$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5786b1b7-df8c-32e9-b0d0-95a207021807.roa File: 5786b1b7-df8c-32e9-b0d0-95a207021807.roa (raw, json) Hash identifier: g+iV2Rx9xCIQ0naAmCBWHg4RvKmFpXd54HyoGQ7030c= Subject key identifier: 19:1D:9D:8B:B1:DA:4C:04:D5:E2:85:BA:78:B7:7B:79:3E:A9:5F:17 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B987247B3779E5C87E52BCB00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5786b1b7-df8c-32e9-b0d0-95a207021807.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 32833 IP address blocks: 66.173.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:47:b3:77:9e:5c:87:e5:2b:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=33b3c317-be33-4665-ba63-9628cd8c2dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a8:47:cf:de:b7:06:1e:bc:83:74:1a:c0:0d: 2c:d6:ec:2b:3c:a6:46:c1:5f:7d:a1:71:de:bb:47: 29:74:b7:87:07:9c:4c:66:b3:ad:10:18:1e:69:05: d6:11:7e:cc:94:3e:06:d2:86:ad:7e:b4:46:44:93: 64:81:16:93:61:89:6b:64:18:6e:61:c9:69:5f:2d: 24:97:80:23:b0:7c:50:9c:6e:a4:d8:04:ee:66:d6: b4:46:71:32:87:22:84:d3:ae:d4:c0:9c:f4:f6:2a: ea:d5:6e:15:7c:ef:20:24:d3:df:13:b7:63:f9:e5: 11:a4:d9:d6:59:29:fd:9c:b4:12:1e:3a:9b:09:b8: 83:ff:8d:62:c7:19:9d:33:31:7a:71:3a:a6:5a:f2: 34:3e:f4:e0:04:b7:85:6a:28:0e:78:74:03:8d:e6: 54:86:a6:be:a7:84:d8:84:86:f7:be:27:10:9c:33: 72:54:0e:98:21:75:e9:fd:d7:30:2a:8d:68:7f:b8: 9e:0e:75:ea:9a:b4:83:b0:20:7d:be:d0:cb:92:f5: 2e:3d:bc:7d:41:1d:80:c1:66:32:af:42:8f:0c:1f: 71:9c:cc:8a:66:8f:f1:06:f1:2f:09:33:7e:8a:63: 46:56:32:53:25:17:3d:e7:46:89:70:13:99:95:89: 04:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1D:9D:8B:B1:DA:4C:04:D5:E2:85:BA:78:B7:7B:79:3E:A9:5F:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5786b1b7-df8c-32e9-b0d0-95a207021807.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.173.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:2e:ce:0a:cc:fb:cf:c2:98:bd:68:10:fb:1e:c9:73:90:89: 02:bc:23:b5:7f:54:bf:b0:6b:20:9c:05:11:33:ec:8f:f6:c1: 48:f8:f8:3b:bf:ff:7e:30:4d:db:74:bb:02:0e:d3:e0:fd:1a: 16:a4:3c:43:d2:eb:57:90:10:d7:ca:fa:bf:ba:ab:b4:27:3f: e0:9f:fd:8c:f5:09:85:42:61:5d:f6:d5:d2:aa:5d:c8:92:aa: 82:bb:56:c9:db:29:41:e5:ff:33:73:4f:1e:b9:f0:cb:bd:39: 8b:a9:3b:4d:6e:8a:56:87:8c:4c:15:bb:2d:9d:48:84:1a:d9: 60:2d:bb:28:a7:4b:3f:e4:4a:e3:1a:63:fe:b6:6c:9d:a9:fb: f2:5d:10:37:f9:85:a0:f4:d6:6d:07:0e:2f:1d:62:1c:04:4a: e6:be:e8:a4:91:7c:07:b5:1a:e0:3c:d9:9c:3b:5b:73:99:4c: 77:79:50:c0:7b:54:4d:b4:2d:26:f6:26:2b:42:78:e6:9e:1e: 8a:7b:50:1e:d9:ec:db:f1:c3:76:36:aa:97:55:29:67:24:79: e0:cc:eb:a9:b6:65:ec:48:c9:50:1a:e0:3a:fc:e9:21:bf:0f: 56:95:bb:fa:0f:f6:55:e8:56:6c:d1:c3:88:92:34:ea:33:b1: cc:59:d9:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckezd55ch+UrywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk MzNiM2MzMTctYmUzMy00NjY1LWJhNjMtOTYyOGNkOGMyZGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqhHz963Bh68g3QawA0s1uwrPKZGwV99oXHe u0cpdLeHB5xMZrOtEBgeaQXWEX7MlD4G0oatfrRGRJNkgRaTYYlrZBhuYclpXy0k l4AjsHxQnG6k2ATuZta0RnEyhyKE067UwJz09irq1W4VfO8gJNPfE7dj+eURpNnW WSn9nLQSHjqbCbiD/41ixxmdMzF6cTqmWvI0PvTgBLeFaigOeHQDjeZUhqa+p4TY hIb3vicQnDNyVA6YIXXp/dcwKo1of7ieDnXqmrSDsCB9vtDLkvUuPbx9QR2AwWYy r0KPDB9xnMyKZo/xBvEvCTN+imNGVjJTJRc950aJcBOZlYkE0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkdnYux2kwE1eKFuni3e3k+qV8XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTc4NmIxYjctZGY4Yy0z MmU5LWIwZDAtOTVhMjA3MDIxODA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQq3cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8uzgrM+8/CmL1oEPseyXOQiQK8I7V/VL+wayCcBREz7I/2wUj4+Du/ /34wTdt0uwIO0+D9GhakPEPS61eQENfK+r+6q7QnP+Cf/Yz1CYVCYV321dKqXciS qoK7VsnbKUHl/zNzTx658Mu9OYupO01uilaHjEwVuy2dSIQa2WAtuyinSz/kSuMa Y/62bJ2p+/JdEDf5haD01m0HDi8dYhwESua+6KSRfAe1GuA82Zw7W3OZTHd5UMB7 VE20LSb2JitCeOaeHop7UB7Z7Nvxw3Y2qpdVKWckeeDM66m2ZexIyVAa4Dr86SG/ D1aVu/oP9lXoVmzRw4iSNOozscxZ2as= -----END CERTIFICATE-----Generated at Wed Nov 5 07:02:51 2025 by rpki-client