$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f204efbb-87c6-3229-84e8-cf88708d2191.roa File: f204efbb-87c6-3229-84e8-cf88708d2191.roa (raw, json) Hash identifier: C1y8zZZ0/2XWA1Skf4EecHZrP8L8dwCIwina1wsawEw= Subject key identifier: 3D:C5:E2:40:5B:47:2D:24:99:BB:2F:B9:3A:13:46:77:73:1B:2B:87 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B95A87EFAC9C065AC300D7500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f204efbb-87c6-3229-84e8-cf88708d2191.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7029 IP address blocks: 69.66.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:7e:fa:c9:c0:65:ac:30:0d:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=284e49cf-e49c-42cb-913c-34292eef8d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:32:bd:ed:46:a2:25:78:50:1a:59:e5:04:49: 68:5b:81:2d:e8:58:5b:fc:09:69:e7:43:7f:f2:58: f5:d0:88:bc:45:65:24:45:7d:14:a0:81:48:7b:2b: 96:ed:92:64:29:10:f0:4e:97:f0:f8:ef:88:7b:4d: 3c:b6:63:2f:69:fa:9a:65:e9:0d:33:b1:46:52:a1: 51:4e:6b:28:f9:48:53:c4:07:f7:f9:a8:71:e1:74: 54:71:7a:bf:3d:0b:e7:de:9e:1c:52:57:12:41:38: 85:53:71:66:ff:fc:ad:c1:dd:14:d0:0e:b7:64:9e: 9f:04:05:8d:9f:04:31:3c:26:f3:ab:c4:2a:81:41: 37:81:ec:09:1b:11:f9:f0:12:96:25:dd:53:6e:75: af:99:23:e9:44:0f:04:07:91:3d:91:05:cb:f1:1b: 44:6a:7b:63:9a:65:a3:9d:c8:e9:3c:32:e6:3c:1d: 15:98:44:8e:37:8c:c0:ba:b6:fa:58:32:59:7c:ae: 86:49:b5:db:1a:f3:37:43:21:cb:b9:73:07:4b:3c: e6:3f:e8:1e:8e:92:7b:e5:88:9b:d4:cb:c7:f1:3b: 1d:1f:f7:a1:84:eb:35:b2:ad:ac:01:82:94:04:fd: 2a:91:85:67:ac:e4:0a:a5:e1:f8:5b:90:42:ef:d2: 52:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C5:E2:40:5B:47:2D:24:99:BB:2F:B9:3A:13:46:77:73:1B:2B:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f204efbb-87c6-3229-84e8-cf88708d2191.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:d3:e4:ac:c1:28:aa:2b:60:51:5a:b6:95:5c:0f:24:b1:aa: 65:f9:a9:ef:24:bb:98:f2:ab:05:a7:e4:eb:6d:2c:55:42:a9: 6b:98:8c:f4:9e:ab:2f:f5:34:d5:ed:27:ed:af:de:2c:82:16: 2c:63:aa:6e:fa:20:73:1e:7c:a0:4c:29:a7:a1:13:97:e2:fe: 30:6c:3f:41:8a:d1:1d:f6:5d:5e:ff:03:68:03:e9:98:0b:08: af:07:f0:b8:ae:90:ea:47:ce:b6:77:8f:e1:48:b4:15:6c:c9: ab:65:f9:de:e1:81:b7:a2:c7:c9:4c:72:ed:ec:b7:48:5c:cd: ca:50:f4:fd:42:7e:7c:65:ab:24:c5:23:fb:e9:36:4a:24:76: 58:f9:4a:e9:7e:0e:6f:9c:54:c5:6f:bd:d1:ac:59:42:2a:65: e9:57:69:28:ff:b6:cf:19:2f:89:3c:6b:89:e5:cf:f8:f1:21: 98:be:cb:14:30:d3:67:f6:05:a4:2c:30:c7:dd:9c:db:47:8d: de:95:13:76:f6:2c:31:e0:3b:65:93:2d:28:e5:48:d3:bd:49: 69:ad:97:e8:26:00:f5:15:e6:33:a9:36:cc:1a:ca:31:18:f8: 5b:17:c5:85:1b:4c:b6:32:1a:02:b9:17:ce:c0:a7:9b:14:55: 7a:8d:c5:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqH76ycBlrDANdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk Mjg0ZTQ5Y2YtZTQ5Yy00MmNiLTkxM2MtMzQyOTJlZWY4ZDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDK97UaiJXhQGlnlBEloW4Et6Fhb/Alp50N/ 8lj10Ii8RWUkRX0UoIFIeyuW7ZJkKRDwTpfw+O+Ie008tmMvafqaZekNM7FGUqFR Tmso+UhTxAf3+ahx4XRUcXq/PQvn3p4cUlcSQTiFU3Fm//ytwd0U0A63ZJ6fBAWN nwQxPCbzq8QqgUE3gewJGxH58BKWJd1TbnWvmSPpRA8EB5E9kQXL8RtEantjmmWj ncjpPDLmPB0VmESON4zAurb6WDJZfK6GSbXbGvM3QyHLuXMHSzzmP+gejpJ75Yib 1MvH8TsdH/ehhOs1sq2sAYKUBP0qkYVnrOQKpeH4W5BC79JSPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3F4kBbRy0kmbsvuToTRndzGyuHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjIwNGVmYmItODdjNi0z MjI5LTg0ZTgtY2Y4ODcwOGQyMTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRULgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3T5KzBKKorYFFatpVcDySxqmX5qe8ku5jyqwWn5OttLFVCqWuYjPSe qy/1NNXtJ+2v3iyCFixjqm76IHMefKBMKaehE5fi/jBsP0GK0R32XV7/A2gD6ZgL CK8H8LiukOpHzrZ3j+FItBVsyatl+d7hgbeix8lMcu3st0hczcpQ9P1CfnxlqyTF I/vpNkokdlj5Sul+Dm+cVMVvvdGsWUIqZelXaSj/ts8ZL4k8a4nlz/jxIZi+yxQw 02f2BaQsMMfdnNtHjd6VE3b2LDHgO2WTLSjlSNO9SWmtl+gmAPUV5jOpNswayjEY +FsXxYUbTLYyGgK5F87Ap5sUVXqNxV0= -----END CERTIFICATE-----Generated at Tue Nov 4 17:00:32 2025 by rpki-client