$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cb9299a6-d862-3adf-8b1f-30ac7b29c053.roa File: cb9299a6-d862-3adf-8b1f-30ac7b29c053.roa (raw, json) Hash identifier: dZlA9AG5zYkneo8B75+0tVi8N9jGqO1EcBLIbquuD3E= Subject key identifier: 5C:E7:38:A0:89:ED:31:40:44:7F:AA:38:9A:55:AA:35:CB:C3:8C:B3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B95A8B0B8C1ED7D6D83E0DD00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cb9299a6-d862-3adf-8b1f-30ac7b29c053.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7029 IP address blocks: 69.66.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:b0:b8:c1:ed:7d:6d:83:e0:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=f5e89555-0135-440b-bcd8-09677696306a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bd:28:56:d4:4d:5a:7b:ac:c1:fa:29:28:c1: 38:55:5b:8d:29:a2:9a:7d:ff:c9:c2:8c:14:76:84: e0:4d:c1:25:30:67:42:c0:f7:67:5b:c9:aa:b2:de: 2d:f5:64:e5:39:b0:80:02:a1:0d:4d:98:ff:44:98: cf:0a:18:c3:f1:45:a2:d3:1b:ce:28:f0:dc:2c:58: 5e:f6:00:19:ff:8c:83:e4:89:a4:e2:30:03:a7:56: d9:cd:d6:72:70:a7:6f:ce:b1:65:ad:42:9e:af:0a: 51:ee:74:64:a7:26:ac:ee:a0:f6:d3:f9:27:5b:26: 22:95:91:e7:d2:56:21:2c:42:ef:b8:56:82:e7:58: a7:79:2b:51:22:cf:36:7e:e5:70:ae:1f:10:10:2c: 19:b8:31:13:16:5f:d2:11:ab:cd:65:54:80:ba:fc: 65:13:a8:a1:7e:7d:d3:92:1c:b8:02:ef:fd:77:ad: e6:70:b8:03:70:e6:0a:af:6e:b2:99:55:c9:98:d5: 1a:55:9b:3c:45:ed:1c:96:2d:b0:1c:4e:d3:f5:dc: f8:1b:bd:af:7e:bb:de:c2:9f:e7:84:81:46:0e:a5: eb:3d:c1:94:a9:6d:b2:98:bc:eb:51:18:96:1e:ca: 04:1d:cb:dc:eb:a1:e1:cf:36:f3:a7:44:c8:7d:50: 4f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E7:38:A0:89:ED:31:40:44:7F:AA:38:9A:55:AA:35:CB:C3:8C:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cb9299a6-d862-3adf-8b1f-30ac7b29c053.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:e6:54:41:84:b6:9c:f9:6e:f4:ab:ee:4e:47:bf:e8:9c:53: 3e:f7:d0:f9:0f:d5:32:55:66:0c:e5:64:e7:71:66:a0:1d:39: c0:cb:68:02:4d:5e:47:3d:08:74:be:1d:db:0b:75:0c:23:4d: ef:a4:ee:3d:cb:39:0f:d3:b1:02:87:14:04:26:6e:40:ca:14: e3:47:d7:88:bf:f9:34:51:c0:42:86:bc:e4:a7:64:40:74:6d: 09:e5:a7:a0:af:a4:b9:03:ff:ce:d2:b3:85:67:25:4b:e8:eb: b8:e6:0b:df:3f:5c:a9:53:55:13:81:02:9f:a3:34:3d:c2:ff: 72:00:a8:b3:8a:2a:69:ed:ca:3f:d4:94:f7:4b:4f:0b:5f:32: 24:7d:ec:47:69:bb:a3:39:80:eb:47:04:b8:7a:fa:a4:01:29: 94:4b:61:56:4d:b2:b4:f4:d4:3e:c9:49:7b:79:4f:46:0c:1d: 8e:af:56:1d:fa:0c:0e:7f:3f:6e:62:82:7d:da:8c:e7:c5:28: ef:5c:98:11:b0:d5:38:ad:c7:46:b3:e6:fe:ca:97:40:b5:db: bb:f7:c6:e6:b2:59:c8:63:90:fb:4c:4d:ab:fe:ee:9f:92:c0: 53:e4:30:ea:e1:1b:09:b2:f0:91:02:d6:76:33:11:47:e7:44: 98:d9:c7:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqLC4we19bYPg3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZjVlODk1NTUtMDEzNS00NDBiLWJjZDgtMDk2Nzc2OTYzMDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb0oVtRNWnuswfopKME4VVuNKaKaff/JwowU doTgTcElMGdCwPdnW8mqst4t9WTlObCAAqENTZj/RJjPChjD8UWi0xvOKPDcLFhe 9gAZ/4yD5Imk4jADp1bZzdZycKdvzrFlrUKerwpR7nRkpyas7qD20/knWyYilZHn 0lYhLELvuFaC51ineStRIs82fuVwrh8QECwZuDETFl/SEavNZVSAuvxlE6ihfn3T khy4Au/9d63mcLgDcOYKr26ymVXJmNUaVZs8Re0cli2wHE7T9dz4G72vfrvewp/n hIFGDqXrPcGUqW2ymLzrURiWHsoEHcvc66Hhzzbzp0TIfVBPawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFznOKCJ7TFARH+qOJpVqjXLw4yzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2I5Mjk5YTYtZDg2Mi0z YWRmLThiMWYtMzBhYzdiMjljMDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUKfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3mVEGEtpz5bvSr7k5Hv+icUz730PkP1TJVZgzlZOdxZqAdOcDLaAJN Xkc9CHS+HdsLdQwjTe+k7j3LOQ/TsQKHFAQmbkDKFONH14i/+TRRwEKGvOSnZEB0 bQnlp6CvpLkD/87Ss4VnJUvo67jmC98/XKlTVROBAp+jND3C/3IAqLOKKmntyj/U lPdLTwtfMiR97Edpu6M5gOtHBLh6+qQBKZRLYVZNsrT01D7JSXt5T0YMHY6vVh36 DA5/P25ign3ajOfFKO9cmBGw1Titx0az5v7Kl0C127v3xuayWchjkPtMTav+7p+S wFPkMOrhGwmy8JEC1nYzEUfnRJjZx/I= -----END CERTIFICATE-----Generated at Tue Nov 4 19:15:35 2025 by rpki-client