$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d89e9046-92ce-3c4d-95a9-4e0574a9697c.roa File: d89e9046-92ce-3c4d-95a9-4e0574a9697c.roa (raw, json) Hash identifier: RnY21xRnIXkNes7yImCrV+HxVNjJuBWBQGFUXiTIphs= Subject key identifier: 66:46:59:D7:AE:7B:7D:F7:BE:8F:46:38:8E:DF:82:B7:C3:5D:0D:3E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B758C9E10A95769A0FD009AC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d89e9046-92ce-3c4d-95a9-4e0574a9697c.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 7029 IP address blocks: 66.19.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:9e:10:a9:57:69:a0:fd:00:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=a7650afa-86a8-4c21-82ea-3d29bf7aae55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ee:fd:48:6a:19:97:fe:11:a0:23:81:42:38: 81:da:9c:1c:13:e8:d2:26:a7:7d:a6:c6:4e:f4:dd: b9:20:75:7b:bf:e4:37:65:8d:7b:38:2e:f5:7d:d9: b1:73:3b:9f:46:3e:bf:e2:b8:d3:26:d6:ed:5a:f3: 6f:80:2e:48:41:6c:1b:c3:23:3e:39:3d:8b:85:71: c2:93:56:99:03:f5:42:12:27:b6:2f:6b:07:33:b7: ed:17:39:1c:88:b1:79:d5:13:e2:f5:9b:15:75:b1: 6a:b1:df:6e:98:4e:9b:2f:b7:46:de:8e:14:bc:f1: e5:dd:67:2f:6d:fb:1e:16:ea:06:19:40:1c:b1:6f: 06:ce:e1:85:48:0b:27:fa:87:62:e8:82:bc:67:ed: 2c:5e:e1:58:a4:79:68:a2:d8:04:2f:ce:82:4c:73: e4:ff:5c:8b:0c:23:65:74:13:73:c3:82:e7:f4:4a: 73:c0:3b:2e:81:4b:cf:ab:17:7e:27:6e:87:90:fb: 56:0a:03:41:21:2c:c8:6f:3d:4e:15:eb:bd:b1:d7: 4a:0b:51:d2:27:bd:49:d2:e0:a1:48:31:25:a8:3b: 21:47:66:96:3d:3f:18:d5:01:53:e3:6d:cc:56:d9: 22:2b:0b:22:cc:7d:8f:13:4c:66:98:45:bd:af:e3: 4e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:46:59:D7:AE:7B:7D:F7:BE:8F:46:38:8E:DF:82:B7:C3:5D:0D:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d89e9046-92ce-3c4d-95a9-4e0574a9697c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.19.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:af:b4:67:5e:0c:74:dc:eb:1b:8a:74:c3:a9:41:03:07:97: 3d:00:16:23:59:c2:fe:ba:79:63:8b:1c:29:53:bb:05:90:48: 87:38:c6:fc:6d:07:b7:be:a3:33:15:cf:39:7a:02:2a:05:29: b0:6f:49:30:2f:be:92:82:22:8f:1a:f8:54:8a:6b:75:f4:13: 88:3f:21:d9:2b:9e:09:cb:05:97:5b:4c:c5:46:53:fb:51:9c: 0d:85:ad:31:82:df:76:d1:b9:ae:33:d6:7d:07:a6:66:18:be: 1e:aa:15:7e:e6:d8:98:4f:04:e3:7b:2a:ef:2e:ad:41:48:b5: 45:ea:f2:3b:7d:9a:ef:2e:15:9d:37:6e:3b:28:23:85:c9:d7: 41:6d:74:eb:d6:74:23:2e:30:ef:91:77:97:4c:bb:c0:27:aa: bc:9f:48:76:58:6e:01:82:c3:04:69:78:7d:57:ae:42:b5:8b: e0:e1:25:2b:4c:11:d9:64:36:51:7e:7d:88:4d:57:7a:f0:0b: 26:04:30:d8:0b:75:bd:b1:d2:25:29:43:5f:42:00:b2:b5:0a: 4a:d3:dc:00:0c:4c:ce:c7:6f:17:a2:00:a2:e9:9e:1e:f4:84: 4a:d2:fa:8b:ac:5a:63:54:28:36:54:ff:ff:c3:96:3d:73:a5: bb:cb:a3:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jJ4QqVdpoP0AmsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk YTc2NTBhZmEtODZhOC00YzIxLTgyZWEtM2QyOWJmN2FhZTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe79SGoZl/4RoCOBQjiB2pwcE+jSJqd9psZO 9N25IHV7v+Q3ZY17OC71fdmxczufRj6/4rjTJtbtWvNvgC5IQWwbwyM+OT2LhXHC k1aZA/VCEie2L2sHM7ftFzkciLF51RPi9ZsVdbFqsd9umE6bL7dG3o4UvPHl3Wcv bfseFuoGGUAcsW8GzuGFSAsn+odi6IK8Z+0sXuFYpHlootgEL86CTHPk/1yLDCNl dBNzw4Ln9EpzwDsugUvPqxd+J26HkPtWCgNBISzIbz1OFeu9sddKC1HSJ71J0uCh SDElqDshR2aWPT8Y1QFT423MVtkiKwsizH2PE0xmmEW9r+NObQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZGWdeue333vo9GOI7fgrfDXQ0+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDg5ZTkwNDYtOTJjZS0z YzRkLTk1YTktNGUwNTc0YTk2OTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQhNcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGavtGdeDHTc6xuKdMOpQQMHlz0AFiNZwv66eWOLHClTuwWQSIc4xvxt B7e+ozMVzzl6AioFKbBvSTAvvpKCIo8a+FSKa3X0E4g/IdkrngnLBZdbTMVGU/tR nA2FrTGC33bRua4z1n0HpmYYvh6qFX7m2JhPBON7Ku8urUFItUXq8jt9mu8uFZ03 bjsoI4XJ10FtdOvWdCMuMO+Rd5dMu8AnqryfSHZYbgGCwwRpeH1XrkK1i+DhJStM EdlkNlF+fYhNV3rwCyYEMNgLdb2x0iUpQ19CALK1CkrT3AAMTM7HbxeiAKLpnh70 hErS+ousWmNUKDZU///Dlj1zpbvLo1w= -----END CERTIFICATE-----Generated at Wed Nov 5 08:00:41 2025 by rpki-client