$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c9941a8-fb10-3e1d-b9b6-1e5109915c3c.roa File: 0c9941a8-fb10-3e1d-b9b6-1e5109915c3c.roa (raw, json) Hash identifier: iXHqapwe7g/XHfnmpUOcPbN8c4/LfJOEGDE7Mfjfkyo= Subject key identifier: 02:6A:FF:1A:C5:27:38:08:1F:B2:F3:C2:CD:94:E1:C7:DD:03:A8:B1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B8BE23638BEC876B35949F360 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c9941a8-fb10-3e1d-b9b6-1e5109915c3c.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 7029 IP address blocks: 69.66.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:36:38:be:c8:76:b3:59:49:f3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=2fed43f9-83d0-4795-83b2-1cbac422c23b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5b:5e:b7:ec:6d:57:ca:44:21:42:d1:39:9c: 6d:73:10:f9:48:e9:15:ee:25:e5:6e:8f:28:b8:69: bf:99:39:6e:28:23:a9:73:f3:64:bf:b6:15:71:1b: b9:d9:85:f6:7c:b4:7a:e7:96:d6:3c:c0:c0:a5:2c: 48:2a:19:f8:a0:68:8a:99:ee:ec:08:5f:20:1b:ff: 5f:ae:c4:53:61:5e:21:27:be:aa:07:e5:da:c8:b0: 5c:c0:a7:f7:a5:7d:55:e0:23:f7:97:9a:6a:94:7d: f0:e0:59:46:0f:6d:19:90:28:ad:8e:cb:d5:a3:30: 9c:80:f1:2e:9f:44:83:f7:88:94:61:5e:34:01:dc: 12:04:43:e4:ba:ab:ff:3d:e5:6c:f2:ec:e0:1b:a5: e7:6a:e3:c4:d4:35:36:45:d2:4c:b3:bc:60:77:5f: ac:23:80:0f:5c:44:70:5c:bf:71:c6:90:bc:ef:b8: 9b:65:5a:3c:f3:fc:77:f1:51:75:57:67:0b:53:67: a9:35:20:dc:98:8a:2b:ff:c5:7c:92:1f:35:b2:a2: cf:0a:bd:f9:c3:a4:3f:5b:04:9a:49:17:e5:96:c2: 67:25:cb:dd:b4:d0:6e:2b:2c:72:96:7b:a3:89:bf: 85:1a:6f:ba:2f:76:f3:be:95:26:4f:06:53:0a:14: 15:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:6A:FF:1A:C5:27:38:08:1F:B2:F3:C2:CD:94:E1:C7:DD:03:A8:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c9941a8-fb10-3e1d-b9b6-1e5109915c3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:66:73:3d:d7:9c:85:06:b5:fd:0d:76:ab:61:c2:b1:95:e3: 23:04:95:3f:e5:9e:17:7f:a1:e9:cc:2b:77:67:f1:22:28:f4: 68:fd:ba:db:72:e7:c5:1f:f3:b2:32:6e:87:09:28:0c:7a:5b: 3f:42:a6:94:b4:fa:52:65:66:48:fb:4f:57:d7:9b:5e:78:6c: 6e:e1:54:41:45:eb:31:ab:d0:82:90:01:8c:78:c0:1c:be:76: 71:94:5d:e7:99:9a:3d:8e:cb:35:95:68:1b:b1:6e:de:5d:45: 6c:46:5b:26:82:e9:17:c3:69:8a:82:ce:f4:13:15:7a:57:a6: 5a:41:52:5a:33:30:6d:87:3a:85:1e:9f:1d:10:0e:ed:1a:f0: 39:6b:c5:bb:ba:94:1b:90:12:bd:b7:6f:be:cd:41:74:40:a7: ec:31:c4:3e:fe:2e:ad:3b:93:89:d2:cd:c9:ea:aa:db:a2:40: f6:22:51:57:61:7f:c3:ba:81:99:2a:22:4d:71:95:99:ab:41: c6:bf:42:b8:fd:60:a4:c4:22:d8:b7:45:ce:f6:01:14:fc:24: 39:32:d5:1e:62:53:4c:cd:4c:65:c8:26:38:1e:2e:5e:2c:c1: 42:4a:b5:58:b4:99:b1:e9:ea:c6:82:62:b0:8d:21:b0:c1:43: 5c:a6:3a:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4jY4vsh2s1lJ82AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk MmZlZDQzZjktODNkMC00Nzk1LTgzYjItMWNiYWM0MjJjMjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1tet+xtV8pEIULROZxtcxD5SOkV7iXlbo8o uGm/mTluKCOpc/Nkv7YVcRu52YX2fLR655bWPMDApSxIKhn4oGiKme7sCF8gG/9f rsRTYV4hJ76qB+XayLBcwKf3pX1V4CP3l5pqlH3w4FlGD20ZkCitjsvVozCcgPEu n0SD94iUYV40AdwSBEPkuqv/PeVs8uzgG6XnauPE1DU2RdJMs7xgd1+sI4APXERw XL9xxpC877ibZVo88/x38VF1V2cLU2epNSDcmIor/8V8kh81sqLPCr35w6Q/WwSa SRfllsJnJcvdtNBuKyxylnujib+FGm+6L3bzvpUmTwZTChQVSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJq/xrFJzgIH7Lzws2U4cfdA6ixMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGM5OTQxYTgtZmIxMC0z ZTFkLWI5YjYtMWU1MTA5OTE1YzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRUIuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9mcz3XnIUGtf0NdqthwrGV4yMElT/lnhd/oenMK3dn8SIo9Gj9utty 58Uf87IybocJKAx6Wz9CppS0+lJlZkj7T1fXm154bG7hVEFF6zGr0IKQAYx4wBy+ dnGUXeeZmj2OyzWVaBuxbt5dRWxGWyaC6RfDaYqCzvQTFXpXplpBUlozMG2HOoUe nx0QDu0a8Dlrxbu6lBuQEr23b77NQXRAp+wxxD7+Lq07k4nSzcnqqtuiQPYiUVdh f8O6gZkqIk1xlZmrQca/Qrj9YKTEIti3Rc72ART8JDky1R5iU0zNTGXIJjgeLl4s wUJKtVi0mbHp6saCYrCNIbDBQ1ymOkI= -----END CERTIFICATE-----Generated at Mon Oct 20 06:53:19 2025 by rpki-client