$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03212e39-c85e-3250-b8f9-f642b868e221.roa File: 03212e39-c85e-3250-b8f9-f642b868e221.roa (raw, json) Hash identifier: HkG7cWJnHO4FAkv3btYpBwZcK7GyvcyBGbPTAza65FA= Subject key identifier: 35:57:8B:6E:55:31:F4:D9:E0:31:0B:9A:E6:1A:D7:60:AE:DC:3A:A2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D8BD5C4416A7127B2980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03212e39-c85e-3250-b8f9-f642b868e221.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 27338 IP address blocks: 66.0.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d8:bd:5c:44:16:a7:12:7b:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=fd32f460-e8d7-4a8a-87b7-c9fc760584cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:00:da:c2:7e:92:28:ca:84:65:df:6f:e3:61: 94:90:2a:c2:e8:cb:79:e5:a1:99:86:8a:c8:5f:5f: d4:0f:ce:82:e3:77:8d:63:e2:18:94:b4:17:70:ac: 35:00:6d:1c:87:08:e3:83:9d:ea:a1:1f:36:a5:21: e8:24:29:17:b9:92:bb:e7:76:10:97:eb:c6:5c:8a: c6:d4:fc:ed:d0:74:d3:fc:03:e3:a9:45:66:7a:cb: f9:24:cb:e5:46:21:20:b3:bb:26:bc:1d:f5:ae:df: 02:e0:a6:10:f3:a0:d9:25:8b:29:8c:c3:7a:68:34: 71:74:13:35:f1:6f:37:8e:08:71:a5:e0:54:0e:cf: 32:6c:a1:14:5e:ba:f4:d4:f4:49:ea:c7:34:df:98: 71:fd:e6:22:bb:26:fb:d1:22:d7:cb:fb:68:55:ad: 84:9f:49:61:26:c1:5e:5b:48:4f:65:d8:1c:12:21: 00:87:53:73:12:09:b8:12:de:81:da:32:58:86:b1: 1a:81:41:a1:b6:c5:da:0d:98:bb:fd:15:e9:f2:3b: 10:83:ea:45:1a:8b:a6:8b:c2:bb:92:b3:d7:c0:fe: be:84:f2:fc:bf:4f:1a:fb:9a:79:45:79:6b:86:76: a0:1a:4b:ad:66:77:17:4f:a6:59:ff:ba:c2:12:c6: b8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:57:8B:6E:55:31:F4:D9:E0:31:0B:9A:E6:1A:D7:60:AE:DC:3A:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03212e39-c85e-3250-b8f9-f642b868e221.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.0.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:20:b9:d4:2e:27:97:94:32:c6:55:e8:32:86:a2:1a:0b:16: 41:4d:f5:8a:b3:5e:ee:31:56:52:66:1b:30:dc:14:6d:4e:04: 51:00:0d:55:d5:e7:7b:4f:40:20:e7:79:7d:41:c7:f9:20:f3: b5:4d:d3:a1:7f:f5:be:53:f5:84:03:1e:ae:52:01:c8:32:6c: 3e:7a:47:72:0d:80:ad:bf:62:ae:da:65:e0:a1:c1:64:3a:27: 55:cf:6f:2d:d6:24:46:8d:ad:e8:da:2d:99:f3:37:c1:81:12: 15:e5:53:74:de:15:83:f2:28:8d:5d:70:24:0c:f8:2a:b4:d0: fb:ff:95:e0:69:8d:41:57:56:42:e6:47:47:91:69:34:5b:e0: 6f:30:54:0d:b8:9a:03:45:fd:c6:de:74:1e:1a:70:52:e7:94: b5:8a:f3:df:0a:7c:02:cd:82:7b:1e:12:c2:b3:11:6a:fd:71: 0e:01:6d:d0:80:50:6f:63:ab:09:a7:ce:4f:27:9e:ad:b3:c5: f1:d2:de:28:40:cc:3a:a8:75:78:87:79:6a:69:84:31:41:35: d1:65:db:aa:41:34:8f:af:57:bb:e9:49:28:57:6a:30:50:c9: 13:c0:69:10:10:36:4d:77:5b:2c:56:b5:e5:a2:c0:9d:3d:58: c7:19:be:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNi9XEQWpxJ7KYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZmQzMmY0NjAtZThkNy00YThhLTg3YjctYzlmYzc2MDU4NGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQDawn6SKMqEZd9v42GUkCrC6Mt55aGZhorI X1/UD86C43eNY+IYlLQXcKw1AG0chwjjg53qoR82pSHoJCkXuZK753YQl+vGXIrG 1Pzt0HTT/APjqUVmesv5JMvlRiEgs7smvB31rt8C4KYQ86DZJYspjMN6aDRxdBM1 8W83jghxpeBUDs8ybKEUXrr01PRJ6sc035hx/eYiuyb70SLXy/toVa2En0lhJsFe W0hPZdgcEiEAh1NzEgm4Et6B2jJYhrEagUGhtsXaDZi7/RXp8jsQg+pFGoumi8K7 krPXwP6+hPL8v08a+5p5RXlrhnagGkutZncXT6ZZ/7rCEsa4vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVXi25VMfTZ4DELmuYa12Cu3DqiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDMyMTJlMzktYzg1ZS0z MjUwLWI4ZjktZjY0MmI4NjhlMjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQgD+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFogudQuJ5eUMsZV6DKGohoLFkFN9YqzXu4xVlJmGzDcFG1OBFEADVXV 53tPQCDneX1Bx/kg87VN06F/9b5T9YQDHq5SAcgybD56R3INgK2/Yq7aZeChwWQ6 J1XPby3WJEaNrejaLZnzN8GBEhXlU3TeFYPyKI1dcCQM+Cq00Pv/leBpjUFXVkLm R0eRaTRb4G8wVA24mgNF/cbedB4acFLnlLWK898KfALNgnseEsKzEWr9cQ4BbdCA UG9jqwmnzk8nnq2zxfHS3ihAzDqodXiHeWpphDFBNdFl26pBNI+vV7vpSShXajBQ yRPAaRAQNk13WyxWteWiwJ09WMcZvjQ= -----END CERTIFICATE-----Generated at Thu Aug 7 00:45:04 2025 by rpki-client