$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8c08e04-7262-3bf8-a350-4441ff806c02.roa File: d8c08e04-7262-3bf8-a350-4441ff806c02.roa (raw, json) Hash identifier: zn29LEx+xpVf+Pe4jSOM0STDrcmzSGYo21f5CFbCFjM= Subject key identifier: DE:29:30:5C:79:D6:15:75:8F:17:23:08:D2:38:2B:8F:CE:82:F1:AF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B95A87E8CB70709DD4D422C20 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8c08e04-7262-3bf8-a350-4441ff806c02.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7029 IP address blocks: 69.66.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:7e:8c:b7:07:09:dd:4d:42:2c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=26eb8140-f944-409e-89f1-de4ebed0b896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:19:1b:a3:67:ba:5b:3a:8c:48:ca:a2:ea:a1: 79:c3:1b:36:8c:03:62:e7:8a:17:a3:e3:46:78:83: 2d:f1:a6:28:62:b6:a8:61:01:e8:65:fd:de:9f:c9: 6a:90:f4:60:4a:47:68:0c:9b:f3:19:cc:7e:46:89: 9f:9a:63:d4:eb:44:b8:d9:f3:12:8a:0a:56:44:6d: 37:6f:ed:c5:2f:db:bb:fa:f2:81:cd:85:45:e0:e6: b0:0c:03:46:92:07:cb:e3:4e:5f:f8:01:b6:57:f7: 97:12:b5:7e:6c:e9:64:ca:e5:9c:2e:0a:a4:61:a4: ef:6d:88:24:aa:1e:2c:c6:c0:c2:88:4a:66:76:fb: 07:1e:a5:52:9e:35:3e:a6:4b:6b:58:67:22:0c:b4: 07:e4:1f:36:43:46:b0:2e:1f:2f:b5:9e:78:53:d4: b0:c9:cf:57:e9:bc:7a:78:0a:56:65:80:9f:a1:1a: 10:00:78:14:3c:af:e5:b1:05:1b:5c:dc:12:bc:01: e0:fa:97:3f:45:e7:f0:51:6d:83:ec:23:fb:f7:b3: 57:15:c4:a6:63:1e:73:d5:c8:9e:89:93:e5:47:39: 26:ac:41:61:30:95:82:30:dd:a9:17:83:33:73:d9: 0b:cf:83:b8:5a:70:91:07:2d:20:ff:82:18:61:c8: 48:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:29:30:5C:79:D6:15:75:8F:17:23:08:D2:38:2B:8F:CE:82:F1:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8c08e04-7262-3bf8-a350-4441ff806c02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:1a:d4:63:8f:0c:86:ca:15:4a:1b:29:23:17:6b:40:33:23: ad:63:bd:4e:2d:b6:e5:9a:b4:94:6a:c2:c2:26:32:09:68:11: de:02:98:bf:1f:e1:eb:38:ef:30:78:43:cd:f6:f9:f0:48:f5: 69:69:dd:dc:ae:81:79:65:44:b7:b0:05:12:f6:f0:5b:e8:44: bb:39:60:57:b0:8b:13:7d:93:db:94:2b:fe:dd:eb:2d:55:c1: 9a:c5:71:ba:ba:21:93:8b:75:f4:b4:1f:75:c3:6f:67:3e:e1: 58:81:e7:ea:b0:db:9f:d7:7f:42:a4:98:8e:f4:c7:95:e2:9e: 8e:ea:d6:1c:f8:bd:9b:4d:00:84:cd:07:0b:99:bc:50:6f:57: 2f:91:98:ad:90:98:ac:40:e7:f0:59:07:cd:9c:a5:d9:37:7d: d1:28:ce:35:15:d1:87:97:23:ec:fd:09:40:62:b0:7d:9f:5d: 30:db:60:d5:ef:f9:d9:7e:b6:f0:7c:05:65:68:90:76:bc:fa: d4:b7:0f:cb:7d:8b:1a:6e:d2:cb:9a:ee:5f:a8:33:74:ab:d4: fb:7f:44:26:3a:5a:eb:0f:56:2c:be:04:8e:66:4c:aa:24:1c: 5d:8a:e3:34:51:ea:dc:38:be:62:14:3a:f8:77:0d:f6:4d:47: e3:51:76:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqH6MtwcJ3U1CLCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MjZlYjgxNDAtZjk0NC00MDllLTg5ZjEtZGU0ZWJlZDBiODk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRkbo2e6WzqMSMqi6qF5wxs2jANi54oXo+NG eIMt8aYoYraoYQHoZf3en8lqkPRgSkdoDJvzGcx+RomfmmPU60S42fMSigpWRG03 b+3FL9u7+vKBzYVF4OawDANGkgfL405f+AG2V/eXErV+bOlkyuWcLgqkYaTvbYgk qh4sxsDCiEpmdvsHHqVSnjU+pktrWGciDLQH5B82Q0awLh8vtZ54U9Swyc9X6bx6 eApWZYCfoRoQAHgUPK/lsQUbXNwSvAHg+pc/RefwUW2D7CP797NXFcSmYx5z1cie iZPlRzkmrEFhMJWCMN2pF4Mzc9kLz4O4WnCRBy0g/4IYYchIaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4pMFx51hV1jxcjCNI4K4/OgvGvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDhjMDhlMDQtNzI2Mi0z YmY4LWEzNTAtNDQ0MWZmODA2YzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRUKOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEa1GOPDIbKFUobKSMXa0AzI61jvU4ttuWatJRqwsImMgloEd4CmL8f 4es47zB4Q832+fBI9Wlp3dyugXllRLewBRL28FvoRLs5YFewixN9k9uUK/7d6y1V wZrFcbq6IZOLdfS0H3XDb2c+4ViB5+qw25/Xf0KkmI70x5Xino7q1hz4vZtNAITN BwuZvFBvVy+RmK2QmKxA5/BZB82cpdk3fdEozjUV0YeXI+z9CUBisH2fXTDbYNXv +dl+tvB8BWVokHa8+tS3D8t9ixpu0sua7l+oM3Sr1Pt/RCY6WusPViy+BI5mTKok HF2K4zRR6tw4vmIUOvh3DfZNR+NRdhU= -----END CERTIFICATE-----Generated at Tue Nov 4 19:15:08 2025 by rpki-client