$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4067fc7f-b703-3c62-828d-ce6a2ee2cf93.roa File: 4067fc7f-b703-3c62-828d-ce6a2ee2cf93.roa (raw, json) Hash identifier: TADN26BaoG5POttHZY3duGQMCsZrFoZSWxVYJfa5/8c= Subject key identifier: 6C:48:D2:49:93:C2:F0:84:EB:EB:75:62:96:9D:B1:68:B8:99:D5:DD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2A2C4B89A1DBC2DD781F3FB0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4067fc7f-b703-3c62-828d-ce6a2ee2cf93.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 69.66.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:4b:89:a1:db:c2:dd:78:1f:3f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=d53ff012-a9df-4637-b7d9-dfa0f37babd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a4:be:d5:d7:da:e4:85:6c:6b:db:e7:2a:cc: e7:42:b8:ea:c7:fa:fd:6c:64:39:c1:c4:0d:47:f9: db:1e:5d:11:3a:a2:d0:66:a6:09:39:76:21:8f:13: 71:09:49:4d:0d:8e:df:8b:34:54:e1:18:ca:8c:35: a8:60:4d:c9:da:af:54:5d:7e:21:43:85:e1:33:11: 6f:68:9c:89:b8:e9:82:68:3d:fd:54:b2:8e:26:8a: 79:69:5a:bc:6b:de:e9:9e:f6:a2:b3:d5:8a:cc:5e: 40:0c:f2:0f:88:04:32:e8:71:cf:87:39:5f:d6:c3: db:79:cb:fc:01:cd:f0:46:8b:dc:43:43:ab:b5:2d: e3:21:ec:c8:cd:29:f7:a6:26:8e:75:6f:da:81:91: ef:70:4c:f1:a7:6a:a0:1c:2a:04:53:79:6c:d4:00: 4a:ed:5a:31:89:23:cb:f1:92:bf:3e:f2:2c:28:83: 7f:11:6f:f1:d7:b5:4e:59:c9:36:aa:df:09:88:da: a4:4f:d1:81:e7:90:1b:44:18:7e:03:c0:7f:98:55: d9:44:28:8b:d5:3a:97:52:ab:42:ad:84:57:a6:58: 32:38:fc:1b:3a:29:f3:dd:55:f3:38:ea:1e:42:d4: 9c:a1:7e:88:2d:22:31:ac:3e:28:fb:c8:7b:0c:e7: 69:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:48:D2:49:93:C2:F0:84:EB:EB:75:62:96:9D:B1:68:B8:99:D5:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4067fc7f-b703-3c62-828d-ce6a2ee2cf93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:00:30:af:1d:2c:69:b9:07:cc:b8:90:b3:61:b0:17:3f:8c: c5:bd:79:9a:6e:10:70:e2:85:39:7c:fd:a1:9c:88:8d:04:4e: e3:64:ba:11:5b:e6:a5:43:bf:fa:be:57:e1:0e:31:da:cc:a6: 41:73:4a:56:54:80:8f:80:23:25:48:4d:58:f1:17:3e:d4:43: d2:40:9b:f1:f3:8b:de:79:0a:76:63:f0:5d:7a:3a:ef:52:c5: 6a:e2:71:a2:d8:9f:03:4a:3b:db:68:c9:a0:ab:5e:7b:0c:74: d0:5e:47:bf:a0:7a:9c:00:fe:c4:cc:79:b1:50:20:58:b1:4d: 8a:9b:6d:83:c1:82:a1:21:58:03:21:5a:9c:d6:c5:4e:86:2e: 0c:5f:79:ac:c4:84:ef:dd:68:0a:4f:69:82:46:c0:f2:4b:d9: e1:c1:6a:0d:49:23:99:50:41:d5:c1:bd:d9:1a:f7:b6:0f:07: 72:8c:1b:30:d5:2c:e9:c0:94:d6:27:bb:3c:b0:2c:25:76:92: 0f:a1:25:e1:f8:ec:f9:51:8e:0f:b2:ee:e6:e4:05:d0:b8:82: 33:79:a1:cf:0b:1d:03:12:2f:ae:32:41:b4:b2:02:d4:56:a8: f4:3b:c1:7d:32:ad:f3:41:43:6b:e6:1a:0a:4e:13:32:ff:ee: c7:d6:99:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEuJodvC3XgfP7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ZDUzZmYwMTItYTlkZi00NjM3LWI3ZDktZGZhMGYzN2JhYmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6S+1dfa5IVsa9vnKsznQrjqx/r9bGQ5wcQN R/nbHl0ROqLQZqYJOXYhjxNxCUlNDY7fizRU4RjKjDWoYE3J2q9UXX4hQ4XhMxFv aJyJuOmCaD39VLKOJop5aVq8a97pnvais9WKzF5ADPIPiAQy6HHPhzlf1sPbecv8 Ac3wRovcQ0OrtS3jIezIzSn3piaOdW/agZHvcEzxp2qgHCoEU3ls1ABK7VoxiSPL 8ZK/PvIsKIN/EW/x17VOWck2qt8JiNqkT9GB55AbRBh+A8B/mFXZRCiL1TqXUqtC rYRXplgyOPwbOinz3VXzOOoeQtScoX6ILSIxrD4o+8h7DOdpFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxI0kmTwvCE6+t1YpadsWi4mdXdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDA2N2ZjN2YtYjcwMy0z YzYyLTgyOGQtY2U2YTJlZTJjZjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRUKYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQAMK8dLGm5B8y4kLNhsBc/jMW9eZpuEHDihTl8/aGciI0ETuNkuhFb 5qVDv/q+V+EOMdrMpkFzSlZUgI+AIyVITVjxFz7UQ9JAm/Hzi955CnZj8F16Ou9S xWricaLYnwNKO9toyaCrXnsMdNBeR7+gepwA/sTMebFQIFixTYqbbYPBgqEhWAMh WpzWxU6GLgxfeazEhO/daApPaYJGwPJL2eHBag1JI5lQQdXBvdka97YPB3KMGzDV LOnAlNYnuzywLCV2kg+hJeH47PlRjg+y7ubkBdC4gjN5oc8LHQMSL64yQbSyAtRW qPQ7wX0yrfNBQ2vmGgpOEzL/7sfWmXo= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:29 2025 by rpki-client