$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/520be285-2429-3ad0-8ae4-5cc51f14e87e.roa File: 520be285-2429-3ad0-8ae4-5cc51f14e87e.roa (raw, json) Hash identifier: 4VFXUx0uIB77W61Ntbxr79XCuugAItVcvJGaAQtvJTw= Subject key identifier: B1:00:BD:D4:8B:D7:F1:2B:57:10:5D:20:8B:3E:3F:69:A1:F9:E3:FB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0F7BECF8B1174925D5C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/520be285-2429-3ad0-8ae4-5cc51f14e87e.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 66.0.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:f7:be:cf:8b:11:74:92:5d:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=09f4321f-b229-4630-a06d-0e2bb3d9bd61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:08:5b:67:f7:82:97:8a:fe:0d:6a:29:d0:62: 62:da:d9:c5:bf:a0:a7:16:81:a0:d0:6c:81:bc:76: a5:93:15:75:00:b6:52:58:21:c9:58:0c:4b:b6:c8: d9:9e:e3:06:6c:94:c5:cc:56:f5:01:26:78:18:b5: 7d:a7:2d:89:91:c4:2a:62:78:41:d8:64:37:e9:58: 88:6c:52:1c:5d:2e:c1:21:06:52:06:b8:10:89:82: 9e:91:e2:e9:4b:67:9c:18:84:e6:74:56:70:52:e0: 73:b4:6f:7b:ac:51:76:95:26:80:c0:2e:38:c5:3a: 87:cd:db:ce:1f:6c:46:9c:46:02:22:76:4a:27:85: 3d:51:63:92:06:14:9f:e0:8a:53:9f:6d:63:f9:d7: 0a:8b:7a:e6:5d:b7:20:79:bb:6e:70:d2:2e:71:b8: 2b:b0:6d:d9:7e:d9:e8:3e:fe:a7:e9:68:11:33:14: 55:e7:8a:0b:59:c7:21:2e:e4:9e:a9:47:eb:87:6b: 2e:16:28:51:c0:85:4d:02:f7:fb:b6:0d:4e:33:b9: 75:9c:bb:2c:98:8d:85:47:a2:2e:87:f4:49:df:58: f2:1a:d2:48:40:08:18:c0:70:a9:70:94:7b:fb:59: 41:4e:6f:6c:a7:76:86:6b:84:f8:8a:2d:27:73:63: b1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:00:BD:D4:8B:D7:F1:2B:57:10:5D:20:8B:3E:3F:69:A1:F9:E3:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/520be285-2429-3ad0-8ae4-5cc51f14e87e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.0.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:1e:18:b9:88:26:4d:49:28:4b:fe:b6:5f:9e:12:42:55:bb: 40:3b:78:51:13:59:ac:19:e4:30:5c:d1:63:4b:4c:e0:34:b0: 45:9f:db:4e:47:ab:8d:bf:31:fb:dd:3a:3b:b2:b9:78:77:17: 45:67:db:10:60:28:c0:4b:d0:a6:5c:80:e3:4c:b2:db:02:15: 39:4a:39:32:b2:ff:44:72:85:95:f1:69:d0:2f:c8:ec:7b:20: 76:a2:51:20:cf:c0:ff:0f:78:50:9e:71:df:4c:3f:d2:df:d8: 0f:3b:d4:b3:8d:5a:6b:d9:49:58:ea:1c:c1:97:a5:26:1c:1f: 76:23:d2:16:77:2b:41:74:fc:63:24:f4:c3:fd:95:c6:7e:54: 24:e3:fd:a2:1e:37:7a:29:a5:42:5d:24:c8:55:36:88:9a:52: 15:ba:f4:3d:69:e0:f7:71:8d:8a:7e:1a:c3:d4:ba:ab:3a:1e: c3:d2:3f:e6:25:72:fb:18:68:09:1f:a2:46:c0:2e:07:d7:81: 32:52:0f:c5:41:5a:ae:97:48:f6:47:2a:6d:1e:16:47:34:0c: 61:89:7e:2d:60:bc:48:6a:a4:e0:17:da:d3:be:70:bc:df:3a: b1:43:a6:da:b1:11:26:99:92:53:57:5b:d8:15:ef:51:64:74: 9e:a4:bc:13 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqQoPe+z4sRdJJdXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MDlmNDMyMWYtYjIyOS00NjMwLWEwNmQtMGUyYmIzZDliZDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmghbZ/eCl4r+DWop0GJi2tnFv6CnFoGg0GyB vHalkxV1ALZSWCHJWAxLtsjZnuMGbJTFzFb1ASZ4GLV9py2JkcQqYnhB2GQ36ViI bFIcXS7BIQZSBrgQiYKekeLpS2ecGITmdFZwUuBztG97rFF2lSaAwC44xTqHzdvO H2xGnEYCInZKJ4U9UWOSBhSf4IpTn21j+dcKi3rmXbcgebtucNIucbgrsG3Zftno Pv6n6WgRMxRV54oLWcchLuSeqUfrh2suFihRwIVNAvf7tg1OM7l1nLssmI2FR6Iu h/RJ31jyGtJIQAgYwHCpcJR7+1lBTm9sp3aGa4T4ii0nc2OxUQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLEAvdSL1/ErVxBdIIs+P2mh+eP7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTIwYmUyODUtMjQyOS0z YWQwLThhZTQtNWNjNTFmMTRlODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQgAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAlB4YuYgmTUkoS/62X54SQlW7QDt4URNZrBnkMFzRY0tM4DSwRZ/bTker jb8x+906O7K5eHcXRWfbEGAowEvQplyA40yy2wIVOUo5MrL/RHKFlfFp0C/I7Hsg dqJRIM/A/w94UJ5x30w/0t/YDzvUs41aa9lJWOocwZelJhwfdiPSFncrQXT8YyT0 w/2Vxn5UJOP9oh43eimlQl0kyFU2iJpSFbr0PWng93GNin4aw9S6qzoew9I/5iVy +xhoCR+iRsAuB9eBMlIPxUFarpdI9kcqbR4WRzQMYYl+LWC8SGqk4Bfa075wvN86 sUOm2rERJpmSU1db2BXvUWR0nqS8Ew== -----END CERTIFICATE-----Generated at Wed Aug 6 13:13:11 2025 by rpki-client