$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f10acf6c-b0f9-3aa4-9e8c-e3a8e4f92784.roa File: f10acf6c-b0f9-3aa4-9e8c-e3a8e4f92784.roa (raw, json) Hash identifier: 9j/bCl7tsJ1G8H+dMBLdA1X9Unf3+q6glUk/0m5TubA= Subject key identifier: 7C:83:F2:21:4A:A6:14:97:6F:2D:30:F3:36:9A:38:D5:56:83:44:89 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0DD060AD9D92F4F5DDB00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f10acf6c-b0f9-3aa4-9e8c-e3a8e4f92784.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 69.66.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:dd:06:0a:d9:d9:2f:4f:5d:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=b102aa18-3f87-4577-90b3-79d9a5e6756e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:41:d7:7e:c1:01:5c:73:9c:0e:43:51:d7:77: 68:98:80:84:43:d3:e6:35:23:e9:c0:99:ad:d3:04: d6:a5:7c:3f:d2:94:b6:fb:18:65:dd:ab:6a:14:32: 2c:c6:61:17:6d:17:f9:07:37:8c:6f:6d:fc:9b:f2: 8c:76:44:92:0c:e3:16:31:88:4b:c1:1b:db:26:53: a5:31:ec:1d:41:62:14:e2:8c:49:6c:6c:73:ef:c5: 31:6b:ef:a4:43:c8:ea:5d:b8:c5:20:b3:4a:43:c9: 1f:49:43:db:f0:c0:f6:de:12:b8:b8:ee:5c:68:c8: 39:d4:d7:a4:f2:92:82:73:ce:3b:d8:0f:55:67:1f: 85:59:59:35:37:64:13:31:da:57:95:31:bc:07:2a: 79:90:5a:9d:e2:ce:70:79:10:6f:88:ec:f2:ee:e9: a3:07:05:a2:65:f7:32:0d:3a:58:0d:d2:e4:61:b8: 0a:fc:2b:3b:cc:83:71:60:6a:75:0a:0a:92:d0:0a: 59:60:ec:e5:6a:17:66:18:69:e5:25:b3:ee:b8:80: 0b:f1:07:60:61:13:19:36:e5:6c:91:6c:5e:c0:31: ab:23:e5:a2:5d:ee:43:d6:da:cd:1d:37:c8:ba:49: 29:17:8e:24:54:9d:cf:40:ac:26:a8:b7:eb:d9:af: c2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:83:F2:21:4A:A6:14:97:6F:2D:30:F3:36:9A:38:D5:56:83:44:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f10acf6c-b0f9-3aa4-9e8c-e3a8e4f92784.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:15:77:45:53:d5:4b:bd:20:c3:5b:ae:26:d7:43:78:63:47: 71:7a:2e:e9:2e:7e:4e:f0:dd:ec:50:f3:56:1b:bc:43:3c:f1: a3:56:64:c3:02:70:f9:04:76:be:f0:e3:ef:0e:71:38:ab:97: 2e:31:ae:8f:12:b7:c6:35:ef:03:ae:82:4f:26:99:ad:03:d4: 76:67:20:75:6e:bd:4a:5b:51:1c:10:f6:79:56:1b:92:6d:ec: 12:aa:f8:08:2e:cc:c5:8d:e7:fb:7a:fc:ed:ea:ad:22:56:de: 52:bf:08:ed:bd:66:70:16:86:1d:b1:f9:cc:6b:ec:98:28:b9: 11:25:7e:63:11:f4:5f:09:d5:39:7e:25:c8:af:9d:1e:7a:5c: 4c:c3:36:72:37:0e:ab:8a:f2:51:13:11:ee:46:bd:b4:a9:2b: 4e:f1:f5:bb:03:94:74:84:f4:f9:03:d4:d2:7f:bc:e0:ff:ae: 62:43:0e:96:f5:46:c4:d2:4b:2d:49:b7:ac:8f:1d:49:2f:a6: 96:45:c7:b5:27:4a:45:a5:56:06:cb:cc:a2:6d:14:52:8d:d9: 26:a0:72:ff:aa:14:e9:8e:35:58:87:52:87:c6:98:6b:da:53: 26:b6:78:09:a9:ff:84:cd:aa:c5:0f:1c:cc:58:cd:b7:3d:90: 49:10:93:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoN0GCtnZL09d2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YjEwMmFhMTgtM2Y4Ny00NTc3LTkwYjMtNzlkOWE1ZTY3NTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkHXfsEBXHOcDkNR13domICEQ9PmNSPpwJmt 0wTWpXw/0pS2+xhl3atqFDIsxmEXbRf5BzeMb238m/KMdkSSDOMWMYhLwRvbJlOl MewdQWIU4oxJbGxz78Uxa++kQ8jqXbjFILNKQ8kfSUPb8MD23hK4uO5caMg51Nek 8pKCc8472A9VZx+FWVk1N2QTMdpXlTG8Byp5kFqd4s5weRBviOzy7umjBwWiZfcy DTpYDdLkYbgK/Cs7zINxYGp1CgqS0ApZYOzlahdmGGnlJbPuuIAL8QdgYRMZNuVs kWxewDGrI+WiXe5D1trNHTfIukkpF44kVJ3PQKwmqLfr2a/CiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyD8iFKphSXby0w8zaaONVWg0SJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjEwYWNmNmMtYjBmOS0z YWE0LTllOGMtZTNhOGU0ZjkyNzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8Vd0VT1Uu9IMNbribXQ3hjR3F6Lukufk7w3exQ81YbvEM88aNWZMMC cPkEdr7w4+8OcTirly4xro8St8Y17wOugk8mma0D1HZnIHVuvUpbURwQ9nlWG5Jt 7BKq+AguzMWN5/t6/O3qrSJW3lK/CO29ZnAWhh2x+cxr7JgouRElfmMR9F8J1Tl+ JcivnR56XEzDNnI3DquK8lETEe5GvbSpK07x9bsDlHSE9PkD1NJ/vOD/rmJDDpb1 RsTSSy1Jt6yPHUkvppZFx7UnSkWlVgbLzKJtFFKN2Sagcv+qFOmONViHUofGmGva Uya2eAmp/4TNqsUPHMxYzbc9kEkQk8A= -----END CERTIFICATE-----Generated at Mon Aug 4 18:59:13 2025 by rpki-client