$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4b9e3915-4928-3c69-9bdc-338d3c42b386.roa File: 4b9e3915-4928-3c69-9bdc-338d3c42b386.roa (raw, json) Hash identifier: JXi8j71c/H0Om/c6gaFDx5fw+ryyG5RI4tIWwKg+ftM= Subject key identifier: 5A:BB:30:F2:E3:A3:9D:53:58:97:57:DA:86:75:E1:8D:E9:87:51:DF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B0FFA04D0E740A42D48DF8EC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4b9e3915-4928-3c69-9bdc-338d3c42b386.roa Signing time: Tue 02 Sep 2025 15:48:35 +0000 ROA not before: Tue 02 Sep 2025 15:48:35 +0000 ROA not after: Mon 01 Dec 2025 16:48:35 +0000 asID: 203 IP address blocks: 66.84.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:fa:04:d0:e7:40:a4:2d:48:df:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 2 15:48:35 2025 GMT Not After : Dec 1 16:48:35 2025 GMT Subject: CN=7e9c6403-75f9-4714-850c-769db274591f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a5:6d:fc:22:b7:6b:49:a9:dd:8e:f5:15:35: 53:b1:b9:0d:28:d9:00:aa:3f:c5:7c:f4:33:34:f3: b1:9a:5b:64:02:1c:c1:db:1e:18:2e:97:5e:03:f4: ec:a4:cf:68:93:bf:18:2d:bb:56:90:03:af:35:c8: aa:88:04:d4:12:89:9c:4d:56:67:ff:97:0d:89:bc: 13:a1:e9:ea:18:05:09:b3:12:89:11:1c:5a:77:6e: 08:19:8f:ee:29:e4:fa:f7:9d:ae:0b:6c:f9:5e:69: ec:79:65:21:f1:13:e7:23:37:13:b5:c9:5f:33:71: 68:ce:e9:ba:cc:f3:be:d3:98:3a:6d:ac:92:76:0f: d7:9f:f7:62:fd:4b:3d:83:05:cf:32:7b:76:f4:63: a5:74:42:3a:23:9d:9f:42:3d:49:34:74:df:40:e5: 75:6c:cb:3e:77:f6:8e:8f:6f:0e:b9:78:ba:8f:23: 58:18:39:7f:6b:51:41:97:10:c0:b1:5b:81:52:48: 6d:8b:f0:9e:7f:ef:26:46:d4:24:b4:66:26:a8:5f: 22:89:3f:96:10:66:b6:a7:02:89:6a:fa:f4:e2:ce: e2:90:6b:4b:77:9f:88:f2:1d:cc:db:cd:86:5d:05: 31:d1:51:aa:81:72:a6:4e:ad:a9:c4:e0:27:85:e5: fa:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BB:30:F2:E3:A3:9D:53:58:97:57:DA:86:75:E1:8D:E9:87:51:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4b9e3915-4928-3c69-9bdc-338d3c42b386.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.84.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:fb:3d:37:1a:cc:a3:95:5a:36:60:9b:39:8d:b1:6c:ff:96: ba:ef:57:12:d0:c1:52:e3:b1:28:27:37:c0:71:c5:9d:c2:72: 28:3a:81:09:b7:ef:36:a5:dc:6b:8a:3d:93:2a:be:69:74:6c: 41:0c:92:f3:9b:80:73:62:56:e2:cb:3b:07:f1:0d:e9:d0:75: c4:1c:dd:3f:82:ba:16:07:3f:48:84:b4:e8:d4:8f:7e:6b:f0: 14:dc:11:17:5c:bd:61:b0:9b:36:28:8a:26:1d:29:fe:f0:c9: 20:d2:fb:ea:b9:59:14:51:1e:9f:ed:00:65:ba:a4:6a:ec:d7: 45:2b:e3:e7:a3:24:e5:ee:16:5f:c4:f4:ad:64:e2:98:4f:97: d0:ed:25:ef:5c:9c:fe:b6:97:f1:fe:dd:28:d2:da:5c:f8:28: 51:5b:4a:7f:5a:37:17:1b:8d:91:1d:6a:72:76:f7:c4:a7:77: 8a:50:82:61:20:ac:a3:f2:81:20:23:20:cd:67:38:b4:bd:25: c5:d9:cb:21:d8:bc:ba:97:04:3d:eb:aa:1d:75:53:7d:2a:01: f1:0e:cd:fd:df:a8:e5:2e:27:b2:31:c0:94:92:86:42:b3:48: 0e:4f:59:21:ac:c3:2b:7e:4b:82:fc:b0:97:26:0d:86:fe:68: 5a:1c:32:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsP+gTQ50CkLUjfjsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkwMjE1NDgzNVoXDTI1MTIwMTE2NDgzNVowLzEtMCsGA1UEAxMk N2U5YzY0MDMtNzVmOS00NzE0LTg1MGMtNzY5ZGIyNzQ1OTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKVt/CK3a0mp3Y71FTVTsbkNKNkAqj/FfPQz NPOxmltkAhzB2x4YLpdeA/TspM9ok78YLbtWkAOvNciqiATUEomcTVZn/5cNibwT oenqGAUJsxKJERxad24IGY/uKeT6952uC2z5XmnseWUh8RPnIzcTtclfM3Fozum6 zPO+05g6baySdg/Xn/di/Us9gwXPMnt29GOldEI6I52fQj1JNHTfQOV1bMs+d/aO j28OuXi6jyNYGDl/a1FBlxDAsVuBUkhti/Cef+8mRtQktGYmqF8iiT+WEGa2pwKJ avr04s7ikGtLd5+I8h3M282GXQUx0VGqgXKmTq2pxOAnheX6iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFq7MPLjo51TWJdX2oZ14Y3ph1HfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGI5ZTM5MTUtNDkyOC0z YzY5LTliZGMtMzM4ZDNjNDJiMzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlSSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/7PTcazKOVWjZgmzmNsWz/lrrvVxLQwVLjsSgnN8BxxZ3Ccig6gQm3 7zal3GuKPZMqvml0bEEMkvObgHNiVuLLOwfxDenQdcQc3T+CuhYHP0iEtOjUj35r 8BTcERdcvWGwmzYoiiYdKf7wySDS++q5WRRRHp/tAGW6pGrs10Ur4+ejJOXuFl/E 9K1k4phPl9DtJe9cnP62l/H+3SjS2lz4KFFbSn9aNxcbjZEdanJ298Snd4pQgmEg rKPygSAjIM1nOLS9JcXZyyHYvLqXBD3rqh11U30qAfEOzf3fqOUuJ7IxwJSShkKz SA5PWSGswyt+S4L8sJcmDYb+aFocMkA= -----END CERTIFICATE-----Generated at Wed Nov 5 02:29:39 2025 by rpki-client