$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5786b1b7-df8c-32e9-b0d0-95a207021807.roa File: 5786b1b7-df8c-32e9-b0d0-95a207021807.roa (raw, json) Hash identifier: QXlcqgIlT8RquN3CK5ny3W5Wdg4Sif6hLHRQDJSQdF4= Subject key identifier: 69:E5:C1:9A:56:F2:68:9F:26:24:67:4F:D3:5D:1C:1D:50:35:E8:9B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB7B625381F970FB160B73FE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5786b1b7-df8c-32e9-b0d0-95a207021807.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 32833 IP address blocks: 66.173.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:25:38:1f:97:0f:b1:60:b7:3f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=0a6cc1d3-3340-43da-89a9-82e43b0d2a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:64:5b:e8:c5:37:31:44:0a:17:4b:9f:e9:31: 66:1a:e4:8d:e8:e9:b1:a4:81:1b:01:24:7d:f8:28: e1:27:ff:21:d9:c7:8f:1d:a8:e0:84:71:a1:ce:77: 07:20:57:43:9c:46:88:7a:c6:74:1b:73:06:d0:26: 40:05:28:4f:ac:4f:44:ae:ab:fd:9d:6b:31:01:af: 6c:40:64:f4:77:93:62:0e:35:74:7e:6b:0f:6b:54: ae:87:87:59:47:49:e8:23:75:22:53:69:af:f5:4c: ab:e8:45:bd:61:ad:e4:f8:e9:ef:ef:7d:71:5d:9b: a9:46:0c:b7:33:32:35:89:9d:37:b6:96:c5:ff:83: ef:e3:cb:92:58:4c:f0:5e:3d:42:0c:4f:73:b5:d2: cb:2e:e7:aa:16:10:fc:65:dd:5f:ea:83:be:ca:02: 9f:65:30:a1:6a:33:85:61:d1:ed:ed:2c:3b:0b:22: f7:5f:ea:a5:42:88:75:16:e5:9d:90:a4:a3:ea:f5: 3b:02:46:c7:70:e0:98:d5:48:19:cb:39:67:91:ef: 29:17:8a:4d:d1:83:79:90:8c:6b:f8:7c:66:c6:fa: 1b:37:74:a2:40:db:9f:9e:3a:6f:43:2e:c2:32:ec: 09:b4:53:a0:4f:40:a2:1b:db:b6:71:5a:5d:cb:f7: db:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E5:C1:9A:56:F2:68:9F:26:24:67:4F:D3:5D:1C:1D:50:35:E8:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5786b1b7-df8c-32e9-b0d0-95a207021807.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.173.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:fd:dc:61:f0:bc:dc:93:8d:fc:ff:19:40:69:14:d0:51:00: ec:db:40:03:ab:d9:45:ca:1a:5a:52:14:7c:7b:da:dc:9c:21: b4:2d:20:35:68:9f:1a:33:b0:f5:a3:f0:c1:cb:67:cf:4f:a6: 94:3d:3d:8a:b8:7c:77:06:1b:f1:f2:36:f3:18:8c:b7:2d:09: 64:42:e8:6c:6d:a3:c4:fc:e0:1e:51:29:3a:f7:9a:87:77:e5: f9:6f:f7:5f:73:b1:83:a2:4f:7b:82:70:87:ae:26:49:2d:e7: d0:d5:92:a0:4f:1f:81:9a:dd:00:96:7d:32:31:1e:b5:c4:c0: e2:40:d4:2c:e8:f1:d8:cf:90:3c:bb:a6:95:85:3a:cb:ae:8d: b4:de:91:eb:51:a5:ba:24:01:2d:76:3c:5a:4d:e2:34:f5:63: 7e:ca:90:69:e8:22:88:99:55:54:84:5e:d2:c6:3e:af:c3:ce: 43:89:1f:e4:e8:3f:3d:9d:a6:5e:4e:4e:89:b4:38:db:8c:ef: 3e:7e:37:df:65:72:56:db:fd:f2:94:ed:4e:f2:ab:69:93:f3: 00:01:cd:b1:89:e0:91:ce:df:e0:0e:2f:00:04:9c:d3:bd:69: a9:82:84:92:4b:a9:e2:6e:48:fa:cf:18:f1:29:57:36:94:d9: a0:61:95:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3tiU4H5cPsWC3P+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk MGE2Y2MxZDMtMzM0MC00M2RhLTg5YTktODJlNDNiMGQyYTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2Rb6MU3MUQKF0uf6TFmGuSN6OmxpIEbASR9 +CjhJ/8h2cePHajghHGhzncHIFdDnEaIesZ0G3MG0CZABShPrE9Erqv9nWsxAa9s QGT0d5NiDjV0fmsPa1Suh4dZR0noI3UiU2mv9Uyr6EW9Ya3k+Onv731xXZupRgy3 MzI1iZ03tpbF/4Pv48uSWEzwXj1CDE9ztdLLLueqFhD8Zd1f6oO+ygKfZTChajOF YdHt7Sw7CyL3X+qlQoh1FuWdkKSj6vU7AkbHcOCY1UgZyzlnke8pF4pN0YN5kIxr +HxmxvobN3SiQNufnjpvQy7CMuwJtFOgT0CiG9u2cVpdy/fbuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnlwZpW8mifJiRnT9NdHB1QNeibMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTc4NmIxYjctZGY4Yy0z MmU5LWIwZDAtOTVhMjA3MDIxODA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQq3cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIL93GHwvNyTjfz/GUBpFNBRAOzbQAOr2UXKGlpSFHx72tycIbQtIDVo nxozsPWj8MHLZ89PppQ9PYq4fHcGG/HyNvMYjLctCWRC6Gxto8T84B5RKTr3mod3 5flv919zsYOiT3uCcIeuJkkt59DVkqBPH4Ga3QCWfTIxHrXEwOJA1Czo8djPkDy7 ppWFOsuujbTeketRpbokAS12PFpN4jT1Y37KkGnoIoiZVVSEXtLGPq/DzkOJH+To Pz2dpl5OTom0ONuM7z5+N99lclbb/fKU7U7yq2mT8wABzbGJ4JHO3+AOLwAEnNO9 aamChJJLqeJuSPrPGPEpVzaU2aBhlaA= -----END CERTIFICATE-----Generated at Thu Aug 7 00:40:23 2025 by rpki-client