$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6902b34f-447e-3d28-bb42-2d8e55ad7984.roa File: 6902b34f-447e-3d28-bb42-2d8e55ad7984.roa (raw, json) Hash identifier: BHhBBvK5JqaBW3DHlM1PvOZOAcPVoHxkvx/Hb9Mk0jA= Subject key identifier: 9B:B3:8C:2B:53:A4:92:74:69:EC:7E:CD:F2:9C:BC:75:07:7E:C8:7A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CD5EB9F7F0B1ED5C36900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6902b34f-447e-3d28-bb42-2d8e55ad7984.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 394609 IP address blocks: 66.0.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:d5:eb:9f:7f:0b:1e:d5:c3:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=0d326cc5-03c3-447c-98c0-bad664680afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bc:be:25:26:52:d5:cd:d3:5f:c0:6f:9d:96: 5e:e9:cb:71:1d:5a:79:e3:a3:9f:5e:a0:00:d9:f6: d6:49:f3:6e:e1:d3:d3:a4:e4:20:cb:c9:71:6d:8f: b2:be:d7:3f:f3:87:bd:3c:16:34:3d:ad:00:6f:06: c9:6e:b3:0c:f6:53:d2:d1:cd:17:48:a0:73:a4:3a: 45:4a:1d:7b:79:60:f8:07:fe:b9:4c:a6:b5:8f:8b: 1a:b1:5c:6b:9a:a6:14:75:a2:e2:f7:dd:a1:d6:19: 86:50:90:0e:d3:87:91:da:1f:da:18:a6:8a:6a:72: 4d:a1:4b:e7:38:3c:85:b9:68:d6:a2:dd:56:83:db: 65:f2:d6:6e:0a:f8:6a:92:66:c7:df:82:69:f2:d4: f7:2f:86:db:ea:42:89:81:ec:a0:38:de:c4:c3:1b: 6a:f4:73:7f:9d:57:62:57:e9:28:c6:59:a5:fb:86: 14:0c:1c:8b:28:24:0a:ce:00:bd:28:c5:76:5f:e6: a8:c5:10:2f:c2:07:d3:ca:31:8e:e6:a5:e0:14:35: d4:78:eb:62:d4:e7:bf:b5:34:6e:4c:6a:c0:f9:c4: 82:7e:da:b1:f3:3c:6f:94:bc:57:c2:8c:bd:ec:90: 0b:9f:6d:4d:77:93:ef:48:11:03:7f:24:71:5c:61: 46:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B3:8C:2B:53:A4:92:74:69:EC:7E:CD:F2:9C:BC:75:07:7E:C8:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6902b34f-447e-3d28-bb42-2d8e55ad7984.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.0.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:69:fc:6e:83:50:af:b7:e9:47:23:08:ac:52:da:3a:a5:0e: b5:75:92:28:1d:d2:57:09:56:43:78:92:32:52:c8:40:7b:dd: f6:de:8b:27:55:0d:bb:06:04:b1:b0:7e:4e:b1:83:01:c2:61: 90:75:2e:ec:38:41:32:4b:a4:38:89:27:1c:ff:a6:20:6f:ea: 54:c8:80:75:00:13:ff:68:6d:72:8d:3e:02:10:ce:ba:79:69: 40:b2:d7:5b:f7:60:d8:27:78:ee:e7:fc:91:de:40:ea:46:24: 8d:28:67:72:a6:f3:ff:a7:29:67:2e:e8:33:6d:16:f5:46:6b: 47:b3:8c:39:30:7a:0c:fb:31:ab:8b:10:62:95:ac:4c:59:5a: 1c:28:bd:6f:81:60:64:02:7a:88:47:66:89:f9:83:ac:b4:09: ec:bd:bc:75:3a:70:fd:e2:ec:43:eb:5d:3b:56:f3:49:a5:e7: b5:12:ee:9c:bb:28:ed:cd:e5:13:06:ff:fc:75:1e:f4:98:6f: 3c:b9:81:75:60:63:7f:16:1b:49:9c:80:0f:be:e5:9e:71:ae: 09:af:ac:50:42:9e:b8:db:3f:56:98:1d:1d:ca:0a:01:c2:e7: fc:3f:32:95:1c:03:62:dd:36:2a:a1:ff:a1:36:1e:52:00:71: fb:4d:ef:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXNXrn38LHtXDaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MGQzMjZjYzUtMDNjMy00NDdjLTk4YzAtYmFkNjY0NjgwYWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwby+JSZS1c3TX8BvnZZe6ctxHVp546OfXqAA 2fbWSfNu4dPTpOQgy8lxbY+yvtc/84e9PBY0Pa0AbwbJbrMM9lPS0c0XSKBzpDpF Sh17eWD4B/65TKa1j4sasVxrmqYUdaLi992h1hmGUJAO04eR2h/aGKaKanJNoUvn ODyFuWjWot1Wg9tl8tZuCvhqkmbH34Jp8tT3L4bb6kKJgeygON7Ewxtq9HN/nVdi V+koxlml+4YUDByLKCQKzgC9KMV2X+aoxRAvwgfTyjGO5qXgFDXUeOti1Oe/tTRu TGrA+cSCftqx8zxvlLxXwoy97JALn21Nd5PvSBEDfyRxXGFGBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuzjCtTpJJ0aex+zfKcvHUHfsh6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjkwMmIzNGYtNDQ3ZS0z ZDI4LWJiNDItMmQ4ZTU1YWQ3OTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQgB9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxp/G6DUK+36UcjCKxS2jqlDrV1kigd0lcJVkN4kjJSyEB73fbeiydV DbsGBLGwfk6xgwHCYZB1Luw4QTJLpDiJJxz/piBv6lTIgHUAE/9obXKNPgIQzrp5 aUCy11v3YNgneO7n/JHeQOpGJI0oZ3Km8/+nKWcu6DNtFvVGa0ezjDkwegz7MauL EGKVrExZWhwovW+BYGQCeohHZon5g6y0Cey9vHU6cP3i7EPrXTtW80ml57US7py7 KO3N5RMG//x1HvSYbzy5gXVgY38WG0mcgA++5Z5xrgmvrFBCnrjbP1aYHR3KCgHC 5/w/MpUcA2LdNiqh/6E2HlIAcftN7/I= -----END CERTIFICATE-----Generated at Wed Nov 5 01:34:58 2025 by rpki-client