$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/690cf52b-ac9d-38bd-adf9-63184043474f.roa File: 690cf52b-ac9d-38bd-adf9-63184043474f.roa (raw, json) Hash identifier: FdZs8nPuhQQuJH47HTafLF/6b+45LcTTEPTdg+P5MdA= Subject key identifier: A4:0F:F5:F4:B2:C0:C0:22:D3:CE:20:8A:DD:A4:8D:B4:8E:F3:87:62 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2C9BEA4A9DCC30F22F0180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/690cf52b-ac9d-38bd-adf9-63184043474f.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 66.153.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:9b:ea:4a:9d:cc:30:f2:2f:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=8a99996f-b7cf-4459-b324-b6e5522b6154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:eb:fa:f7:e4:09:0d:84:08:f2:78:0b:bf:f4: 08:07:6a:20:db:87:c6:d8:ee:0d:94:d3:cf:f1:ed: f0:23:4a:3e:ef:f1:62:b9:c0:f7:4c:1f:68:a4:75: ff:02:ad:61:16:b0:2f:ba:93:f4:03:78:6d:72:5d: 53:d6:19:b4:b4:27:dd:b2:f2:8f:36:9a:a5:8d:53: 84:bd:d1:44:4a:d1:c6:ab:7e:51:8a:0b:61:82:1b: 57:3e:86:7b:91:70:72:cf:db:ed:5f:10:08:af:6c: d4:b6:01:e4:dd:c3:f5:59:7d:80:8c:ee:0c:70:d0: 5c:e0:0c:93:f6:a1:cc:ba:80:31:d3:bc:09:47:7e: bb:12:ca:d1:df:0d:a8:22:54:a1:9d:e0:ec:6c:21: 05:96:73:4f:97:00:5f:23:ec:c8:fc:49:f5:53:e3: 01:d8:9f:7e:1f:e4:23:46:87:0e:de:32:7c:32:61: e1:a1:b2:f3:6e:08:47:46:e3:85:6c:e6:d0:3e:54: 28:10:c7:ac:b4:86:02:e1:e8:ab:76:c0:4b:ec:a4: 7f:b9:c5:bf:4f:77:cb:43:b1:97:66:1d:ce:17:88: a2:fe:fc:2f:6c:84:e7:be:e8:94:89:42:b8:0f:35: eb:1c:28:26:ed:f3:b5:18:bd:cf:4e:3d:c4:1d:75: c7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:0F:F5:F4:B2:C0:C0:22:D3:CE:20:8A:DD:A4:8D:B4:8E:F3:87:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/690cf52b-ac9d-38bd-adf9-63184043474f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.153.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:7f:0e:53:c2:c3:16:43:39:46:7f:17:e5:52:fb:5c:a7:f3: 67:70:88:ce:f0:a5:36:67:2d:cf:ca:f1:70:c2:86:f9:67:03: 29:08:f3:f5:e1:38:c3:c5:9b:b7:69:71:5b:d1:26:4a:54:fe: 61:88:70:c4:d0:7d:22:69:f9:bd:f5:84:69:83:d9:0d:db:41: c6:6d:f0:77:aa:62:4d:72:18:2a:57:b8:76:b4:35:ed:c4:27: 3e:1a:54:15:50:4a:32:78:df:f3:18:73:b1:df:01:d3:e7:98: 2f:5b:b4:40:99:bd:d5:68:d6:2a:70:d3:ff:c4:7d:5a:26:1b: 07:76:cc:84:27:54:5c:0b:61:c4:df:e7:20:a2:f0:aa:52:54: f1:8e:22:46:90:9b:c6:ab:26:95:e0:27:2c:00:bc:f1:34:5b: 9d:ce:38:42:f9:a9:c2:bb:9d:62:5d:f9:45:50:67:a9:d6:15: b7:35:2b:d3:bc:31:c9:af:53:fa:2f:08:c9:99:63:73:ff:02: 64:0a:f2:8d:e9:a3:db:73:9e:93:0c:7f:a1:eb:af:df:ba:dc: 23:40:b8:dd:30:9e:ff:a4:ab:a4:f8:e9:9d:2d:3b:da:48:12: 59:ff:6b:56:31:35:e3:ae:cd:06:8d:a1:57:24:07:db:87:e0: 57:b4:9f:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLJvqSp3MMPIvAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk OGE5OTk5NmYtYjdjZi00NDU5LWIzMjQtYjZlNTUyMmI2MTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmev69+QJDYQI8ngLv/QIB2og24fG2O4NlNPP 8e3wI0o+7/FiucD3TB9opHX/Aq1hFrAvupP0A3htcl1T1hm0tCfdsvKPNpqljVOE vdFEStHGq35RigthghtXPoZ7kXByz9vtXxAIr2zUtgHk3cP1WX2AjO4McNBc4AyT 9qHMuoAx07wJR367EsrR3w2oIlShneDsbCEFlnNPlwBfI+zI/En1U+MB2J9+H+Qj RocO3jJ8MmHhobLzbghHRuOFbObQPlQoEMestIYC4eirdsBL7KR/ucW/T3fLQ7GX Zh3OF4ii/vwvbITnvuiUiUK4DzXrHCgm7fO1GL3PTj3EHXXHjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQP9fSywMAi084git2kjbSO84diMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjkwY2Y1MmItYWM5ZC0z OGJkLWFkZjktNjMxODQwNDM0NzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQpktMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACR/DlPCwxZDOUZ/F+VS+1yn82dwiM7wpTZnLc/K8XDChvlnAykI8/Xh OMPFm7dpcVvRJkpU/mGIcMTQfSJp+b31hGmD2Q3bQcZt8HeqYk1yGCpXuHa0Ne3E Jz4aVBVQSjJ43/MYc7HfAdPnmC9btECZvdVo1ipw0//EfVomGwd2zIQnVFwLYcTf 5yCi8KpSVPGOIkaQm8arJpXgJywAvPE0W53OOEL5qcK7nWJd+UVQZ6nWFbc1K9O8 McmvU/ovCMmZY3P/AmQK8o3po9tznpMMf6Hrr9+63CNAuN0wnv+kq6T46Z0tO9pI Eln/a1YxNeOuzQaNoVckB9uH4Fe0n/M= -----END CERTIFICATE-----Generated at Tue Nov 4 17:00:02 2025 by rpki-client