$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39c23487-b420-379f-91d9-56c821c0182c.roa File: 39c23487-b420-379f-91d9-56c821c0182c.roa (raw, json) Hash identifier: 5pzjAgnxIgtnrcXQjuOqv7eW8LiTT7WLSAi+HEgq9pY= Subject key identifier: C0:63:F9:F2:FB:DA:17:66:7C:66:2E:D6:7E:04:A9:C9:8A:B1:AD:1D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF4861139D069D838F500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39c23487-b420-379f-91d9-56c821c0182c.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 69.66.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f4:86:11:39:d0:69:d8:38:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=1021fe64-36b4-4e13-9f9e-7ccebc37c8e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:da:df:2b:c7:f2:75:ae:58:17:97:97:1b:93: 0d:52:fc:9e:53:b7:3c:fa:57:0b:9f:d4:23:b1:dc: 4e:d3:b6:b4:0a:3b:e5:71:1b:37:39:d6:23:ea:0f: 90:95:9e:9c:46:9d:c7:8f:c9:06:1d:79:4f:a4:6f: 0c:fb:0f:75:2c:0f:9d:d8:c1:8b:f9:9a:f3:97:37: 59:20:45:73:60:61:45:79:95:56:18:b3:89:27:7b: 47:88:7c:2d:53:82:88:12:4e:3c:19:64:10:c5:96: 11:90:b8:79:77:aa:15:cb:56:90:e6:e2:54:3d:ef: 11:62:5c:48:08:80:e9:3f:cf:f3:5b:6b:81:73:a8: 76:ca:e1:96:77:cf:4e:3d:5e:4e:6a:77:94:2f:76: de:ab:78:a0:fa:2c:cc:d3:ed:c9:04:67:ec:30:72: b7:97:28:41:99:d9:fb:ca:39:0f:35:b1:f8:8d:73: b1:c9:73:15:d3:01:dd:6e:45:91:f6:b5:e4:b3:f8: 02:79:96:d1:78:67:f8:3c:92:d2:be:a2:23:4d:32: 1f:5c:97:ed:2a:87:b7:5e:9c:fa:a5:fa:7f:31:9c: cc:6d:4c:f9:12:38:1b:c8:6f:d8:b5:d5:e5:94:6e: e1:57:3d:e3:8a:61:c5:5b:d7:68:7c:6d:36:c5:bd: 4d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:63:F9:F2:FB:DA:17:66:7C:66:2E:D6:7E:04:A9:C9:8A:B1:AD:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39c23487-b420-379f-91d9-56c821c0182c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:ab:f3:8a:91:ee:c1:06:75:29:75:cc:c6:ab:4d:76:45:9f: c9:aa:78:6e:75:bd:12:ef:cc:12:a9:ac:bc:f0:e8:dd:69:5b: 15:69:b5:c3:d2:0b:52:85:24:b6:9c:e1:80:7a:4a:79:c4:8d: f2:31:4f:31:9a:b6:9f:40:47:8d:74:d0:00:8e:da:95:dd:97: cc:64:0b:3a:a2:72:f3:47:35:94:7a:53:78:ed:6f:cd:7b:f8: 59:f1:16:c3:4f:71:ad:f4:31:0f:fe:dc:09:60:73:36:23:19: 42:aa:05:af:cf:9e:a4:35:89:92:e9:14:60:b0:44:14:89:da: b8:53:76:75:cd:f9:4d:1b:dc:47:85:50:6d:e4:5d:20:eb:0c: 2d:57:fd:b8:c8:50:3c:9f:a7:c4:e4:97:c6:50:94:f7:c6:93: 53:2e:1b:24:bb:ea:ef:f1:8d:e1:3a:54:0c:83:35:cf:77:f8: b2:6e:34:b8:86:0c:a9:3c:2d:59:52:d4:ec:ab:12:ba:95:42: 5f:97:73:6c:54:f5:39:9a:4f:bb:e7:91:0f:81:da:fa:79:a7: 29:6f:eb:95:df:57:ff:8d:e7:86:47:9b:be:82:55:32:cf:f4: a4:8c:3e:7d:df:00:f1:4f:3b:00:0a:8c:b0:03:e4:2b:92:50: bb:b9:90:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPSGETnQadg49QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MTAyMWZlNjQtMzZiNC00ZTEzLTlmOWUtN2NjZWJjMzdjOGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NrfK8fyda5YF5eXG5MNUvyeU7c8+lcLn9Qj sdxO07a0CjvlcRs3OdYj6g+QlZ6cRp3Hj8kGHXlPpG8M+w91LA+d2MGL+ZrzlzdZ IEVzYGFFeZVWGLOJJ3tHiHwtU4KIEk48GWQQxZYRkLh5d6oVy1aQ5uJUPe8RYlxI CIDpP8/zW2uBc6h2yuGWd89OPV5OaneUL3beq3ig+izM0+3JBGfsMHK3lyhBmdn7 yjkPNbH4jXOxyXMV0wHdbkWR9rXks/gCeZbReGf4PJLSvqIjTTIfXJftKoe3Xpz6 pfp/MZzMbUz5EjgbyG/YtdXllG7hVz3jimHFW9dofG02xb1NhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBj+fL72hdmfGYu1n4EqcmKsa0dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzljMjM0ODctYjQyMC0z NzlmLTkxZDktNTZjODIxYzAxODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRUKkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmr84qR7sEGdSl1zMarTXZFn8mqeG51vRLvzBKprLzw6N1pWxVptcPS C1KFJLac4YB6SnnEjfIxTzGatp9AR4100ACO2pXdl8xkCzqicvNHNZR6U3jtb817 +FnxFsNPca30MQ/+3AlgczYjGUKqBa/PnqQ1iZLpFGCwRBSJ2rhTdnXN+U0b3EeF UG3kXSDrDC1X/bjIUDyfp8Tkl8ZQlPfGk1MuGyS76u/xjeE6VAyDNc93+LJuNLiG DKk8LVlS1OyrErqVQl+Xc2xU9TmaT7vnkQ+B2vp5pylv65XfV/+N54ZHm76CVTLP 9KSMPn3fAPFPOwAKjLAD5CuSULu5kDQ= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:06 2025 by rpki-client