$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af3c0b6b-052e-36fe-b680-5b5ea7e2e707.roa File: af3c0b6b-052e-36fe-b680-5b5ea7e2e707.roa (raw, json) Hash identifier: q1OjxaXyaKv3yzmPf3iukqZGowtdTofKPbZTuTmJU3c= Subject key identifier: 05:5D:DE:E0:BF:8A:DC:DC:C4:6C:DD:12:21:AC:BA:52:B4:B9:F8:77 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD6691B87564615CF626AC80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af3c0b6b-052e-36fe-b680-5b5ea7e2e707.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 69.66.178.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:91:b8:75:64:61:5c:f6:26:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=dc082ac9-3bc2-492a-a5b8-65a07292e627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:df:7a:55:d7:d8:02:f2:d8:9f:31:a5:bf:e7: 1e:40:e9:c2:f4:5d:94:34:8a:19:22:26:57:da:c3: c1:90:52:7b:b7:e6:de:b5:63:01:fb:73:f6:37:1c: ff:66:bc:af:09:6c:22:40:d2:49:e0:95:8c:87:8a: 8b:28:2d:97:ad:ec:fd:75:de:db:69:2a:02:da:ed: 66:54:20:06:d9:4d:75:17:4f:b4:7e:49:57:12:52: cd:1e:69:84:45:96:a7:d0:d2:c7:a8:c2:ae:cf:58: bb:49:20:fb:d0:59:8a:03:8a:ae:49:7b:7c:34:94: 01:32:1f:83:99:67:60:66:b7:64:fc:7e:76:d3:9d: cd:b7:25:35:07:44:53:65:a8:fc:b8:91:1e:22:88: 10:83:42:e3:dd:88:98:56:11:05:49:60:df:39:ba: 99:54:d9:fa:0d:ea:50:85:86:c7:e6:1e:c8:8d:c4: ce:37:fe:59:e0:a2:e0:99:ba:2a:17:e2:42:5d:08: 14:3c:63:49:88:ad:1f:16:b5:1c:37:b8:c6:76:f6: fa:2d:54:49:28:e5:ba:de:62:7a:9a:ee:4e:48:97: b2:e2:3f:eb:9c:9f:85:24:df:90:1f:e3:7e:76:01: 18:76:31:dd:5c:fe:3b:27:ed:59:01:52:3c:2a:af: bc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:5D:DE:E0:BF:8A:DC:DC:C4:6C:DD:12:21:AC:BA:52:B4:B9:F8:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af3c0b6b-052e-36fe-b680-5b5ea7e2e707.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.178.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:cd:cc:13:72:88:4f:32:d4:c2:d1:e9:02:d4:31:65:be:20: ee:d4:2a:31:db:d4:88:4c:e9:e0:44:b0:fd:58:dd:04:f7:8b: 53:af:3c:ca:f3:95:95:bc:ba:b1:94:4e:2b:7e:c9:6a:c4:37: 66:b0:94:df:af:46:57:e2:92:6e:c0:14:51:44:35:8d:c8:68: 81:a4:07:e1:94:88:eb:53:0b:b2:59:4a:95:2b:01:2e:55:97: 5d:e7:83:d7:e7:ca:7a:6c:53:0c:57:99:7d:6a:f8:10:45:be: 1c:d0:e0:0a:02:df:59:cc:ef:31:30:aa:ad:14:a5:6a:a9:2e: e9:b7:28:77:bc:cd:a4:19:67:3d:13:1d:a9:2f:a9:14:ce:64: 80:e3:e2:0c:c5:96:21:ee:2a:86:fa:c9:90:3d:e8:0b:71:9c: cf:ba:bd:c0:a5:ac:3c:6e:83:f9:8f:3a:b6:ee:e7:31:36:c6: 4b:ab:71:24:bf:65:c7:38:5a:78:8c:71:33:cf:e8:03:74:b3: df:9c:3a:4b:00:97:83:86:db:f3:4e:a1:5e:81:cb:55:63:30: 84:43:15:52:e6:8c:33:06:4e:4a:4e:3d:ac:1f:dc:f7:9d:da: e5:33:99:19:70:e9:7e:af:4e:b1:c3:5b:8e:e8:ff:1c:1e:89: e5:db:77:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZpG4dWRhXPYmrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk ZGMwODJhYzktM2JjMi00OTJhLWE1YjgtNjVhMDcyOTJlNjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiN96VdfYAvLYnzGlv+ceQOnC9F2UNIoZIiZX 2sPBkFJ7t+betWMB+3P2Nxz/ZryvCWwiQNJJ4JWMh4qLKC2Xrez9dd7baSoC2u1m VCAG2U11F0+0fklXElLNHmmERZan0NLHqMKuz1i7SSD70FmKA4quSXt8NJQBMh+D mWdgZrdk/H52053NtyU1B0RTZaj8uJEeIogQg0Lj3YiYVhEFSWDfObqZVNn6DepQ hYbH5h7IjcTON/5Z4KLgmboqF+JCXQgUPGNJiK0fFrUcN7jGdvb6LVRJKOW63mJ6 mu5OSJey4j/rnJ+FJN+QH+N+dgEYdjHdXP47J+1ZAVI8Kq+86wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVd3uC/itzcxGzdEiGsulK0ufh3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWYzYzBiNmItMDUyZS0z NmZlLWI2ODAtNWI1ZWE3ZTJlNzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRUKyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7NzBNyiE8y1MLR6QLUMWW+IO7UKjHb1IhM6eBEsP1Y3QT3i1OvPMrz lZW8urGUTit+yWrEN2awlN+vRlfikm7AFFFENY3IaIGkB+GUiOtTC7JZSpUrAS5V l13ng9fnynpsUwxXmX1q+BBFvhzQ4AoC31nM7zEwqq0UpWqpLum3KHe8zaQZZz0T HakvqRTOZIDj4gzFliHuKob6yZA96AtxnM+6vcClrDxug/mPOrbu5zE2xkurcSS/ Zcc4WniMcTPP6AN0s9+cOksAl4OG2/NOoV6By1VjMIRDFVLmjDMGTkpOPawf3Ped 2uUzmRlw6X6vTrHDW47o/xweieXbd6Y= -----END CERTIFICATE-----Generated at Sat Aug 23 15:50:03 2025 by rpki-client