$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/18ee462e-71c1-3b44-84fc-d309b939e87d.roa File: 18ee462e-71c1-3b44-84fc-d309b939e87d.roa (raw, json) Hash identifier: uV66lK8QgNBhBWXXFrs8x1CnlRDlrBDJlqENu7JiYBw= Subject key identifier: E8:9A:CB:01:E4:F1:14:A3:91:A6:A6:F3:07:EE:6B:29:7A:20:33:E9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2A2C49A361FC1F5193AAA580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/18ee462e-71c1-3b44-84fc-d309b939e87d.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 166.82.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:49:a3:61:fc:1f:51:93:aa:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=98b1e052-51c6-4057-903d-eaefe547b507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:48:6e:5b:34:49:ac:10:f1:02:47:df:a2:4e: a6:33:06:60:52:75:87:83:f5:66:66:ca:ad:a0:89: 7a:fa:28:58:1a:67:f1:e2:f4:29:12:23:4e:33:1b: de:83:2d:43:31:6a:52:d7:53:17:d8:f3:c4:e1:75: 9d:93:cc:e9:25:4e:82:ef:49:db:bd:f2:a9:65:3b: d0:b0:72:1b:c7:a9:2e:e4:00:bb:29:ab:0b:9d:02: 6e:93:36:bc:f2:e5:78:83:c6:c2:d9:ef:a3:f8:78: 02:72:99:ba:29:15:40:62:04:54:2f:36:ba:6b:de: 81:4a:84:a5:e9:f8:5a:4d:a4:d3:a7:39:02:b9:f8: 67:3d:21:39:e1:ba:e5:68:f5:70:96:40:5d:30:c8: ac:ca:97:bd:c6:9c:67:2b:4f:79:ad:fb:9d:76:ad: 50:91:14:dd:03:d0:6c:47:5a:9f:18:06:2c:b4:2e: fe:5b:46:75:d6:d8:69:0d:90:10:d6:6d:8f:27:7e: e3:e3:2f:ef:e7:34:dd:82:a9:0c:7b:af:ba:55:3a: 90:19:fd:05:04:c0:fa:f1:1c:d1:82:f3:1d:b4:27: 20:20:7b:6b:6b:61:a8:3c:df:14:7b:7c:82:71:37: af:4e:f7:db:0f:f2:80:43:77:dc:75:4c:e4:dc:6f: 0b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9A:CB:01:E4:F1:14:A3:91:A6:A6:F3:07:EE:6B:29:7A:20:33:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/18ee462e-71c1-3b44-84fc-d309b939e87d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.82.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:70:9e:1d:cd:ae:40:43:21:cc:b9:19:17:b6:7a:55:e1:87: a8:ba:a2:73:75:d6:50:23:46:db:f7:37:10:dc:87:ff:4e:7c: ae:10:f6:90:61:6b:d7:bf:be:fa:7c:94:82:9e:6a:15:e7:d0: 70:eb:90:65:95:76:18:8c:7e:85:f7:1f:db:ae:6e:b3:3e:85: 38:68:71:15:68:7d:46:eb:64:5f:4c:da:b0:d4:aa:b2:39:b5: 01:c3:57:f5:05:96:01:6a:ec:a5:4c:9e:bf:b6:56:31:1e:e4: e6:74:29:e1:b8:8d:8d:ac:51:4c:6d:10:b6:7d:0c:ac:f7:09: a1:3e:38:e3:5e:1e:a7:3c:4b:dc:e1:b5:14:c6:ba:d8:9d:0e: b0:1d:ab:be:4f:46:f7:ed:11:23:43:07:a9:35:b6:83:da:53: 71:0a:24:bb:3d:84:55:af:1a:36:93:d0:71:41:12:91:9f:63: f6:5e:15:dd:10:8b:5d:d9:1b:ef:70:56:4d:dd:f0:04:d8:8a: 58:76:30:ad:e9:dd:f3:b3:7e:2e:c8:fb:3a:0c:ef:09:1c:68: 9a:35:cb:5b:73:c1:cd:02:32:5e:cc:5c:43:72:87:45:94:b4: ce:90:10:88:9e:92:1c:f3:3c:ac:5f:2e:7c:39:c3:2d:8a:4c: e1:60:9a:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEmjYfwfUZOqpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk OThiMWUwNTItNTFjNi00MDU3LTkwM2QtZWFlZmU1NDdiNTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0huWzRJrBDxAkffok6mMwZgUnWHg/VmZsqt oIl6+ihYGmfx4vQpEiNOMxvegy1DMWpS11MX2PPE4XWdk8zpJU6C70nbvfKpZTvQ sHIbx6ku5AC7KasLnQJukza88uV4g8bC2e+j+HgCcpm6KRVAYgRULza6a96BSoSl 6fhaTaTTpzkCufhnPSE54brlaPVwlkBdMMisype9xpxnK095rfuddq1QkRTdA9Bs R1qfGAYstC7+W0Z11thpDZAQ1m2PJ37j4y/v5zTdgqkMe6+6VTqQGf0FBMD68RzR gvMdtCcgIHtra2GoPN8Ue3yCcTevTvfbD/KAQ3fcdUzk3G8LhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiaywHk8RSjkaam8wfuayl6IDPpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMThlZTQ2MmUtNzFjMS0z YjQ0LTg0ZmMtZDMwOWI5MzllODdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCplLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpwnh3NrkBDIcy5GRe2elXhh6i6onN11lAjRtv3NxDch/9OfK4Q9pBh a9e/vvp8lIKeahXn0HDrkGWVdhiMfoX3H9uubrM+hThocRVofUbrZF9M2rDUqrI5 tQHDV/UFlgFq7KVMnr+2VjEe5OZ0KeG4jY2sUUxtELZ9DKz3CaE+OONeHqc8S9zh tRTGutidDrAdq75PRvftESNDB6k1toPaU3EKJLs9hFWvGjaT0HFBEpGfY/ZeFd0Q i13ZG+9wVk3d8ATYilh2MK3p3fOzfi7I+zoM7wkcaJo1y1tzwc0CMl7MXENyh0WU tM6QEIiekhzzPKxfLnw5wy2KTOFgmq4= -----END CERTIFICATE-----Generated at Tue Nov 4 16:56:49 2025 by rpki-client