$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa28106e-e7e6-354b-9d61-537cbb86adc4.roa File: aa28106e-e7e6-354b-9d61-537cbb86adc4.roa (raw, json) Hash identifier: zrtKdJR3N1gdjcI6rtlO8eTgbyBwbZluiFXvGveEnkA= Subject key identifier: F5:F1:6F:DD:79:31:09:B7:8C:92:29:D8:11:AD:60:CB:5D:E9:38:6F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A10973DE475945B7209000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa28106e-e7e6-354b-9d61-537cbb86adc4.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 55107 IP address blocks: 66.173.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:09:73:de:47:59:45:b7:20:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=21743415-e2e3-4a9a-bb2d-210677a0db19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:81:f5:4c:82:40:5a:71:20:36:49:a5:78:ff: af:b3:c1:b3:aa:1d:e4:19:61:84:3c:05:8e:b5:c4: 8a:42:9b:16:e3:5d:74:96:16:be:2c:f1:de:8f:e7: 9d:cd:be:28:57:61:26:db:10:80:b8:32:a4:60:66: 28:e1:b9:55:a9:bb:92:50:b2:0e:3d:e0:fe:d1:18: 13:82:aa:ea:c8:97:9e:69:c9:3e:df:75:ff:52:53: 60:a4:3a:7e:f4:a5:c1:49:e1:d5:f5:3e:94:59:66: 6f:cd:18:12:fa:90:48:83:c2:7c:e0:b4:75:54:63: 02:39:83:d3:cf:09:39:16:de:12:ca:8c:fe:2f:ed: cc:fb:0e:2f:5a:7a:f0:fe:4e:cf:8d:e5:3d:0b:ee: 40:a4:19:03:ed:eb:92:72:a0:21:2b:75:61:5e:9e: 64:68:cd:8a:b6:bb:e7:6c:cc:bd:f3:43:b2:ec:c9: d6:6f:80:50:50:9a:c6:6f:d3:2e:a5:61:cd:ee:28: fd:5d:76:5d:b6:fe:82:8d:e3:f7:87:12:9f:7f:73: 87:62:73:99:c6:b2:50:8a:dc:6c:83:88:b4:b0:ae: a8:a1:76:fe:ce:d1:5e:ff:85:78:ed:18:24:52:5c: e7:b3:94:0c:26:d8:6c:c3:01:fb:cf:87:0e:c2:67: 37:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F1:6F:DD:79:31:09:B7:8C:92:29:D8:11:AD:60:CB:5D:E9:38:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa28106e-e7e6-354b-9d61-537cbb86adc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.173.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:65:47:36:dd:58:6d:6e:85:48:3a:c1:39:07:55:0c:28:1a: a3:20:83:c0:a5:9e:44:ce:96:89:3c:16:8c:04:5b:fa:0c:3e: 56:84:ff:05:f0:56:1f:ee:b5:c7:6e:b5:20:6d:0c:3e:6e:f0: 11:ea:4e:46:ef:19:8e:7c:82:d7:d2:a6:a1:7a:85:e9:7e:14: db:4a:1f:cf:32:0c:e2:b2:76:62:0b:b1:c4:19:96:64:c5:af: 86:55:e6:d8:21:13:b6:a9:a1:b1:d6:c2:bc:39:d7:ea:8d:53: cf:3d:54:43:c9:f8:09:c0:b1:db:f2:6c:c9:b5:2a:d8:d4:34: 20:aa:33:74:4f:95:08:da:53:5d:e7:e7:02:33:9e:3f:cc:47: e2:f1:85:b3:8e:eb:f2:30:dc:a6:a4:cd:49:20:c3:49:79:27: dd:1e:6f:54:4c:9a:a5:d0:0b:ee:99:9e:03:d0:b1:78:bb:1a: 2d:0c:83:c7:83:3b:4b:68:06:51:19:33:4c:ef:b3:07:1e:fd: 88:cc:9a:04:98:56:14:33:30:60:03:9c:c3:fa:ec:27:8b:49: 60:3a:83:b2:b2:fe:35:55:f6:f5:b4:87:22:c0:a7:d9:08:99: 9c:8c:55:f5:d9:87:64:cc:e1:c7:e8:36:a8:19:22:40:70:e0: 61:0b:89:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoQlz3kdZRbcgkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MjE3NDM0MTUtZTJlMy00YTlhLWJiMmQtMjEwNjc3YTBkYjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoH1TIJAWnEgNkmleP+vs8Gzqh3kGWGEPAWO tcSKQpsW4110lha+LPHej+edzb4oV2Em2xCAuDKkYGYo4blVqbuSULIOPeD+0RgT gqrqyJeeack+33X/UlNgpDp+9KXBSeHV9T6UWWZvzRgS+pBIg8J84LR1VGMCOYPT zwk5Ft4Syoz+L+3M+w4vWnrw/k7PjeU9C+5ApBkD7euScqAhK3VhXp5kaM2Ktrvn bMy980Oy7MnWb4BQUJrGb9MupWHN7ij9XXZdtv6CjeP3hxKff3OHYnOZxrJQitxs g4i0sK6ooXb+ztFe/4V47RgkUlzns5QMJthswwH7z4cOwmc3RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXxb915MQm3jJIp2BGtYMtd6ThvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWEyODEwNmUtZTdlNi0z NTRiLTlkNjEtNTM3Y2JiODZhZGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQq2dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxlRzbdWG1uhUg6wTkHVQwoGqMgg8ClnkTOlok8FowEW/oMPlaE/wXw Vh/utcdutSBtDD5u8BHqTkbvGY58gtfSpqF6hel+FNtKH88yDOKydmILscQZlmTF r4ZV5tghE7apobHWwrw51+qNU889VEPJ+AnAsdvybMm1KtjUNCCqM3RPlQjaU13n 5wIznj/MR+LxhbOO6/Iw3KakzUkgw0l5J90eb1RMmqXQC+6ZngPQsXi7Gi0Mg8eD O0toBlEZM0zvswce/YjMmgSYVhQzMGADnMP67CeLSWA6g7Ky/jVV9vW0hyLAp9kI mZyMVfXZh2TM4cfoNqgZIkBw4GELiXc= -----END CERTIFICATE-----Generated at Thu Aug 7 13:09:55 2025 by rpki-client