$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ade62d43-8160-3a6f-a892-94c41cddd2b7.roa File: ade62d43-8160-3a6f-a892-94c41cddd2b7.roa (raw, json) Hash identifier: 4xEycY69FZRJCoHVTwmnMiLH6VBnWg2u6g2nRODhxLk= Subject key identifier: C7:4C:B0:9D:9F:02:89:C2:B0:D1:61:19:84:A7:97:8D:2F:D9:77:F9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF3CF55379A5C3A0EA0B0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ade62d43-8160-3a6f-a892-94c41cddd2b7.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 66.202.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f3:cf:55:37:9a:5c:3a:0e:a0:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=0e95620e-1f61-4f5c-a05c-ec2a287f0528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:20:a6:87:86:27:14:27:56:72:79:a0:1c:b5: c9:22:3a:40:db:b8:d2:41:c2:2d:5f:d6:ee:4d:29: 92:c4:91:b5:43:eb:53:17:2a:16:09:32:f0:6a:dc: 04:b1:99:cb:87:57:89:0d:67:96:3a:ba:94:6d:7c: 75:4b:62:95:a0:89:72:51:8f:c0:4e:f6:e5:eb:62: df:96:d0:84:6e:a1:3e:eb:7b:88:5a:6d:64:f6:e7: fe:33:3a:c0:a6:f0:b5:7c:78:f6:2a:de:6f:e0:56: 98:f7:e4:5b:95:9b:03:d1:4b:25:2e:c2:a8:ae:7e: b0:1e:8d:21:b7:bf:5b:6d:06:af:f8:18:ff:1a:44: dd:37:8b:6a:78:a6:41:2f:e4:0a:5c:22:30:3f:46: 16:18:7f:af:d8:d4:53:d0:77:ec:c7:7d:0c:25:34: 25:95:29:61:e0:71:b5:99:28:2e:5c:16:d3:b8:bc: d2:03:6f:44:3a:a8:92:4d:9e:6d:ad:91:98:0d:2b: a4:e5:fa:53:04:68:62:8c:de:76:ed:46:df:6a:69: c4:76:c9:92:70:69:de:88:93:1e:b7:02:b5:2b:3a: f2:a4:76:0f:00:29:24:80:5e:b7:53:68:48:c6:6a: 94:a8:f5:d3:1d:3a:b5:cc:41:e6:69:60:41:79:3a: a7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4C:B0:9D:9F:02:89:C2:B0:D1:61:19:84:A7:97:8D:2F:D9:77:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ade62d43-8160-3a6f-a892-94c41cddd2b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.202.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:5f:71:b3:09:5c:84:a6:52:37:bd:b1:06:06:e9:11:9d:51: d9:83:72:45:52:a8:df:b1:cd:6e:89:31:bb:5c:aa:01:d0:5b: 48:a1:33:69:02:70:20:e7:0d:ce:ba:e1:e1:49:d8:5f:e9:44: c6:29:16:02:3e:06:80:74:52:7a:58:eb:e7:22:54:88:0d:2f: 91:32:f4:ec:9f:9d:15:ff:52:a2:42:ff:f7:88:9b:bc:01:bd: 31:2f:b2:77:bb:0f:1d:7d:c3:37:34:30:98:97:3e:14:3f:c2: d4:8c:29:24:97:2c:c5:19:0a:d8:3b:b0:1e:6f:db:55:32:52: 19:9a:8c:ce:25:16:e9:fa:23:ec:c1:de:ab:97:08:43:2a:3e: b1:71:ac:b5:4f:bb:b5:b9:c7:e2:86:1d:ed:1d:d7:73:15:6e: f8:2b:54:a2:c2:a5:9e:90:f9:fe:51:db:0f:ca:57:be:0b:7b: 1e:a2:8f:90:13:fd:e3:73:f6:90:f5:b1:d5:d0:fd:0f:f1:bb: f4:d9:c6:87:ab:1c:18:de:d0:32:05:ac:79:5b:9f:84:66:88: 63:86:4f:1c:62:66:9b:52:d5:52:bc:02:a1:4c:ea:d9:16:28: 76:ae:7a:03:1c:de:0d:e6:8c:1f:38:82:32:fd:a6:58:50:70: a7:83:e6:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPPPVTeaXDoOoLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MGU5NTYyMGUtMWY2MS00ZjVjLWEwNWMtZWMyYTI4N2YwNTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yCmh4YnFCdWcnmgHLXJIjpA27jSQcItX9bu TSmSxJG1Q+tTFyoWCTLwatwEsZnLh1eJDWeWOrqUbXx1S2KVoIlyUY/ATvbl62Lf ltCEbqE+63uIWm1k9uf+MzrApvC1fHj2Kt5v4FaY9+RblZsD0UslLsKorn6wHo0h t79bbQav+Bj/GkTdN4tqeKZBL+QKXCIwP0YWGH+v2NRT0Hfsx30MJTQllSlh4HG1 mSguXBbTuLzSA29EOqiSTZ5trZGYDSuk5fpTBGhijN527UbfamnEdsmScGneiJMe twK1KzrypHYPACkkgF63U2hIxmqUqPXTHTq1zEHmaWBBeTqn/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdMsJ2fAonCsNFhGYSnl40v2Xf5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWRlNjJkNDMtODE2MC0z YTZmLWE4OTItOTRjNDFjZGRkMmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQsoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtfcbMJXISmUje9sQYG6RGdUdmDckVSqN+xzW6JMbtcqgHQW0ihM2kC cCDnDc664eFJ2F/pRMYpFgI+BoB0UnpY6+ciVIgNL5Ey9OyfnRX/UqJC//eIm7wB vTEvsne7Dx19wzc0MJiXPhQ/wtSMKSSXLMUZCtg7sB5v21UyUhmajM4lFun6I+zB 3quXCEMqPrFxrLVPu7W5x+KGHe0d13MVbvgrVKLCpZ6Q+f5R2w/KV74Lex6ij5AT /eNz9pD1sdXQ/Q/xu/TZxoerHBje0DIFrHlbn4RmiGOGTxxiZptS1VK8AqFM6tkW KHauegMc3g3mjB84gjL9plhQcKeD5hg= -----END CERTIFICATE-----Generated at Tue Nov 4 16:57:09 2025 by rpki-client