$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84370759-4ae0-3a58-8003-564fe29685a3.roa File: 84370759-4ae0-3a58-8003-564fe29685a3.roa (raw, json) Hash identifier: ONL/a1t0kxbkHzb7KOWMv9xA3NHAafbIGXwF4JFIhj0= Subject key identifier: 75:99:54:B9:82:D7:22:19:5B:07:7A:B5:EB:BE:77:8A:C5:04:88:56 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE404B0E152A624C94B4CE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84370759-4ae0-3a58-8003-564fe29685a3.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 69.40.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:4b:0e:15:2a:62:4c:94:b4:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=427b5e5f-9c99-41aa-bd52-32293b963607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:15:40:66:e1:d4:bb:0a:df:d6:bc:41:4f:cf: 62:5a:ec:2e:2f:96:d0:a3:8a:cf:1e:ec:52:e9:ae: 99:ea:1b:85:39:46:97:9b:aa:0e:04:ad:fb:c7:1b: af:bc:35:38:66:58:11:fe:67:6c:f0:40:8f:b4:d9: 0a:88:a0:68:38:bd:ad:d1:c3:75:a0:d6:fc:d5:52: 6d:4d:9a:3c:38:01:3f:b1:2c:02:1c:ce:30:69:be: df:5a:23:bb:87:33:ef:04:16:15:04:c7:ed:29:0c: 36:fb:a7:09:97:76:4c:9e:fe:37:10:c5:0c:8a:e2: b7:77:14:38:68:57:15:7f:33:dc:0b:66:70:0a:a7: 4e:9b:b9:ad:f0:b7:76:a6:8f:60:06:91:88:37:0f: 69:05:50:bf:5a:84:5f:e0:b8:79:e6:8d:b2:f4:b2: b9:91:27:d7:0b:2d:7a:2b:89:f7:e0:5a:f1:ad:55: 7a:17:51:fc:2d:6c:6d:f2:6e:06:01:a2:f9:11:d6: 01:ad:e1:37:be:61:c5:3f:c6:47:19:2b:75:b4:06: ee:31:0c:ee:04:58:c2:35:dc:b7:6a:c5:f0:3a:58: 3c:c5:47:cc:62:eb:b9:b9:06:94:3d:ee:94:04:82: 1f:03:eb:3d:ea:c1:56:dd:63:50:07:e4:30:2a:71: da:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:99:54:B9:82:D7:22:19:5B:07:7A:B5:EB:BE:77:8A:C5:04:88:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84370759-4ae0-3a58-8003-564fe29685a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:b5:e8:73:e2:8e:cd:0b:80:3b:29:23:c5:d3:3a:e8:9d:54: 92:fa:6b:90:d4:7e:96:c0:fe:22:bf:64:c8:06:01:66:09:e4: a9:05:99:f1:7f:10:44:37:cc:e7:2d:ba:cd:58:f5:0b:08:c6: dd:d6:cc:d8:d5:39:b8:a4:29:47:62:cc:65:6c:e9:4e:29:9b: bc:fb:9d:d9:48:5c:0b:d1:a9:06:60:ca:0c:24:02:c9:98:ce: a0:9c:33:b4:8c:df:4d:9a:40:d2:33:da:e2:9d:23:39:fd:62: f6:8d:7c:91:5f:c2:1d:5f:aa:de:c7:07:5a:68:5c:99:0b:05: dc:89:3f:b0:57:a0:eb:b0:42:eb:41:a9:71:2d:69:3c:3d:6d: 8a:e1:d7:be:6c:9e:86:31:16:34:ec:4d:24:8b:69:c8:1c:04: 58:be:ba:f1:0b:2f:f1:b9:17:d1:24:e6:a5:54:cc:4b:4a:df: 69:37:11:89:97:1e:0f:16:b2:0d:01:1e:58:06:28:cd:a1:6f: cb:fe:01:f7:31:63:5f:76:fd:f4:23:17:5c:7b:91:32:a7:f8: d9:c2:a1:99:57:4d:b4:b8:e4:33:e3:4c:90:56:03:fd:85:6e: 35:16:de:f4:48:54:d5:66:88:a4:f9:4d:ec:4a:58:fa:37:76: 7e:b1:b6:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEsOFSpiTJS0zoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NDI3YjVlNWYtOWM5OS00MWFhLWJkNTItMzIyOTNiOTYzNjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hVAZuHUuwrf1rxBT89iWuwuL5bQo4rPHuxS 6a6Z6huFOUaXm6oOBK37xxuvvDU4ZlgR/mds8ECPtNkKiKBoOL2t0cN1oNb81VJt TZo8OAE/sSwCHM4wab7fWiO7hzPvBBYVBMftKQw2+6cJl3ZMnv43EMUMiuK3dxQ4 aFcVfzPcC2ZwCqdOm7mt8Ld2po9gBpGINw9pBVC/WoRf4Lh55o2y9LK5kSfXCy16 K4n34FrxrVV6F1H8LWxt8m4GAaL5EdYBreE3vmHFP8ZHGSt1tAbuMQzuBFjCNdy3 asXwOlg8xUfMYuu5uQaUPe6UBIIfA+s96sFW3WNQB+QwKnHaxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWZVLmC1yIZWwd6teu+d4rFBIhWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODQzNzA3NTktNGFlMC0z YTU4LTgwMDMtNTY0ZmUyOTY4NWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRSgMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIm16HPijs0LgDspI8XTOuidVJL6a5DUfpbA/iK/ZMgGAWYJ5KkFmfF/ EEQ3zOctus1Y9QsIxt3WzNjVObikKUdizGVs6U4pm7z7ndlIXAvRqQZgygwkAsmY zqCcM7SM302aQNIz2uKdIzn9YvaNfJFfwh1fqt7HB1poXJkLBdyJP7BXoOuwQutB qXEtaTw9bYrh175snoYxFjTsTSSLacgcBFi+uvELL/G5F9Ek5qVUzEtK32k3EYmX Hg8Wsg0BHlgGKM2hb8v+AfcxY192/fQjF1x7kTKn+NnCoZlXTbS45DPjTJBWA/2F bjUW3vRIVNVmiKT5TexKWPo3dn6xtvw= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:58 2025 by rpki-client