$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/56436058-a377-3960-bd3d-4f3831bf1cf1.roa File: 56436058-a377-3960-bd3d-4f3831bf1cf1.roa (raw, json) Hash identifier: 4RM6CMy2Zhsxgh4TL9X4NjNfAGrdUhHkACjSh93QhKA= Subject key identifier: E5:F8:59:54:34:9E:27:B1:71:87:71:F9:B0:8B:73:86:56:12:F2:F5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A109A87228B591731F2500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/56436058-a377-3960-bd3d-4f3831bf1cf1.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 63307 IP address blocks: 66.152.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:09:a8:72:28:b5:91:73:1f:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=f8405bf7-c42f-4dc1-8d50-6940c4a1fb5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:77:f9:72:55:ae:25:4a:aa:57:39:97:84:62: d8:d6:a0:11:7f:75:3d:5f:81:6f:5b:66:9f:34:94: 65:17:05:3d:95:c5:9e:11:ed:bf:29:02:ac:c6:bf: 20:a4:2e:d9:58:ac:9b:f5:36:e6:59:b4:80:9b:be: a3:d8:c9:39:e5:16:f0:9b:e5:63:25:40:85:47:d3: 97:cc:98:ad:40:b8:45:57:77:02:4b:cc:a5:7f:75: 5d:9c:a4:a8:14:ee:17:42:8a:12:98:72:4f:6b:a6: 9f:15:42:54:ac:e9:c6:de:bb:21:cf:a1:fb:0d:56: 44:e0:4c:38:46:42:22:ef:00:48:ef:c9:19:f9:87: 17:1d:11:fc:48:25:42:0e:40:2f:e2:a5:53:fb:e5: a5:c9:da:ac:2e:96:b7:35:8a:68:da:5e:d3:69:ec: 87:f3:29:4b:d8:66:b6:8b:6c:41:79:96:73:5e:f8: 9a:85:fa:c7:4b:f5:00:40:da:76:00:08:9e:37:eb: 4f:27:2d:c1:06:ef:19:9f:c5:cc:21:b9:7f:b9:2a: 1d:85:5c:97:00:b3:a6:f5:51:f7:e4:4d:64:4a:b4: 2a:9c:0b:38:b0:3f:f4:30:02:c1:c0:35:29:00:e6: 61:c6:25:a4:aa:02:2e:6a:0f:0b:99:5e:fc:43:a4: 0b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:F8:59:54:34:9E:27:B1:71:87:71:F9:B0:8B:73:86:56:12:F2:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/56436058-a377-3960-bd3d-4f3831bf1cf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.152.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:11:e8:2c:4e:7e:34:ad:28:db:b6:bf:49:bf:7c:07:df:2c: 6e:6d:45:d3:30:bd:d7:cf:bb:50:3d:22:32:14:8b:df:87:6a: 46:c6:3a:6b:48:69:8e:57:52:34:2d:d9:cb:a3:82:bc:c1:30: 61:f0:8e:83:26:96:56:fe:fa:e0:17:8d:a3:1b:46:03:27:8c: c6:b1:e9:40:45:2a:46:bf:a3:b9:58:bc:73:e1:c9:6f:4c:8f: 1e:4b:03:10:8d:a4:d7:cc:e0:bd:58:a7:a9:1e:bb:28:f4:6b: 65:82:76:be:ee:d3:6e:1c:08:b1:9d:d0:5e:f0:e1:ae:3c:eb: e0:6c:36:7c:94:5a:20:6c:e9:7b:fe:46:94:a1:96:fc:ba:15: fb:dd:bf:be:05:25:7d:32:8c:85:3f:c3:53:6a:8a:f7:6e:49: 56:13:81:1a:c3:61:35:16:23:3c:e7:b0:b0:65:43:c2:c8:96: 24:2c:a6:cd:71:8a:e7:5a:d1:7c:62:f9:c8:c9:02:3c:9c:49: 53:25:3b:3f:1c:ca:ce:a9:e0:f2:7c:80:5e:0a:39:79:e8:24: e3:80:3b:9c:6a:a8:53:7d:29:23:5d:d4:30:ca:9e:50:1b:98: 00:68:7e:15:62:b8:63:9b:f1:4b:58:2f:a9:c1:91:57:cd:04: 34:71:fe:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoQmocii1kXMfJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk Zjg0MDViZjctYzQyZi00ZGMxLThkNTAtNjk0MGM0YTFmYjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnf5clWuJUqqVzmXhGLY1qARf3U9X4FvW2af NJRlFwU9lcWeEe2/KQKsxr8gpC7ZWKyb9TbmWbSAm76j2Mk55Rbwm+VjJUCFR9OX zJitQLhFV3cCS8ylf3VdnKSoFO4XQooSmHJPa6afFUJUrOnG3rshz6H7DVZE4Ew4 RkIi7wBI78kZ+YcXHRH8SCVCDkAv4qVT++WlydqsLpa3NYpo2l7TaeyH8ylL2Ga2 i2xBeZZzXviahfrHS/UAQNp2AAieN+tPJy3BBu8Zn8XMIbl/uSodhVyXALOm9VH3 5E1kSrQqnAs4sD/0MALBwDUpAOZhxiWkqgIuag8LmV78Q6QLxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOX4WVQ0niexcYdx+bCLc4ZWEvL1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTY0MzYwNTgtYTM3Ny0z OTYwLWJkM2QtNGYzODMxYmYxY2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQpjLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsR6CxOfjStKNu2v0m/fAffLG5tRdMwvdfPu1A9IjIUi9+HakbGOmtI aY5XUjQt2cujgrzBMGHwjoMmllb++uAXjaMbRgMnjMax6UBFKka/o7lYvHPhyW9M jx5LAxCNpNfM4L1Yp6keuyj0a2WCdr7u024cCLGd0F7w4a486+BsNnyUWiBs6Xv+ RpShlvy6Ffvdv74FJX0yjIU/w1NqivduSVYTgRrDYTUWIzznsLBlQ8LIliQsps1x iuda0Xxi+cjJAjycSVMlOz8cys6p4PJ8gF4KOXnoJOOAO5xqqFN9KSNd1DDKnlAb mABofhViuGOb8UtYL6nBkVfNBDRx/ms= -----END CERTIFICATE-----Generated at Thu Aug 7 04:43:23 2025 by rpki-client