$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d253f950-d9ce-3513-90d5-e8256b0c4b40.roa File: d253f950-d9ce-3513-90d5-e8256b0c4b40.roa (raw, json) Hash identifier: 57eft+Aq0pYezaabdNz1hNk99k/2/ra/W0+Z1i7Xy+g= Subject key identifier: 2B:52:07:2F:70:06:AB:34:04:7F:FF:A0:01:B1:77:0F:D3:BE:42:37 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D07A6DE4BBE9C54B33000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d253f950-d9ce-3513-90d5-e8256b0c4b40.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 69.66.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:07:a6:de:4b:be:9c:54:b3:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=3596fcea-d7c2-4e63-91eb-00f2980d9e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:40:20:63:4f:39:a0:59:1e:80:68:8c:89:50: 93:f3:ac:53:86:cc:6a:ea:a4:22:5f:3a:48:bd:8f: 44:61:56:d8:c2:f8:cf:06:df:2e:07:a9:04:c9:9e: 4f:da:f8:06:68:fa:03:98:42:9a:03:17:97:e7:df: 3f:8b:51:94:f7:8e:a0:27:1d:58:44:49:25:a5:bd: f4:7e:e7:2f:50:7c:4f:1b:2e:21:86:3a:77:d8:ac: 8e:f0:c1:a7:84:ec:4a:b6:1b:0f:4b:e3:2a:88:c7: 4a:58:96:98:86:3f:e0:ee:1a:62:21:03:d4:b4:a5: e3:d9:5f:6b:28:3b:32:14:8e:f3:16:9e:8b:d5:37: 97:01:28:bf:27:a0:86:be:55:27:87:e1:3a:81:35: 39:5c:fa:53:36:20:a6:00:a6:62:87:03:f0:80:61: c3:5d:10:a2:c4:d0:5f:0f:e9:72:91:b1:92:86:53: 52:d6:bd:df:04:cc:bb:38:b7:0a:58:ec:99:90:7b: ed:cf:25:76:55:12:f0:b9:7f:d3:17:d0:a6:2f:2c: 7c:b2:ef:fa:f3:d9:05:e2:a6:ae:e4:94:1d:16:bd: 1c:13:ee:61:19:ae:85:99:24:d5:43:8d:8d:81:af: 60:79:0e:2b:e6:6e:a8:c2:d1:e7:fb:62:48:d7:4c: f8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:52:07:2F:70:06:AB:34:04:7F:FF:A0:01:B1:77:0F:D3:BE:42:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d253f950-d9ce-3513-90d5-e8256b0c4b40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ec:e9:5a:ff:85:e0:78:56:ae:c6:44:2a:8c:af:71:9c:cf: 1c:c0:d7:08:7b:0b:10:40:c9:7b:02:39:75:7a:a9:de:5c:96: 62:23:76:b2:53:8f:89:30:07:c0:42:6b:e1:a2:ad:f9:ca:e1: c8:43:cb:59:c8:d1:21:43:6f:07:77:6a:a1:21:b1:ea:4c:25: 43:2b:40:24:7a:ac:74:f3:5c:94:15:54:39:53:64:71:18:a7: a6:ca:9b:9d:d6:60:ec:ec:63:2f:ae:98:97:ba:f2:d8:fb:63: 1f:29:63:19:d1:ae:7d:b0:68:32:29:a3:6a:73:7b:ae:83:f7: 51:9e:73:31:1f:71:3d:ce:26:b4:06:91:c6:92:fe:69:20:d9: 7e:14:59:95:56:2c:7c:22:19:8f:a2:d5:a1:51:7e:26:56:d6: 5e:45:14:00:77:50:08:75:c3:0b:58:2c:60:1f:a7:b5:7a:52: 8d:cf:8d:b4:64:fb:75:79:b0:7b:bf:a1:10:b2:59:30:59:e2: 76:7e:4d:be:36:c2:2e:48:9d:b6:d8:a4:ae:8b:22:af:21:f4: 0e:86:3a:49:2d:2b:73:21:e7:6c:69:7a:b5:4a:60:b5:79:bf: 85:86:54:e0:07:94:c4:6f:47:bf:d5:f2:ca:bd:1c:e0:be:a5: d2:91:a7:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQem3ku+nFSzMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MzU5NmZjZWEtZDdjMi00ZTYzLTkxZWItMDBmMjk4MGQ5ZTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EAgY085oFkegGiMiVCT86xThsxq6qQiXzpI vY9EYVbYwvjPBt8uB6kEyZ5P2vgGaPoDmEKaAxeX598/i1GU946gJx1YREklpb30 fucvUHxPGy4hhjp32KyO8MGnhOxKthsPS+MqiMdKWJaYhj/g7hpiIQPUtKXj2V9r KDsyFI7zFp6L1TeXASi/J6CGvlUnh+E6gTU5XPpTNiCmAKZihwPwgGHDXRCixNBf D+lykbGShlNS1r3fBMy7OLcKWOyZkHvtzyV2VRLwuX/TF9CmLyx8su/689kF4qau 5JQdFr0cE+5hGa6FmSTVQ42Nga9geQ4r5m6owtHn+2JI10z4QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtSBy9wBqs0BH//oAGxdw/TvkI3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDI1M2Y5NTAtZDljZS0z NTEzLTkwZDUtZTgyNTZiMGM0YjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUIYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADns6Vr/heB4Vq7GRCqMr3GczxzA1wh7CxBAyXsCOXV6qd5clmIjdrJT j4kwB8BCa+GirfnK4chDy1nI0SFDbwd3aqEhsepMJUMrQCR6rHTzXJQVVDlTZHEY p6bKm53WYOzsYy+umJe68tj7Yx8pYxnRrn2waDIpo2pze66D91GeczEfcT3OJrQG kcaS/mkg2X4UWZVWLHwiGY+i1aFRfiZW1l5FFAB3UAh1wwtYLGAfp7V6Uo3PjbRk +3V5sHu/oRCyWTBZ4nZ+Tb42wi5InbbYpK6LIq8h9A6GOkktK3Mh52xperVKYLV5 v4WGVOAHlMRvR7/V8sq9HOC+pdKRp/c= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:22 2025 by rpki-client