$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/300f284b-a862-3224-8792-73a9f82be269.roa File: 300f284b-a862-3224-8792-73a9f82be269.roa (raw, json) Hash identifier: nj/AJ1Y4KIyXrrSpM6YjU89QGdZ27gHKVPtNZ1qNij4= Subject key identifier: 09:B4:21:4D:68:64:7D:AB:48:FF:37:85:80:D3:1C:E9:6F:0B:90:36 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D8272C999E75C9BEDCE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/300f284b-a862-3224-8792-73a9f82be269.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 22773 IP address blocks: 166.102.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d8:27:2c:99:9e:75:c9:be:dc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=96175bed-d4d1-4c22-a988-a4aa19ba7437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a5:1e:77:9a:b5:24:a5:c4:dc:db:76:26:6e: 87:5f:4e:87:9b:17:86:d0:c6:85:dc:6e:4f:95:33: 82:22:01:d4:9b:32:fa:d2:9b:df:56:e5:81:eb:6c: 0a:22:8a:30:24:b9:c8:2e:37:6b:f5:25:81:04:8f: 9f:04:18:42:34:48:97:9e:97:a2:1f:78:47:49:6d: 06:ca:f4:dd:f8:4d:98:30:4d:bd:35:bb:c2:d3:b6: 7c:5a:6a:24:1e:71:8e:30:a7:bf:a7:11:4e:06:26: 39:83:f1:16:02:56:58:29:6b:34:81:89:50:04:1b: 46:5c:ed:f8:e0:6c:ce:d3:0e:c7:b1:e6:9c:1a:ff: 11:7b:1e:16:e4:a8:88:8a:7c:be:d0:cf:9e:a2:26: 84:2c:65:24:01:a6:f1:cb:e9:43:da:5c:76:b2:e9: 37:f4:00:42:5f:2e:00:a8:5c:c6:4e:56:cb:b3:f6: cd:a6:85:e4:b9:29:b1:44:6d:f4:5f:6c:c6:63:54: 8e:09:02:2b:d9:f8:19:e7:52:16:c4:de:5d:7c:d9: 8b:e7:c0:0f:b3:b4:c4:14:1a:29:d2:1e:66:e8:bb: 20:58:64:f9:1c:0b:bc:c5:ce:d5:46:df:96:ad:bd: 49:f3:f1:71:14:2e:e3:f1:12:f6:bb:d5:58:51:3e: 34:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B4:21:4D:68:64:7D:AB:48:FF:37:85:80:D3:1C:E9:6F:0B:90:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/300f284b-a862-3224-8792-73a9f82be269.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.102.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:d0:24:ec:e0:5a:54:02:cd:33:e9:37:97:a6:db:b2:88:1d: fd:d7:25:1b:6a:66:73:26:e9:73:dc:6f:c4:48:d1:99:25:fa: d5:72:24:e0:29:b7:45:ea:1d:7e:8f:9f:46:46:e7:be:03:57: 9f:dc:b6:ad:44:98:5d:da:60:f0:74:65:77:68:e6:c5:64:66: 2a:1c:2e:42:d9:92:07:da:0a:99:3a:2c:a0:a8:38:c4:ee:ee: db:d8:48:77:59:e9:94:70:e3:af:9d:f8:80:2f:2d:bd:bd:a5: f0:e5:e9:28:41:55:57:c0:24:ed:cd:38:1e:91:b0:84:38:5e: 42:58:60:8b:82:b6:93:c0:b3:c7:71:fc:2e:3b:56:03:6f:94: 68:48:3a:4e:84:ee:48:c4:2f:7c:e6:33:6d:95:b5:a5:3f:ed: 57:27:36:ab:5c:21:16:9a:73:b7:24:28:7b:60:60:42:0a:9c: 5c:5a:6c:db:b7:7f:85:de:9f:89:d0:8b:96:9a:21:56:9b:89: 7c:8d:81:11:96:4f:32:91:05:cf:51:d3:8b:7c:ae:4a:b7:96: 96:46:ef:b2:b9:0e:61:1b:ab:88:0b:67:32:01:1e:be:fa:2a: 47:17:fb:78:03:a5:42:ab:6d:6e:67:b5:73:e2:04:63:6f:dc: 54:0e:d6:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNgnLJmedcm+3OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk OTYxNzViZWQtZDRkMS00YzIyLWE5ODgtYTRhYTE5YmE3NDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaUed5q1JKXE3Nt2Jm6HX06HmxeG0MaF3G5P lTOCIgHUmzL60pvfVuWB62wKIoowJLnILjdr9SWBBI+fBBhCNEiXnpeiH3hHSW0G yvTd+E2YME29NbvC07Z8WmokHnGOMKe/pxFOBiY5g/EWAlZYKWs0gYlQBBtGXO34 4GzO0w7HseacGv8Rex4W5KiIiny+0M+eoiaELGUkAabxy+lD2lx2suk39ABCXy4A qFzGTlbLs/bNpoXkuSmxRG30X2zGY1SOCQIr2fgZ51IWxN5dfNmL58APs7TEFBop 0h5m6LsgWGT5HAu8xc7VRt+Wrb1J8/FxFC7j8RL2u9VYUT40AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAm0IU1oZH2rSP83hYDTHOlvC5A2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzAwZjI4NGItYTg2Mi0z MjI0LTg3OTItNzNhOWY4MmJlMjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApmaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7QJOzgWlQCzTPpN5em27KIHf3XJRtqZnMm6XPcb8RI0Zkl+tVyJOAp t0XqHX6Pn0ZG574DV5/ctq1EmF3aYPB0ZXdo5sVkZiocLkLZkgfaCpk6LKCoOMTu 7tvYSHdZ6ZRw46+d+IAvLb29pfDl6ShBVVfAJO3NOB6RsIQ4XkJYYIuCtpPAs8dx /C47VgNvlGhIOk6E7kjEL3zmM22VtaU/7VcnNqtcIRaac7ckKHtgYEIKnFxabNu3 f4Xen4nQi5aaIVabiXyNgRGWTzKRBc9R04t8rkq3lpZG77K5DmEbq4gLZzIBHr76 KkcX+3gDpUKrbW5ntXPiBGNv3FQO1nI= -----END CERTIFICATE-----Generated at Wed Aug 6 14:20:31 2025 by rpki-client