$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa28106e-e7e6-354b-9d61-537cbb86adc4.roa File: aa28106e-e7e6-354b-9d61-537cbb86adc4.roa (raw, json) Hash identifier: wTaO1DejogREfWLvR3eMeC6AUeY8jCdUYN8xMUYp5m8= Subject key identifier: A3:4F:57:FA:22:34:D3:69:66:8B:F7:72:8D:5E:A0:70:1D:65:F3:15 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D063636A86A1D7418C280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa28106e-e7e6-354b-9d61-537cbb86adc4.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 55107 IP address blocks: 66.173.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:06:36:36:a8:6a:1d:74:18:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=5bef3403-c9f5-4e05-a60a-7662785bd679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:02:f6:ca:e3:b7:ab:5a:cb:7c:b7:1f:99:c7: 34:fd:64:f7:94:11:7b:62:6f:56:02:8d:27:66:8f: 25:a0:8f:18:c6:2f:0d:54:81:e9:ad:fd:82:a6:70: d9:86:14:c0:17:56:04:d9:b3:fb:cf:4b:b9:67:93: a7:f8:58:f5:69:6d:1e:18:a6:ce:9f:40:33:90:c1: cf:e9:ad:d8:2e:ad:75:6a:a4:d0:b5:d3:d8:64:1f: b5:60:41:5d:6b:cd:e9:10:be:33:52:24:a2:99:19: 7c:53:16:3a:72:bf:a5:ff:d1:26:ef:70:33:59:60: 06:75:c3:38:51:d8:79:60:b8:76:b0:a4:06:2e:39: 6b:af:c2:ff:3f:82:13:24:1c:57:76:df:02:29:a9: 4b:03:31:6c:c8:bf:32:10:5a:7c:c0:da:a3:23:c1: 99:64:6e:ac:9a:a1:81:04:1c:94:8f:2f:2c:19:fb: 62:49:2c:ad:d6:3a:4f:2d:c6:96:ae:25:0a:0d:5c: c5:0c:7d:c4:a5:a0:20:7a:a1:16:39:66:a1:9b:cd: 39:00:9c:05:8d:0d:fb:e2:2b:5a:5f:41:87:fe:bf: 41:c0:36:35:60:a5:0c:48:4a:57:d4:42:89:4f:a7: b5:f6:4a:81:60:ec:55:79:4d:f1:4e:01:8f:49:0a: 99:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4F:57:FA:22:34:D3:69:66:8B:F7:72:8D:5E:A0:70:1D:65:F3:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa28106e-e7e6-354b-9d61-537cbb86adc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.173.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:cf:98:6f:82:d0:73:1c:db:d0:ff:d1:bb:d2:ce:e6:03:b7: 75:78:22:40:a7:25:a5:86:96:60:a8:12:d0:5e:ef:3b:4e:f1: 0f:a3:9e:fd:47:2c:6e:42:99:01:96:0b:5f:65:ff:eb:f3:d7: 3a:19:30:48:f4:45:ae:1e:18:e3:01:32:44:a9:24:5d:be:e1: bf:8e:e2:ef:ca:90:ac:1f:3c:0c:79:b4:0a:6e:ab:43:a9:34: 23:98:a7:4f:d7:ea:81:47:97:16:cf:56:9f:ff:48:47:f8:b2: aa:d5:ab:90:11:2d:56:4d:94:e6:39:a4:48:25:8a:96:22:53: 7c:6a:ab:67:e5:da:71:1e:3a:f3:bd:ba:b2:f6:10:11:74:a2: 5a:55:45:31:1a:ff:29:6e:56:79:61:2f:14:aa:00:53:e5:16: 27:77:ee:e8:26:a2:28:99:c8:c6:9d:b4:38:49:27:b8:1b:97: af:68:34:c5:05:5b:43:8b:06:a9:c9:0e:63:48:23:f3:17:af: 08:f0:29:63:ed:e9:41:b2:c9:99:f8:0b:78:ed:a0:5b:18:e4: 76:95:15:5d:d5:d9:dd:9a:d8:8d:87:59:22:a1:62:38:b7:db: 64:d9:e1:24:e8:64:e7:91:66:60:7a:d5:ff:dc:3e:18:ec:f0: 0e:ce:5a:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQY2NqhqHXQYwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NWJlZjM0MDMtYzlmNS00ZTA1LWE2MGEtNzY2Mjc4NWJkNjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQL2yuO3q1rLfLcfmcc0/WT3lBF7Ym9WAo0n Zo8loI8Yxi8NVIHprf2CpnDZhhTAF1YE2bP7z0u5Z5On+Fj1aW0eGKbOn0AzkMHP 6a3YLq11aqTQtdPYZB+1YEFda83pEL4zUiSimRl8UxY6cr+l/9Em73AzWWAGdcM4 Udh5YLh2sKQGLjlrr8L/P4ITJBxXdt8CKalLAzFsyL8yEFp8wNqjI8GZZG6smqGB BByUjy8sGftiSSyt1jpPLcaWriUKDVzFDH3EpaAgeqEWOWahm805AJwFjQ374ita X0GH/r9BwDY1YKUMSEpX1EKJT6e19kqBYOxVeU3xTgGPSQqZYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNPV/oiNNNpZov3co1eoHAdZfMVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWEyODEwNmUtZTdlNi0z NTRiLTlkNjEtNTM3Y2JiODZhZGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQq2dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATPmG+C0HMc29D/0bvSzuYDt3V4IkCnJaWGlmCoEtBe7ztO8Q+jnv1H LG5CmQGWC19l/+vz1zoZMEj0Ra4eGOMBMkSpJF2+4b+O4u/KkKwfPAx5tApuq0Op NCOYp0/X6oFHlxbPVp//SEf4sqrVq5ARLVZNlOY5pEglipYiU3xqq2fl2nEeOvO9 urL2EBF0olpVRTEa/yluVnlhLxSqAFPlFid37ugmoiiZyMadtDhJJ7gbl69oNMUF W0OLBqnJDmNII/MXrwjwKWPt6UGyyZn4C3jtoFsY5HaVFV3V2d2a2I2HWSKhYji3 22TZ4SToZOeRZmB61f/cPhjs8A7OWgY= -----END CERTIFICATE-----Generated at Wed Nov 5 01:34:48 2025 by rpki-client