$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28691860-7dc6-3bba-bc74-2a2791eb58ca.roa File: 28691860-7dc6-3bba-bc74-2a2791eb58ca.roa (raw, json) Hash identifier: grLu/dKOD3wEV2CO1a+wOT4slOHp+4FbSuyWG18ltPY= Subject key identifier: 97:44:9B:38:72:C4:34:7F:56:2B:FF:51:29:FA:4C:8F:98:87:2B:1B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0DF2426B0B5A57083E800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28691860-7dc6-3bba-bc74-2a2791eb58ca.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 62583 IP address blocks: 66.32.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:df:24:26:b0:b5:a5:70:83:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=d3560bfa-1273-4a98-9cca-99877e60000f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:20:a7:a4:f4:05:7d:4b:67:50:12:f3:c8:ee: 64:43:cd:22:e7:fb:05:c3:fe:8d:43:f4:5f:87:46: 0e:af:b8:52:2c:d0:46:9d:fb:aa:d9:dc:ec:a6:d7: 7c:1d:22:d4:48:c1:b0:1d:84:af:d9:b9:d3:62:c5: 4f:11:76:f7:99:45:1f:9e:9a:58:dc:b9:57:16:15: 55:97:99:f4:df:aa:13:87:df:31:46:30:19:a0:09: d0:54:3a:09:2a:1d:b9:f8:c8:b1:5a:67:a1:ea:58: 78:3c:b0:12:04:61:e5:c4:07:52:3c:03:58:d6:e5: 84:03:bf:b3:ac:e2:7c:f7:9a:3d:1b:33:a4:7d:ea: 2f:a9:c2:a2:86:ef:72:48:b6:6b:ad:b6:aa:70:ae: 10:ff:89:e3:7f:da:d4:f9:bf:22:3a:a0:b2:10:55: 5a:c9:a6:81:87:d4:6a:11:e5:df:a2:68:a0:59:9b: 4f:90:88:f9:57:51:ca:d3:9e:02:dd:53:de:5d:f5: c0:89:35:ee:f6:c1:fb:38:45:ae:d9:f0:d2:59:e2: e7:59:15:a8:cc:6d:fe:b9:1a:a2:e7:4e:44:61:86: c6:43:a1:36:28:6c:5a:e0:89:0f:76:0d:94:78:b9: a5:03:0e:f4:08:c3:14:f3:0f:ae:f6:1e:bb:a6:b1: 2d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:44:9B:38:72:C4:34:7F:56:2B:FF:51:29:FA:4C:8F:98:87:2B:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28691860-7dc6-3bba-bc74-2a2791eb58ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.32.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:1c:79:b4:bc:8b:44:96:89:07:fe:20:66:a4:2c:95:a6:c2: e8:4b:e1:a5:fc:7b:b1:9a:e9:c9:db:fa:1e:a4:82:1b:96:97: b2:21:c2:c0:3d:ea:53:d6:c4:f9:52:2c:31:b0:5e:76:73:0b: 02:22:ec:f7:06:ec:b6:e1:65:24:b9:31:17:89:56:7e:89:e5: 14:04:35:55:d2:2e:56:6e:73:b6:cc:91:6b:1b:0d:2a:ca:c6: 39:16:1a:6b:50:1d:25:d0:aa:d2:14:91:0c:b3:50:5e:42:60: 53:fb:6c:bb:6e:b6:6f:00:c4:4d:bb:d5:20:04:36:b5:81:e4: a7:87:8f:b5:9a:04:48:4b:44:4b:4b:69:5f:01:4d:a1:88:b7: 9b:f4:78:1d:dd:d7:bc:e6:e0:71:b7:b4:86:9b:bc:c2:de:05: ae:62:2f:7f:4e:4a:f2:cb:e6:91:c3:0d:c2:09:71:ee:84:b6: ce:10:7e:5f:49:64:d1:c1:37:42:2b:f1:97:3a:dc:ca:31:6d: 1a:f7:51:29:32:e8:22:09:02:50:2d:62:2e:d6:73:7c:6d:16: bf:86:1d:a0:30:23:93:f8:31:97:26:3d:65:31:49:59:8d:f7: 9d:49:8a:92:7f:35:2a:17:d7:57:81:99:ed:1d:41:58:d0:bc: 1f:76:00:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoN8kJrC1pXCD6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZDM1NjBiZmEtMTI3My00YTk4LTljY2EtOTk4NzdlNjAwMDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiCnpPQFfUtnUBLzyO5kQ80i5/sFw/6NQ/Rf h0YOr7hSLNBGnfuq2dzsptd8HSLUSMGwHYSv2bnTYsVPEXb3mUUfnppY3LlXFhVV l5n036oTh98xRjAZoAnQVDoJKh25+MixWmeh6lh4PLASBGHlxAdSPANY1uWEA7+z rOJ895o9GzOkfeovqcKihu9ySLZrrbaqcK4Q/4njf9rU+b8iOqCyEFVayaaBh9Rq EeXfomigWZtPkIj5V1HK054C3VPeXfXAiTXu9sH7OEWu2fDSWeLnWRWozG3+uRqi 505EYYbGQ6E2KGxa4IkPdg2UeLmlAw70CMMU8w+u9h67prEtuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdEmzhyxDR/Viv/USn6TI+YhysbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjg2OTE4NjAtN2RjNi0z YmJhLWJjNzQtMmEyNzkxZWI1OGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiBlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADscebS8i0SWiQf+IGakLJWmwuhL4aX8e7Ga6cnb+h6kghuWl7IhwsA9 6lPWxPlSLDGwXnZzCwIi7PcG7LbhZSS5MReJVn6J5RQENVXSLlZuc7bMkWsbDSrK xjkWGmtQHSXQqtIUkQyzUF5CYFP7bLtutm8AxE271SAENrWB5KeHj7WaBEhLREtL aV8BTaGIt5v0eB3d17zm4HG3tIabvMLeBa5iL39OSvLL5pHDDcIJce6Ets4Qfl9J ZNHBN0Ir8Zc63MoxbRr3USky6CIJAlAtYi7Wc3xtFr+GHaAwI5P4MZcmPWUxSVmN 951JipJ/NSoX11eBme0dQVjQvB92ACQ= -----END CERTIFICATE-----Generated at Thu Aug 7 02:07:16 2025 by rpki-client