$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fa4d735-21ff-3fab-860f-e2f02e2af107.roa File: 1fa4d735-21ff-3fab-860f-e2f02e2af107.roa (raw, json) Hash identifier: yAHkIMvq6cgiTWaeDRN9lcGZTnWAAIY99fq+bUzsuZI= Subject key identifier: 62:17:11:CA:A1:4B:28:E3:4A:9E:EC:BC:80:0B:89:40:08:4D:CE:DE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE4051EDBE2EAC7B8345C480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fa4d735-21ff-3fab-860f-e2f02e2af107.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 69.66.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:51:ed:be:2e:ac:7b:83:45:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=e4eafdcc-e56f-41c3-92a2-c7532eca6a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:67:08:ce:f2:48:19:52:21:f8:b4:95:fa:2a: 56:2c:e9:32:d6:55:74:66:a3:34:bd:1d:ea:f6:c2: 00:90:d3:81:4e:2c:4d:d8:f8:92:34:dc:3f:61:d2: 6b:69:2e:cc:78:cb:ea:24:a6:8a:b8:ed:cf:cb:05: b4:3b:ff:aa:9d:cf:4a:64:f1:85:6c:61:7a:6a:0e: 45:46:46:23:7e:5f:87:ff:14:18:6c:d4:4d:23:8b: 3c:4d:0d:15:cb:0e:a3:87:14:1a:31:34:a4:b1:bf: 63:fc:6a:1a:a2:c6:5b:4c:6f:14:bf:6c:c9:01:d7: 41:8a:24:ca:de:df:94:26:1e:a8:58:fc:37:4b:f3: b0:ac:4b:68:e7:c7:c0:39:03:af:07:6a:b3:db:96: a5:ff:a9:0c:86:7d:8e:b8:0c:0d:0a:bd:8c:ef:d6: 90:de:ee:51:e3:3a:49:2f:9a:4b:11:cf:21:7c:a0: 80:66:8b:dc:57:1c:61:9e:4b:80:5e:5d:70:94:44: 75:b8:0d:30:eb:b1:7e:98:40:3c:78:d5:e8:48:78: c9:65:b7:3d:6e:a0:e1:cd:69:18:5d:a0:0a:50:5c: 9d:5c:3a:eb:c2:02:e8:5e:60:e9:31:7e:49:2b:0a: cb:23:41:f7:05:0a:64:6f:b0:8d:91:88:09:8a:8e: ad:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:17:11:CA:A1:4B:28:E3:4A:9E:EC:BC:80:0B:89:40:08:4D:CE:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fa4d735-21ff-3fab-860f-e2f02e2af107.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:4a:aa:bb:aa:f5:15:b3:d0:84:c2:53:82:f3:de:16:a2:59: 81:25:6c:62:4f:4f:be:ea:52:b0:36:83:97:59:75:94:1e:f8: e1:d9:0e:9e:40:f0:da:6c:f9:f3:e6:41:e8:a6:d6:7a:a5:e1: 7f:25:f3:1c:48:8f:b3:0e:b7:bf:48:63:96:e0:4d:e3:ef:48: 35:fb:0b:c2:36:d1:ec:4c:9d:77:c0:e3:16:82:75:3f:e5:6e: d7:bd:8b:07:b5:94:82:3c:38:b8:f6:3e:b1:4e:44:21:a9:56: 47:89:ec:f4:a9:8e:46:41:aa:da:84:82:d4:de:39:87:0e:fc: 2c:5a:02:a8:b0:31:a5:14:5c:91:77:1e:12:36:69:b2:ce:2d: c4:7d:44:cb:77:50:d5:37:67:d0:5f:dd:34:f7:8a:3b:f6:2b: cb:cb:83:69:d3:f9:a4:25:50:3c:ed:4d:b7:d6:ae:74:3f:63: e5:4f:a9:da:d0:8a:6e:72:c8:19:1e:90:38:25:a5:77:28:cb: 47:06:74:5e:c8:3b:1e:97:e2:49:63:75:65:4d:da:eb:de:c6: 0a:eb:79:07:5f:ff:de:f4:de:b4:1b:3f:8f:4a:89:4b:69:69: a0:b6:ee:76:f7:20:a3:cc:9b:2a:77:ca:38:34:5d:84:16:e3: ba:ac:f3:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFHtvi6se4NFxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZTRlYWZkY2MtZTU2Zi00MWMzLTkyYTItYzc1MzJlY2E2YTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWcIzvJIGVIh+LSV+ipWLOky1lV0ZqM0vR3q 9sIAkNOBTixN2PiSNNw/YdJraS7MeMvqJKaKuO3PywW0O/+qnc9KZPGFbGF6ag5F RkYjfl+H/xQYbNRNI4s8TQ0Vyw6jhxQaMTSksb9j/GoaosZbTG8Uv2zJAddBiiTK 3t+UJh6oWPw3S/OwrEto58fAOQOvB2qz25al/6kMhn2OuAwNCr2M79aQ3u5R4zpJ L5pLEc8hfKCAZovcVxxhnkuAXl1wlER1uA0w67F+mEA8eNXoSHjJZbc9bqDhzWkY XaAKUFydXDrrwgLoXmDpMX5JKwrLI0H3BQpkb7CNkYgJio6tcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIXEcqhSyjjSp7svIALiUAITc7eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWZhNGQ3MzUtMjFmZi0z ZmFiLTg2MGYtZTJmMDJlMmFmMTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRUKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxKqruq9RWz0ITCU4Lz3haiWYElbGJPT77qUrA2g5dZdZQe+OHZDp5A 8Nps+fPmQeim1nql4X8l8xxIj7MOt79IY5bgTePvSDX7C8I20exMnXfA4xaCdT/l bte9iwe1lII8OLj2PrFORCGpVkeJ7PSpjkZBqtqEgtTeOYcO/CxaAqiwMaUUXJF3 HhI2abLOLcR9RMt3UNU3Z9Bf3TT3ijv2K8vLg2nT+aQlUDztTbfWrnQ/Y+VPqdrQ im5yyBkekDglpXcoy0cGdF7IOx6X4kljdWVN2uvexgrreQdf/9703rQbP49KiUtp aaC27nb3IKPMmyp3yjg0XYQW47qs8/o= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:42 2025 by rpki-client