$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/592bf8eb-7b67-374e-971b-9989a6754517.roa File: 592bf8eb-7b67-374e-971b-9989a6754517.roa (raw, json) Hash identifier: +fu9XxpiFam7eBxWRdGnXGYhpR4d9M/eK+PsGx75nKA= Subject key identifier: 34:39:4C:E8:73:47:F8:8F:79:83:C0:47:49:6E:A5:47:FF:62:97:62 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A105B6798D5EA12FDA0F40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/592bf8eb-7b67-374e-971b-9989a6754517.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 10843 IP address blocks: 97.66.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:05:b6:79:8d:5e:a1:2f:da:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=0f07f0a9-d9e9-422e-b010-3289fdf98970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ac:64:f8:aa:38:65:3d:85:01:ea:96:a1:5a: 6c:94:16:c8:87:6f:fd:ca:2b:0a:90:7c:fc:e8:ea: 79:9d:cd:8b:d9:32:32:9f:5d:4c:ae:8d:c1:eb:ba: 33:5d:75:99:74:5c:90:ea:fd:67:07:70:39:fd:12: 5e:d2:0b:fc:9d:db:16:e2:53:86:37:61:26:57:7b: f5:44:cc:24:0c:06:d0:aa:48:fd:60:7a:21:3c:0d: 2d:18:8b:32:f9:48:1b:13:f7:0b:9e:7d:cb:76:30: 8d:67:92:67:82:64:93:b7:82:87:a8:08:df:93:2e: 99:86:d0:37:35:e2:ba:b3:ad:a8:5f:0b:37:50:3b: 05:49:86:ca:83:6f:9f:44:4e:45:74:1a:c4:44:ed: 8f:a6:5f:3c:27:30:c8:c0:e1:ec:43:3d:f6:44:30: fd:b9:79:39:1a:2d:6b:4d:54:e8:2a:b2:9f:6c:75: 38:91:d4:22:8f:da:03:c5:86:88:f2:17:f2:da:8e: 30:81:a1:fb:fc:a6:96:e7:ac:16:36:a5:09:29:1a: 55:d0:fb:68:41:4f:f9:92:15:9a:cd:a1:e4:00:0a: b3:20:a3:1f:b0:d6:66:5a:2b:d6:71:ad:9d:4a:b0: 57:84:ce:e2:c3:a6:57:d7:6a:16:99:a5:1d:db:aa: 8c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:39:4C:E8:73:47:F8:8F:79:83:C0:47:49:6E:A5:47:FF:62:97:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/592bf8eb-7b67-374e-971b-9989a6754517.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 97.66.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:b2:8f:fa:22:f2:71:a5:99:12:c9:14:9c:fb:bb:4a:b9:2f: 4c:ef:17:33:b8:a8:9f:a6:95:8c:76:f9:eb:3b:b3:a3:b9:be: b2:6e:4a:f6:ec:a3:ba:c9:ce:2b:ea:eb:98:1b:06:47:04:b6: cc:39:16:ff:52:07:e3:c0:ce:64:22:53:88:24:f0:37:26:b9: 60:07:a0:bf:dd:c2:3f:81:c8:7a:f6:a7:20:f8:47:f2:55:d5: 03:99:9f:dc:71:0f:23:ea:f7:bd:cc:5f:d5:68:9e:1c:d0:8c: f2:7a:c4:11:14:f2:77:2a:64:75:21:a9:1f:bc:0d:41:13:cb: 9b:61:06:2f:16:63:bb:75:ed:a8:9d:52:85:e5:04:30:d7:ac: 7e:7f:b1:b1:f8:74:4e:f8:91:9b:92:a7:07:db:03:a7:91:ce: 67:fc:31:b6:e9:60:64:b6:e9:c2:92:91:66:91:36:85:4f:02: 72:a8:6c:41:8c:8c:b1:f9:c3:ed:2c:d3:40:e8:0d:da:19:33: 7d:aa:02:12:1a:ea:5d:9b:be:de:df:1f:41:0f:4d:e7:73:95: 52:d6:b3:b3:b2:e1:d1:6e:30:db:ef:69:dd:ce:72:d2:9c:31: 31:61:ba:6c:52:32:85:8f:c5:c0:9b:4e:31:93:d8:ea:79:2c: 58:60:44:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoQW2eY1eoS/aD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MGYwN2YwYTktZDllOS00MjJlLWIwMTAtMzI4OWZkZjk4OTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6xk+Ko4ZT2FAeqWoVpslBbIh2/9yisKkHz8 6Op5nc2L2TIyn11Mro3B67ozXXWZdFyQ6v1nB3A5/RJe0gv8ndsW4lOGN2EmV3v1 RMwkDAbQqkj9YHohPA0tGIsy+UgbE/cLnn3LdjCNZ5JngmSTt4KHqAjfky6ZhtA3 NeK6s62oXws3UDsFSYbKg2+fRE5FdBrERO2Ppl88JzDIwOHsQz32RDD9uXk5Gi1r TVToKrKfbHU4kdQij9oDxYaI8hfy2o4wgaH7/KaW56wWNqUJKRpV0PtoQU/5khWa zaHkAAqzIKMfsNZmWivWca2dSrBXhM7iw6ZX12oWmaUd26qMgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQ5TOhzR/iPeYPAR0lupUf/YpdiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTkyYmY4ZWItN2I2Ny0z NzRlLTk3MWItOTk4OWE2NzU0NTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUKKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2yj/oi8nGlmRLJFJz7u0q5L0zvFzO4qJ+mlYx2+es7s6O5vrJuSvbs o7rJzivq65gbBkcEtsw5Fv9SB+PAzmQiU4gk8DcmuWAHoL/dwj+ByHr2pyD4R/JV 1QOZn9xxDyPq973MX9VonhzQjPJ6xBEU8ncqZHUhqR+8DUETy5thBi8WY7t17aid UoXlBDDXrH5/sbH4dE74kZuSpwfbA6eRzmf8MbbpYGS26cKSkWaRNoVPAnKobEGM jLH5w+0s00DoDdoZM32qAhIa6l2bvt7fH0EPTedzlVLWs7Oy4dFuMNvvad3OctKc MTFhumxSMoWPxcCbTjGT2Op5LFhgRAk= -----END CERTIFICATE-----Generated at Thu Aug 7 01:20:54 2025 by rpki-client