMwT94NxgE= Subject key identifier: ED:45:81:D1:16:91:B0:08:B3:96:DA:E8:9C:77:FC:A0:57:24:96:E3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B95AA27CBD8F1FC86FE759A40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ea66b86-5648-3598-868f-d655bca90280.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7029 IP address blocks: 64.24.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:27:cb:d8:f1:fc:86:fe:75:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=8386d0cc-e444-4c10-b800-c6669b8b1430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b7:b5:80:37:64:04:99:7d:47:a5:e4:4f:b6: f3:86:3d:c2:87:36:4a:be:90:68:ae:df:a4:52:d8: a6:e6:ea:05:56:40:66:c6:3a:f2:6a:c6:bd:8f:70: 69:8e:49:50:67:53:fa:b0:47:78:c8:57:e2:29:7f: bb:2b:bd:b4:f3:8f:42:af:75:71:8e:a9:f3:80:7f: a7:c7:84:3f:24:4d:7f:be:50:4b:59:ab:67:62:ab: 2b:ca:a6:2b:46:13:ff:e3:a2:8f:94:d2:c1:b0:96: cb:19:58:56:12:97:8c:e8:69:d0:a1:c0:bb:ac:fb: 22:bd:b5:80:8a:eb:5b:11:d0:24:34:24:e4:b7:92: 6c:bb:3f:10:c5:7f:74:f8:31:4c:f5:58:b5:2c:48: 0e:d2:63:56:98:ac:cc:f1:57:ab:72:86:0e:79:f0: 10:fd:ba:24:25:71:e3:00:85:f6:66:30:49:83:f1: 53:f7:a1:ad:a3:a7:e6:c8:57:41:5b:8c:a0:b3:17: fd:b2:df:30:26:b6:ee:ff:0c:c8:45:b3:3a:dd:1a: 90:25:7e:74:d9:52:a7:54:56:aa:db:fd:f8:65:2d: 8b:d1:8b:0b:ba:a7:8b:35:92:9a:98:2a:0a:82:06: e7:c7:22:74:cd:b6:e4:0f:6b:49:2a:8a:bf:01:c6: eb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:45:81:D1:16:91:B0:08:B3:96:DA:E8:9C:77:FC:A0:57:24:96:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ea66b86-5648-3598-868f-d655bca90280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.24.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:af:6a:2f:87:bf:72:93:e0:3d:a0:21:dd:41:5c:2d:38:c5: 3b:64:48:8d:dd:d7:d7:66:21:20:16:54:a7:f9:5f:06:75:94: 8a:48:26:52:2e:11:29:cf:07:98:0a:47:0e:6e:2b:da:fd:06: aa:af:ab:07:09:7a:58:2d:c3:0f:20:9a:6a:9e:1f:46:e4:04: 58:8f:30:ab:39:f3:23:a3:1f:fc:5b:d1:3a:94:72:b2:46:0b: 34:e8:73:67:49:3e:61:a4:cd:58:e3:ed:cc:15:c9:bb:7b:24: e5:6d:81:6f:c4:e3:c6:87:76:15:26:b5:f2:77:21:99:e5:b2: 56:af:99:9a:f5:f9:5b:af:22:2a:a3:61:de:93:3d:12:0c:1d: 41:f6:3f:82:06:b1:4a:bc:68:c6:ae:be:ad:2a:a9:55:e1:39: 3b:58:7e:92:28:5e:76:e2:8c:6d:26:71:9e:75:1a:8d:c8:ed: f0:f6:92:db:0e:07:20:87:e2:28:f2:9a:37:39:1b:b0:5d:68: 91:86:c8:85:c2:ff:cd:2a:96:46:f4:3c:e5:9c:97:36:cb:fd: 5a:05:90:50:7d:c3:37:2d:fd:aa:fc:e5:e2:f9:9d:11:81:12: 00:8a:48:2a:88:27:b4:1a:8b:2b:bd:de:3f:4c:dd:f3:76:08: e0:81:f9:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqifL2PH8hv51mkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ODM4NmQwY2MtZTQ0NC00YzEwLWI4MDAtYzY2NjliOGIxNDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlre1gDdkBJl9R6XkT7bzhj3ChzZKvpBort+k Utim5uoFVkBmxjryasa9j3BpjklQZ1P6sEd4yFfiKX+7K720849Cr3VxjqnzgH+n x4Q/JE1/vlBLWatnYqsryqYrRhP/46KPlNLBsJbLGVhWEpeM6GnQocC7rPsivbWA iutbEdAkNCTkt5Jsuz8QxX90+DFM9Vi1LEgO0mNWmKzM8VercoYOefAQ/bokJXHj AIX2ZjBJg/FT96Gto6fmyFdBW4ygsxf9st8wJrbu/wzIRbM63RqQJX502VKnVFaq 2/34ZS2L0YsLuqeLNZKamCoKggbnxyJ0zbbkD2tJKoq/Acbr4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1FgdEWkbAIs5ba6Jx3/KBXJJbjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGVhNjZiODYtNTY0OC0z NTk4LTg2OGYtZDY1NWJjYTkwMjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQBgIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKvai+Hv3KT4D2gId1BXC04xTtkSI3d19dmISAWVKf5XwZ1lIpIJlIu ESnPB5gKRw5uK9r9BqqvqwcJelgtww8gmmqeH0bkBFiPMKs58yOjH/xb0TqUcrJG CzToc2dJPmGkzVjj7cwVybt7JOVtgW/E48aHdhUmtfJ3IZnlslavmZr1+VuvIiqj Yd6TPRIMHUH2P4IGsUq8aMauvq0qqVXhOTtYfpIoXnbijG0mcZ51Go3I7fD2ktsO ByCH4ijymjc5G7BdaJGGyIXC/80qlkb0POWclzbL/VoFkFB9wzct/ar85eL5nRGB EgCKSCqIJ7Qaiyu93j9M3fN2COCB+YU= -----END CERTIFICATE-----Generated at Tue Nov 4 17:00:07 2025 by rpki-client