$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9239dfe8-fa21-3c6f-8e1a-9982aced14c8.roa File: 9239dfe8-fa21-3c6f-8e1a-9982aced14c8.roa (raw, json) Hash identifier: ONluq71PfKzgLHBQBitL8ExGvdJNm1A1lOklIdUuzXE= Subject key identifier: 44:5D:30:49:4C:FB:DF:8A:B6:1B:5B:93:BC:2A:40:86:EB:28:3B:31 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B95A87EEB993B70EB53CAB0C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9239dfe8-fa21-3c6f-8e1a-9982aced14c8.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7029 IP address blocks: 69.66.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:7e:eb:99:3b:70:eb:53:ca:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=4ab1ecd8-898e-4998-bd98-6b88a8b72da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1c:82:f5:76:bd:ad:91:d8:68:02:0a:fe:83: 81:95:8c:83:49:57:ab:7c:6f:e0:d4:8c:58:43:bc: e3:6f:f7:01:88:ff:3f:e0:6b:94:1e:59:21:1a:00: 42:20:1a:21:21:3d:da:12:47:b3:90:55:c5:45:85: fa:fc:71:a3:d0:12:f5:9a:ef:bd:52:d6:00:f5:95: 4d:70:ef:46:d9:5c:4a:6d:31:37:9e:0a:73:a6:fd: 90:62:a7:92:81:03:39:80:0f:c5:ec:10:0c:40:cd: 1f:ea:b2:63:52:0c:8f:39:46:4b:95:67:7a:51:b4: 3d:61:43:c2:f2:23:4f:0c:4d:ce:7c:c9:99:1c:58: dd:18:e0:c5:47:a1:00:0c:d2:42:a5:13:32:83:03: 4f:72:f5:c8:c0:5c:b0:a5:b2:23:0d:82:b2:86:3c: 13:b4:36:5e:ea:10:f0:7c:ad:48:a7:c4:86:75:3d: cb:2a:d6:c6:5c:14:5c:d8:58:98:65:e9:12:6d:a4: 90:dc:20:c4:55:3b:27:e9:7b:89:53:2b:68:85:fd: e9:81:1e:84:e5:8b:cf:bf:b7:ae:a6:84:88:6b:a0: ba:9c:f4:14:1e:37:6a:27:f1:98:b4:25:cc:21:07: 26:f8:93:0e:b6:dd:f6:e0:f1:fd:34:6c:c2:d5:f0: b1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5D:30:49:4C:FB:DF:8A:B6:1B:5B:93:BC:2A:40:86:EB:28:3B:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9239dfe8-fa21-3c6f-8e1a-9982aced14c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:43:f9:57:87:af:83:a0:2a:ae:a1:e3:15:a9:2c:3e:00:05: e0:68:83:c9:b8:72:c9:d1:80:5b:33:66:a2:92:4e:ec:7f:95: d6:ed:cd:26:13:5b:33:6a:de:10:18:ed:d0:80:94:41:aa:26: 0b:a5:74:e0:f3:ef:d9:01:52:bf:de:aa:ff:74:80:24:e4:28: 07:dd:10:e6:07:dc:a4:a1:23:5f:c3:38:6a:d1:1a:c4:09:c8: 5b:20:47:ae:95:53:2b:ac:76:51:fb:cc:d2:46:d7:0c:89:9f: da:57:8a:36:6a:45:5c:6b:ac:a2:9b:c9:ae:9a:ff:56:1b:b3: 89:62:cd:b3:2a:1a:52:ff:60:ff:90:5b:e2:2f:83:c9:23:1f: bf:4d:28:44:1f:83:b9:68:81:ce:ca:ec:af:96:16:e2:9d:ba: 19:5e:2c:6c:8e:a4:86:87:ad:4b:f4:bb:14:84:c4:53:95:17: 7f:63:93:d3:5a:69:ce:89:69:01:08:5a:96:a5:df:ca:5b:3c: cf:e9:e8:81:35:26:c8:33:e3:b3:a2:6a:00:dd:cb:ac:a6:1c: b2:70:ef:20:c0:74:ba:04:5d:a6:fd:11:ca:08:ea:b8:27:b5: a1:22:9e:50:1c:33:9b:bb:83:7b:48:3d:73:33:ea:05:7b:d3: 88:a4:31:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqH7rmTtw61PKsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NGFiMWVjZDgtODk4ZS00OTk4LWJkOTgtNmI4OGE4YjcyZGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhyC9Xa9rZHYaAIK/oOBlYyDSVerfG/g1IxY Q7zjb/cBiP8/4GuUHlkhGgBCIBohIT3aEkezkFXFRYX6/HGj0BL1mu+9UtYA9ZVN cO9G2VxKbTE3ngpzpv2QYqeSgQM5gA/F7BAMQM0f6rJjUgyPOUZLlWd6UbQ9YUPC 8iNPDE3OfMmZHFjdGODFR6EADNJCpRMygwNPcvXIwFywpbIjDYKyhjwTtDZe6hDw fK1Ip8SGdT3LKtbGXBRc2FiYZekSbaSQ3CDEVTsn6XuJUytohf3pgR6E5YvPv7eu poSIa6C6nPQUHjdqJ/GYtCXMIQcm+JMOtt324PH9NGzC1fCxLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERdMElM+9+Kthtbk7wqQIbrKDsxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTIzOWRmZTgtZmEyMS0z YzZmLThlMWEtOTk4MmFjZWQxNGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRUKsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5D+VeHr4OgKq6h4xWpLD4ABeBog8m4csnRgFszZqKSTux/ldbtzSYT WzNq3hAY7dCAlEGqJguldODz79kBUr/eqv90gCTkKAfdEOYH3KShI1/DOGrRGsQJ yFsgR66VUyusdlH7zNJG1wyJn9pXijZqRVxrrKKbya6a/1Ybs4lizbMqGlL/YP+Q W+Ivg8kjH79NKEQfg7logc7K7K+WFuKduhleLGyOpIaHrUv0uxSExFOVF39jk9Na ac6JaQEIWpal38pbPM/p6IE1Jsgz47OiagDdy6ymHLJw7yDAdLoEXab9EcoI6rgn taEinlAcM5u7g3tIPXMz6gV704ikMfU= -----END CERTIFICATE-----Generated at Tue Nov 4 16:58:57 2025 by rpki-client