$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11c972a3-a6cc-334d-8d6b-67c2806bdf2c.roa File: 11c972a3-a6cc-334d-8d6b-67c2806bdf2c.roa (raw, json) Hash identifier: 5MBFQacaK5CvtPVlIpUWcu0zX6jTF69qAaVIpDPrfJI= Subject key identifier: 97:26:8E:70:52:5A:21:6C:BF:DF:8B:CC:69:EB:61:4B:47:D6:7B:92 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A1072C89A61D51492D69C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11c972a3-a6cc-334d-8d6b-67c2806bdf2c.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 27338 IP address blocks: 97.66.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:07:2c:89:a6:1d:51:49:2d:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=10f06081-c334-4403-b8e6-d260a7feb2ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0c:32:14:09:c0:9b:d5:47:b5:f3:2b:fc:4c: 29:84:29:10:64:db:ed:8f:65:7f:23:8f:47:50:94: 6a:25:c4:3b:e0:8b:94:55:9d:30:3c:3e:9a:98:3e: 3b:c8:cf:de:da:cf:df:9b:32:34:fa:ea:a9:39:68: 51:b4:f3:17:8c:d3:89:77:c4:3f:c1:ed:f6:24:8a: 51:6f:3c:3a:5a:13:58:08:6c:1c:53:e8:83:35:88: 62:2e:98:d5:b4:d1:aa:a3:ff:5f:76:37:0f:88:ad: 08:b1:c8:33:96:f5:2c:89:6b:9c:85:80:b4:ff:ae: 74:77:46:fa:c8:be:17:22:b8:4b:c5:fb:50:09:c7: 3e:8b:52:c9:03:48:3b:3c:67:57:8c:e1:e1:23:eb: 2c:a4:ab:2a:d6:aa:d5:b0:29:f4:1f:7b:5c:d6:e7: f6:79:33:fe:94:de:61:70:81:77:55:5f:64:b3:8c: c2:5c:54:d0:54:dc:cd:17:91:0a:60:fc:fa:54:7c: 13:1f:3d:ff:e0:af:47:c2:45:1d:2e:fe:e7:00:f2: b1:10:a6:8a:86:49:6e:3b:af:7c:bc:8a:bd:52:82: 03:51:b7:7f:7f:6a:9f:a0:e3:29:13:9f:45:dd:c2: aa:f3:56:90:36:37:e8:42:0d:f0:2c:88:c2:4c:8c: c0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:26:8E:70:52:5A:21:6C:BF:DF:8B:CC:69:EB:61:4B:47:D6:7B:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11c972a3-a6cc-334d-8d6b-67c2806bdf2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 97.66.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:e6:f0:28:bf:d6:68:d4:62:bf:4d:7e:0e:bd:80:14:2a:c1: cc:2a:de:27:df:81:4b:17:89:aa:54:df:98:9c:d9:be:b4:9c: e0:90:39:b7:dc:78:8b:67:41:6c:9d:6a:0d:fb:f5:50:69:01: a4:09:d3:0a:5f:9c:eb:e0:aa:7b:da:fd:c6:57:c9:26:66:fe: f8:0d:10:15:48:54:80:ad:78:a2:79:f5:ec:80:a1:76:30:92: 41:33:f3:29:92:9f:d2:b5:07:03:b0:f4:3a:a1:7f:e7:c0:6f: b3:c1:02:68:f1:95:03:2b:47:5d:89:73:82:dc:e4:96:98:57: 22:4e:3b:0f:ae:15:7f:d1:b2:3e:e9:3c:8a:8a:48:12:a2:c6: d4:46:da:cb:3b:79:25:62:e1:b2:03:71:dc:ff:9d:b6:09:3d: 99:0f:83:3c:68:93:a2:24:95:f7:b9:ed:3d:cb:d5:fc:b4:77: 7b:c7:36:f2:2d:d0:42:a4:fd:20:92:c6:0d:35:4e:63:1d:ad: 3f:ee:5b:11:78:47:ea:fe:4e:30:9e:96:b1:68:96:45:e0:11: bf:1f:7f:47:68:50:c7:9c:5d:c7:aa:05:66:84:ad:f8:e0:51: 12:d9:04:bb:33:1b:05:e9:4e:e9:07:65:e2:b3:5a:0d:56:c3: 7f:9b:b8:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoQcsiaYdUUktacAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MTBmMDYwODEtYzMzNC00NDAzLWI4ZTYtZDI2MGE3ZmViMmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQwyFAnAm9VHtfMr/EwphCkQZNvtj2V/I49H UJRqJcQ74IuUVZ0wPD6amD47yM/e2s/fmzI0+uqpOWhRtPMXjNOJd8Q/we32JIpR bzw6WhNYCGwcU+iDNYhiLpjVtNGqo/9fdjcPiK0IscgzlvUsiWuchYC0/650d0b6 yL4XIrhLxftQCcc+i1LJA0g7PGdXjOHhI+sspKsq1qrVsCn0H3tc1uf2eTP+lN5h cIF3VV9ks4zCXFTQVNzNF5EKYPz6VHwTHz3/4K9HwkUdLv7nAPKxEKaKhkluO698 vIq9UoIDUbd/f2qfoOMpE59F3cKq81aQNjfoQg3wLIjCTIzAKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcmjnBSWiFsv9+LzGnrYUtH1nuSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTFjOTcyYTMtYTZjYy0z MzRkLThkNmItNjdjMjgwNmJkZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYULQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrm8Ci/1mjUYr9Nfg69gBQqwcwq3iffgUsXiapU35ic2b60nOCQObfc eItnQWydag379VBpAaQJ0wpfnOvgqnva/cZXySZm/vgNEBVIVICteKJ59eyAoXYw kkEz8ymSn9K1BwOw9Dqhf+fAb7PBAmjxlQMrR12Jc4Lc5JaYVyJOOw+uFX/Rsj7p PIqKSBKixtRG2ss7eSVi4bIDcdz/nbYJPZkPgzxok6Iklfe57T3L1fy0d3vHNvIt 0EKk/SCSxg01TmMdrT/uWxF4R+r+TjCelrFolkXgEb8ff0doUMecXceqBWaErfjg URLZBLszGwXpTukHZeKzWg1Ww3+buCA= -----END CERTIFICATE-----Generated at Thu Aug 7 00:39:06 2025 by rpki-client