$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f983c697-6f67-36ce-910e-552ff60e066b.roa File: f983c697-6f67-36ce-910e-552ff60e066b.roa (raw, json) Hash identifier: RxZ5jjtVZcXupu6ul7K/Mu1PaFJ041QrkFbTe15oct8= Subject key identifier: 4B:84:12:9D:DA:37:FB:DA:E1:63:41:50:D1:D6:66:3D:41:8E:5A:0A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC1658DE6C02CDB2EAE00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f983c697-6f67-36ce-910e-552ff60e066b.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 66.35.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c1:65:8d:e6:c0:2c:db:2e:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=c2b88f67-9aea-495b-90bf-3160ffd981b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4b:ce:16:4d:2f:05:c8:bc:a5:1f:80:4a:44: 72:58:f2:4a:56:09:49:8e:13:3f:63:ea:45:05:c5: d5:cc:b5:91:ca:9c:21:50:f5:e7:e4:ca:2f:25:c7: 9f:1b:bd:f3:f3:be:93:7b:f6:5c:f0:95:5e:75:70: 98:b4:42:8a:3f:36:ee:77:83:d7:dd:d2:fe:44:53: 32:00:df:f1:18:70:2b:08:7e:73:cc:81:1c:23:df: a1:52:d7:01:5c:df:2a:75:8a:96:fc:32:a9:4a:ac: a7:f0:08:88:b9:85:b4:50:50:d8:13:75:00:50:63: d4:9c:96:c3:09:f4:cc:ab:09:3f:7a:00:57:66:3f: fe:7a:db:64:c3:f8:94:f2:8e:50:b4:01:d2:26:23: 65:6c:6f:92:ee:d4:81:ee:23:36:34:c3:d1:bb:f2: 12:8e:fa:37:78:a1:67:9a:33:e6:1b:c0:c9:44:52: 5e:e0:8a:e6:74:72:82:d7:f6:87:fa:8d:b0:91:51: 5c:db:fd:fc:1e:d6:7e:44:f3:be:d8:d5:f3:28:49: 62:d7:8d:3a:f9:5c:98:2f:5c:da:bd:6c:99:b2:12: c3:2f:d0:b6:a1:e1:78:2d:cb:e6:14:65:5a:7a:6b: c4:1d:67:20:4f:13:d9:ea:ca:06:e2:b6:02:fe:30: 90:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:84:12:9D:DA:37:FB:DA:E1:63:41:50:D1:D6:66:3D:41:8E:5A:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f983c697-6f67-36ce-910e-552ff60e066b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.35.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:c1:5b:fc:5d:c2:1c:04:2f:48:24:30:44:f5:df:1f:d0:4e: c8:20:4e:81:83:f2:5c:7e:3f:79:89:6c:0b:28:0b:9f:53:41: 16:71:32:55:fe:36:ea:0a:fa:2f:df:fa:24:a6:d9:23:e0:12: c9:c2:d8:08:29:09:26:ab:de:e3:cd:96:f8:f1:c7:41:c6:41: a0:61:b8:98:81:fa:bd:73:7e:3a:a3:a6:ca:27:8b:a1:4a:c7: d1:89:d3:58:3e:73:c6:1e:1d:83:99:55:b7:52:e8:21:fa:3f: 70:2b:b2:1e:0d:12:02:ec:b6:9d:d8:07:b8:88:bf:5c:bb:c6: 23:9b:9b:bd:b8:82:df:7b:3f:c2:32:02:cb:20:de:51:d1:da: 03:b9:cb:20:13:fe:43:96:14:4b:a4:16:28:19:be:02:1f:7c: 79:f3:bc:17:a1:b5:33:3f:ce:b7:1b:42:72:dc:22:6e:c4:1d: a2:5f:5c:0b:a6:37:fb:86:36:64:e1:3f:8c:17:1e:44:33:5c: 91:91:05:7f:02:e0:8d:90:f6:e8:95:fa:79:88:ae:3d:86:f5: 99:35:09:d3:13:2c:5b:dd:d7:af:cc:de:51:e0:60:15:e3:5e: d6:a2:76:67:02:1a:ff:20:a4:58:5c:76:52:48:4f:01:1f:ea: 95:98:27:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMFljebALNsurgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YzJiODhmNjctOWFlYS00OTViLTkwYmYtMzE2MGZmZDk4MWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkvOFk0vBci8pR+ASkRyWPJKVglJjhM/Y+pF BcXVzLWRypwhUPXn5MovJcefG73z876Te/Zc8JVedXCYtEKKPzbud4PX3dL+RFMy AN/xGHArCH5zzIEcI9+hUtcBXN8qdYqW/DKpSqyn8AiIuYW0UFDYE3UAUGPUnJbD CfTMqwk/egBXZj/+ettkw/iU8o5QtAHSJiNlbG+S7tSB7iM2NMPRu/ISjvo3eKFn mjPmG8DJRFJe4IrmdHKC1/aH+o2wkVFc2/38HtZ+RPO+2NXzKEli1406+VyYL1za vWyZshLDL9C2oeF4LcvmFGVaemvEHWcgTxPZ6soG4rYC/jCQhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuEEp3aN/va4WNBUNHWZj1BjloKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjk4M2M2OTctNmY2Ny0z NmNlLTkxMGUtNTUyZmY2MGUwNjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQiOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPBW/xdwhwEL0gkMET13x/QTsggToGD8lx+P3mJbAsoC59TQRZxMlX+ NuoK+i/f+iSm2SPgEsnC2AgpCSar3uPNlvjxx0HGQaBhuJiB+r1zfjqjpsoni6FK x9GJ01g+c8YeHYOZVbdS6CH6P3Arsh4NEgLstp3YB7iIv1y7xiObm724gt97P8Iy Assg3lHR2gO5yyAT/kOWFEukFigZvgIffHnzvBehtTM/zrcbQnLcIm7EHaJfXAum N/uGNmThP4wXHkQzXJGRBX8C4I2Q9uiV+nmIrj2G9Zk1CdMTLFvd16/M3lHgYBXj XtaidmcCGv8gpFhcdlJITwEf6pWYJw0= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:32 2025 by rpki-client