$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/53f53f3e-52d0-3160-85a6-218a002fc7d3.roa File: 53f53f3e-52d0-3160-85a6-218a002fc7d3.roa (raw, json) Hash identifier: wNiUSqzYN6BMuWLR122A1NR4q3zyHtuoZmxSy3viviE= Subject key identifier: 66:25:47:F2:03:0D:81:86:FE:62:3E:BD:BF:47:81:E3:C5:99:2B:92 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CD128F47C44EC9D29B600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/53f53f3e-52d0-3160-85a6-218a002fc7d3.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 22773 IP address blocks: 166.102.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:d1:28:f4:7c:44:ec:9d:29:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=b857537e-471c-49b3-8788-cf02b0f57491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e2:51:7c:33:8f:b8:95:9c:0b:a9:51:06:48: a8:b2:c0:59:9c:08:33:49:f5:73:67:4b:76:e8:fd: dd:68:03:1e:60:cd:46:8b:24:24:35:83:45:5d:b8: fd:c1:7d:15:d9:e8:3d:87:60:df:e4:89:1b:9d:6c: 16:56:24:1f:32:52:85:2b:31:d0:30:82:55:21:77: d9:7b:3e:80:30:4b:52:d4:3c:14:e2:f0:6d:44:f9: 86:ac:f7:67:f3:89:51:5c:5c:37:07:eb:dc:4f:49: b3:84:a1:61:60:ac:e3:00:01:ac:00:67:d4:59:71: e8:4c:ac:e2:11:f3:3e:85:69:da:7b:3e:20:4d:da: ca:db:17:07:5a:ec:dd:7a:6a:50:80:c8:d3:05:16: 5c:54:d8:33:ed:ee:b8:63:0d:07:e8:9d:6f:18:f2: b2:6d:62:40:48:72:a8:94:24:e7:b7:e6:a1:2a:d6: 94:d3:ed:d4:02:28:34:a0:6f:b1:8e:df:20:26:e1: e7:43:88:91:ba:20:95:de:21:a9:25:25:51:c7:c5: 53:62:59:a2:d6:11:41:77:90:2c:0a:51:dc:b4:d8: 84:7d:3a:b8:9a:d3:38:e4:19:ee:98:e6:15:da:5d: 1b:b6:55:7b:6d:18:85:89:7a:d3:6f:8f:59:60:8c: 23:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:25:47:F2:03:0D:81:86:FE:62:3E:BD:BF:47:81:E3:C5:99:2B:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/53f53f3e-52d0-3160-85a6-218a002fc7d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.102.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:e6:cb:c6:3c:2e:0a:f2:2d:d2:74:e5:26:76:ed:f5:a4:db: c2:d7:3a:48:a2:06:8d:c2:21:b2:59:85:25:8a:41:31:22:b3: fd:05:5d:54:2d:51:9d:44:41:17:4b:08:f8:39:fe:9b:05:3e: 48:4c:51:0d:ca:8e:5e:68:c4:d4:9b:6f:5c:90:be:6f:21:45: 27:86:43:e7:49:6e:00:1a:fe:80:60:e0:15:b8:7d:16:90:a8: 49:63:1b:a8:27:50:ce:2f:9c:ae:53:e0:d4:6f:02:20:82:d5: 94:42:69:52:fe:fe:04:7e:ac:94:fd:3d:ed:14:dd:9b:4e:0f: 28:6b:3e:cf:09:ad:d9:ce:f2:ff:6d:64:b6:ed:e6:4d:78:1b: 1e:63:8a:0a:e4:a5:de:1c:44:97:a6:79:a1:02:a7:d4:65:ee: 7f:08:4e:81:cd:ca:d4:95:a0:5c:3d:d2:9b:f5:0e:c7:21:37: ec:77:c0:84:66:11:bf:f4:23:d6:74:84:bc:e1:b2:6c:56:ff: 7e:c5:89:ef:37:c9:60:ec:3f:79:17:f0:5b:a9:a7:d4:69:ba: 10:67:51:56:da:2f:cc:0e:67:2f:21:42:0e:d8:b2:06:35:ef: e7:ce:bd:93:e8:8c:32:13:ce:31:b6:b1:4d:75:60:92:32:67: c4:4a:c8:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXNEo9HxE7J0ptgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk Yjg1NzUzN2UtNDcxYy00OWIzLTg3ODgtY2YwMmIwZjU3NDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OJRfDOPuJWcC6lRBkiossBZnAgzSfVzZ0t2 6P3daAMeYM1GiyQkNYNFXbj9wX0V2eg9h2Df5IkbnWwWViQfMlKFKzHQMIJVIXfZ ez6AMEtS1DwU4vBtRPmGrPdn84lRXFw3B+vcT0mzhKFhYKzjAAGsAGfUWXHoTKzi EfM+hWnaez4gTdrK2xcHWuzdempQgMjTBRZcVNgz7e64Yw0H6J1vGPKybWJASHKo lCTnt+ahKtaU0+3UAig0oG+xjt8gJuHnQ4iRuiCV3iGpJSVRx8VTYlmi1hFBd5As ClHctNiEfTq4mtM45BnumOYV2l0btlV7bRiFiXrTb49ZYIwjxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYlR/IDDYGG/mI+vb9HgePFmSuSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTNmNTNmM2UtNTJkMC0z MTYwLTg1YTYtMjE4YTAwMmZjN2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApmYJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDmy8Y8LgryLdJ05SZ27fWk28LXOkiiBo3CIbJZhSWKQTEis/0FXVQt UZ1EQRdLCPg5/psFPkhMUQ3Kjl5oxNSbb1yQvm8hRSeGQ+dJbgAa/oBg4BW4fRaQ qEljG6gnUM4vnK5T4NRvAiCC1ZRCaVL+/gR+rJT9Pe0U3ZtODyhrPs8JrdnO8v9t ZLbt5k14Gx5jigrkpd4cRJemeaECp9Rl7n8IToHNytSVoFw90pv1DschN+x3wIRm Eb/0I9Z0hLzhsmxW/37Fie83yWDsP3kX8Fupp9RpuhBnUVbaL8wOZy8hQg7YsgY1 7+fOvZPojDITzjG2sU11YJIyZ8RKyFI= -----END CERTIFICATE-----Generated at Tue Nov 4 21:17:57 2025 by rpki-client