$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/daea1de1-7569-3daa-8660-19d0642dc53d.roa File: daea1de1-7569-3daa-8660-19d0642dc53d.roa (raw, json) Hash identifier: AwW1YU6repf2BbZicwcMEUaTbXK2scR+s8xMzUu6dzw= Subject key identifier: E5:B7:EC:F9:E2:B1:11:55:03:3F:2B:50:C1:4F:BA:68:4B:18:40:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CD6F1F2A118F96ADBDBE6 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/daea1de1-7569-3daa-8660-19d0642dc53d.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 69.66.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:d6:f1:f2:a1:18:f9:6a:db:db:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=c5278d90-fa2c-4c86-bda6-cf82efa61b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:18:d6:d2:46:72:e7:9f:91:2b:1e:e4:5d:d1: ca:5e:9b:b9:b0:ea:d6:16:a0:c5:ac:4b:5d:7e:ab: 52:8b:ad:4f:00:8f:50:f0:15:32:06:d3:b9:86:60: 40:00:4b:ff:2e:a7:ec:08:2c:e3:c7:67:9b:01:bb: 56:6f:b6:d3:10:b9:64:5a:9b:95:b0:6a:71:8f:09: 87:fb:21:b8:3d:3f:84:49:e2:c6:5a:b2:18:3f:07: c3:ab:0f:36:59:be:cb:bd:22:f4:3d:fc:6a:1c:e3: b9:c3:85:bf:80:6b:0c:c0:ca:a5:a5:88:31:8f:20: 91:d3:c8:31:06:82:fd:37:97:d3:bf:da:87:43:cb: b6:ba:c9:ba:f8:07:dc:09:ca:bd:e4:e5:6b:b4:e5: 11:fe:27:27:0d:19:91:61:36:27:82:c4:f8:b8:e3: c6:18:99:ed:c1:0c:8c:50:d1:00:e1:41:2c:a8:6e: 8a:c0:44:7d:1a:54:80:c4:74:40:37:80:31:ba:6a: d8:13:bd:df:3e:44:16:73:65:54:d2:12:10:b8:a3: 66:4b:d5:33:5e:c4:32:8f:e5:03:81:75:8c:a1:d5: 44:11:a2:b0:a3:5d:36:6e:a9:97:4f:b4:5d:82:93: a0:b0:a6:a9:13:eb:9f:99:69:1a:80:70:54:21:11: d9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B7:EC:F9:E2:B1:11:55:03:3F:2B:50:C1:4F:BA:68:4B:18:40:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/daea1de1-7569-3daa-8660-19d0642dc53d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:cc:f2:7d:22:79:52:8a:ef:a1:5d:1b:00:9f:02:cc:c3:db: fc:19:b4:b3:33:02:55:00:5a:8c:23:86:59:34:3f:35:b3:50: 73:18:5e:e2:fd:a8:96:cc:cd:98:53:d8:10:6e:d7:5c:cc:43: 15:a5:4f:db:fc:cc:b9:1a:83:6a:45:f7:7f:c4:df:60:9e:2a: 6e:30:d0:ab:93:cb:92:03:6f:67:a4:54:a2:b9:5c:42:48:54: dc:ef:b4:f8:c9:71:e9:76:ce:38:c4:7f:9a:e0:16:58:88:50: 31:09:6d:b9:7a:03:e3:9f:dc:20:d7:0e:33:f7:48:23:4b:60: 2e:62:dd:6a:da:55:ee:d3:bc:ba:67:ad:88:15:a6:61:1a:9f: b1:d6:a4:ca:ee:f9:cf:28:be:f8:b5:9a:eb:3e:f6:96:9a:3e: 32:1e:76:72:0e:0d:7f:6c:67:8f:b7:e5:9c:00:6b:78:42:91: bf:fe:3c:ab:60:62:4d:e4:f4:de:ce:c2:70:47:3a:56:86:d1: 53:e1:3d:7c:ad:49:ae:01:95:42:00:5f:dc:53:0d:c2:c9:5f: de:f3:e8:fa:95:66:84:f9:57:0e:bc:c5:e9:6a:ed:8c:9a:4f: 50:38:08:5a:bd:11:ca:84:8e:1f:24:45:4c:6b:b1:64:c0:d5: 31:e5:46:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXNbx8qEY+Wrb2+YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YzUyNzhkOTAtZmEyYy00Yzg2LWJkYTYtY2Y4MmVmYTYxYjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxjW0kZy55+RKx7kXdHKXpu5sOrWFqDFrEtd fqtSi61PAI9Q8BUyBtO5hmBAAEv/LqfsCCzjx2ebAbtWb7bTELlkWpuVsGpxjwmH +yG4PT+ESeLGWrIYPwfDqw82Wb7LvSL0PfxqHOO5w4W/gGsMwMqlpYgxjyCR08gx BoL9N5fTv9qHQ8u2usm6+AfcCcq95OVrtOUR/icnDRmRYTYngsT4uOPGGJntwQyM UNEA4UEsqG6KwER9GlSAxHRAN4AxumrYE73fPkQWc2VU0hIQuKNmS9UzXsQyj+UD gXWModVEEaKwo102bqmXT7RdgpOgsKapE+ufmWkagHBUIRHZaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOW37PnisRFVAz8rUMFPumhLGEBbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGFlYTFkZTEtNzU2OS0z ZGFhLTg2NjAtMTlkMDY0MmRjNTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRUJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrM8n0ieVKK76FdGwCfAszD2/wZtLMzAlUAWowjhlk0PzWzUHMYXuL9 qJbMzZhT2BBu11zMQxWlT9v8zLkag2pF93/E32CeKm4w0KuTy5IDb2ekVKK5XEJI VNzvtPjJcel2zjjEf5rgFliIUDEJbbl6A+Of3CDXDjP3SCNLYC5i3WraVe7TvLpn rYgVpmEan7HWpMru+c8ovvi1mus+9paaPjIednIODX9sZ4+35ZwAa3hCkb/+PKtg Yk3k9N7OwnBHOlaG0VPhPXytSa4BlUIAX9xTDcLJX97z6PqVZoT5Vw68xelq7Yya T1A4CFq9EcqEjh8kRUxrsWTA1THlRnA= -----END CERTIFICATE-----Generated at Tue Nov 4 19:15:41 2025 by rpki-client