$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a085d050-8d43-326a-814c-9d1beb3b7df3.roa File: a085d050-8d43-326a-814c-9d1beb3b7df3.roa (raw, json) Hash identifier: R7u45L/GaNiXRAboNJdWHMs/EelkbgwY7szLZvRgYDI= Subject key identifier: 86:EF:9F:23:67:37:ED:23:57:AF:11:70:33:14:1C:16:93:60:E7:54 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D81B47BEC5B193BEEE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a085d050-8d43-326a-814c-9d1beb3b7df3.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 22773 IP address blocks: 166.102.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d8:1b:47:be:c5:b1:93:be:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=1b50dff4-31c2-4727-ac1d-b399a0bd886f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:38:6b:99:6f:e3:d9:83:62:eb:70:59:09:17: 7c:4c:0f:3d:e3:ba:de:1f:b9:f9:a8:be:9b:1c:be: 12:8b:2b:81:20:ce:6f:0f:71:df:74:28:4d:65:ef: cd:18:07:fb:22:f6:83:98:21:b8:e1:ad:c5:e7:8a: 32:95:0d:d7:da:a1:8e:59:7e:10:c9:81:0c:ab:aa: 3a:f7:e2:e0:66:72:61:9d:16:0f:1c:ce:23:de:dc: d7:fd:ee:42:81:a1:b1:13:9a:cc:58:19:b9:5f:10: 7e:22:37:5c:1a:8e:6a:60:98:f2:b9:a6:c5:fa:e1: 1b:55:e7:2b:c1:62:8a:3f:65:9a:1c:d9:ed:b6:cc: 6d:09:dd:5a:43:6a:e8:62:b5:ac:16:fe:9e:a6:94: 17:57:6d:2a:6d:ba:1c:ec:a6:72:2b:ae:1a:7b:83: 41:65:1c:c1:1d:fb:25:3a:04:45:9a:2c:a6:b4:bf: a5:b0:6b:87:9c:58:48:eb:07:4a:ee:13:29:a8:37: f3:d9:61:b2:fb:d5:33:14:86:b7:33:77:56:57:76: 70:32:81:8f:55:8b:02:3c:a4:1b:5c:2f:45:3d:7b: 9f:de:97:f6:a4:fc:60:6a:46:26:f4:55:a0:dc:4a: 19:19:5a:2f:2a:46:05:14:b7:41:6d:c2:5c:9a:20: c7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EF:9F:23:67:37:ED:23:57:AF:11:70:33:14:1C:16:93:60:E7:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a085d050-8d43-326a-814c-9d1beb3b7df3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.102.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:c8:1a:83:31:7a:f3:34:bc:b4:4a:e9:75:68:25:5b:b2:87: a2:32:c0:81:53:16:a3:bc:d5:47:31:5c:dc:f8:7f:bd:d1:3a: b5:9b:75:11:2c:ef:48:a9:b7:17:72:4e:fb:40:83:32:2d:bc: b7:0d:ff:ad:58:19:76:e1:47:16:f5:f9:da:4d:a0:c9:a5:6b: a4:be:50:85:2e:fe:9a:b1:05:23:82:e9:4e:71:32:45:89:eb: 5c:e1:ef:33:c4:35:ef:b2:20:9d:a1:c5:87:a7:8b:c5:8e:c5: bc:98:0e:5f:72:93:11:f4:04:71:78:40:e8:21:91:67:0c:e3: 53:b5:22:98:19:a2:66:5c:7c:71:b5:ec:a9:34:68:66:ed:00: 38:14:ea:ff:f9:16:b9:e2:7f:9f:f1:b4:a3:e0:8d:cc:fa:ca: e0:71:c0:00:34:74:0b:fc:f0:b4:ca:32:02:9d:9d:0b:0e:8d: 88:09:c4:8b:63:8f:26:64:b2:fd:b1:53:91:73:37:63:8a:e4: bb:34:fb:e1:76:d9:14:9f:3c:dd:c4:e0:04:3e:f0:17:8e:af: 28:85:b3:b2:57:01:64:a6:b3:f9:e6:6c:a9:84:8a:36:a6:82: 00:96:73:4e:f8:3b:a2:88:3a:37:68:7d:58:b9:3a:52:07:eb: 88:ae:54:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNgbR77FsZO+7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MWI1MGRmZjQtMzFjMi00NzI3LWFjMWQtYjM5OWEwYmQ4ODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjhrmW/j2YNi63BZCRd8TA8947reH7n5qL6b HL4SiyuBIM5vD3HfdChNZe/NGAf7IvaDmCG44a3F54oylQ3X2qGOWX4QyYEMq6o6 9+LgZnJhnRYPHM4j3tzX/e5CgaGxE5rMWBm5XxB+IjdcGo5qYJjyuabF+uEbVecr wWKKP2WaHNnttsxtCd1aQ2roYrWsFv6eppQXV20qbboc7KZyK64ae4NBZRzBHfsl OgRFmiymtL+lsGuHnFhI6wdK7hMpqDfz2WGy+9UzFIa3M3dWV3ZwMoGPVYsCPKQb XC9FPXuf3pf2pPxgakYm9FWg3EoZGVovKkYFFLdBbcJcmiDHTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbvnyNnN+0jV68RcDMUHBaTYOdUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTA4NWQwNTAtOGQ0My0z MjZhLTgxNGMtOWQxYmViM2I3ZGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApmaaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPIGoMxevM0vLRK6XVoJVuyh6IywIFTFqO81UcxXNz4f73ROrWbdREs 70iptxdyTvtAgzItvLcN/61YGXbhRxb1+dpNoMmla6S+UIUu/pqxBSOC6U5xMkWJ 61zh7zPENe+yIJ2hxYeni8WOxbyYDl9ykxH0BHF4QOghkWcM41O1IpgZomZcfHG1 7Kk0aGbtADgU6v/5Frnif5/xtKPgjcz6yuBxwAA0dAv88LTKMgKdnQsOjYgJxItj jyZksv2xU5FzN2OK5Ls0++F22RSfPN3E4AQ+8BeOryiFs7JXAWSms/nmbKmEijam ggCWc074O6KIOjdofVi5OlIH64iuVOI= -----END CERTIFICATE-----Generated at Wed Aug 6 12:42:28 2025 by rpki-client