$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b87596fa-17c1-38ef-93cf-20e32fc601db.roa File: b87596fa-17c1-38ef-93cf-20e32fc601db.roa (raw, json) Hash identifier: Ots8hC1fneNGipY+JUdLdfMVnwytBnX/b83vL6TmJwc= Subject key identifier: B5:62:F4:03:84:41:8A:70:CC:49:E0:95:11:C3:3C:46:A7:73:75:59 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0CE7F317EFA1EF44CE8E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b87596fa-17c1-38ef-93cf-20e32fc601db.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 166.102.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ce:7f:31:7e:fa:1e:f4:4c:e8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=b12413f4-e61a-4b74-9941-34b61b387fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1e:56:19:55:6e:ee:eb:7e:48:05:96:35:e8: f1:65:96:36:5a:69:38:81:be:8f:95:f9:bc:1c:9d: 9d:97:ec:ea:35:c1:3c:cb:cd:2c:06:12:79:5f:59: fb:bb:a9:5b:e3:b8:88:ba:a2:1d:19:18:04:37:22: 63:d3:ad:eb:40:82:a8:51:4c:23:eb:79:44:d1:61: da:3e:43:22:ff:f3:ba:40:33:64:ff:b7:98:4e:23: 4c:ce:31:8f:bd:5e:90:a9:0c:dd:a5:b8:78:c8:f5: a8:80:8e:f4:bc:5a:da:d9:91:ce:94:dd:41:dd:46: 64:62:ee:08:77:9a:23:5d:1b:55:3b:58:53:d2:18: c5:38:67:98:34:61:b2:21:4e:2b:ba:fd:9a:c4:61: 69:e0:1b:1b:f8:d7:83:24:2d:cf:75:cf:76:33:bc: aa:84:7b:2f:0f:bf:7a:9c:3d:5d:17:56:dc:43:60: e8:bc:f0:f2:72:59:95:53:46:95:ad:14:77:b8:3b: 7e:5b:32:0e:8b:b9:83:d8:da:62:51:6d:36:51:d2: 24:9e:4c:e5:51:1b:44:09:c7:f9:57:4f:cb:a7:a8: 1e:d1:05:6d:62:d4:51:63:ee:ce:a9:ba:f9:4e:bc: dc:af:d8:a1:1e:c7:a6:d7:c5:b2:da:01:72:5c:47: 73:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:62:F4:03:84:41:8A:70:CC:49:E0:95:11:C3:3C:46:A7:73:75:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b87596fa-17c1-38ef-93cf-20e32fc601db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.102.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c0:ea:28:31:59:93:b6:92:2d:d0:a1:15:eb:4f:f8:38:34: ba:27:ee:43:7d:a2:64:df:c8:6a:8c:97:7c:2e:6a:7b:c4:c3: 47:ed:40:80:cf:fc:68:f8:2c:e9:06:4c:12:e6:66:21:d5:9d: cf:00:da:37:8a:ae:ec:d9:fd:42:6d:ec:57:6d:ee:41:8a:98: 88:89:de:67:f9:61:d1:4d:30:21:79:a7:97:1e:f4:bf:c5:aa: d8:a4:9a:94:27:e0:c3:65:e2:2e:f2:85:e2:fc:0a:63:17:c1: a8:50:a4:1d:66:18:af:d5:08:3f:83:ea:f4:29:2c:b5:f6:29: e3:b7:45:29:26:c8:42:08:67:29:bd:e3:6e:d0:b7:4b:e4:6d: b6:bf:61:5c:48:1a:40:5c:1b:0e:e0:b5:cb:61:92:15:f6:c9: 19:f6:16:36:fd:d1:0f:3f:8a:32:76:32:57:19:1a:6f:dc:21: a3:66:8a:36:d0:e3:73:c7:d0:51:b2:d4:94:d6:43:1e:3a:f5: e7:bf:f5:52:82:87:cf:ce:bf:27:0d:d3:a4:45:bb:6e:e6:f9: 06:72:3b:0c:dc:dc:e5:6d:f8:dd:9d:e4:06:bf:23:75:90:37: e2:0d:9b:0c:53:a1:97:08:d8:fd:ce:60:4b:96:eb:30:9b:aa: 0c:fa:48:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoM5/MX76HvRM6OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YjEyNDEzZjQtZTYxYS00Yjc0LTk5NDEtMzRiNjFiMzg3ZmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh5WGVVu7ut+SAWWNejxZZY2Wmk4gb6Plfm8 HJ2dl+zqNcE8y80sBhJ5X1n7u6lb47iIuqIdGRgENyJj063rQIKoUUwj63lE0WHa PkMi//O6QDNk/7eYTiNMzjGPvV6QqQzdpbh4yPWogI70vFra2ZHOlN1B3UZkYu4I d5ojXRtVO1hT0hjFOGeYNGGyIU4ruv2axGFp4Bsb+NeDJC3Pdc92M7yqhHsvD796 nD1dF1bcQ2DovPDyclmVU0aVrRR3uDt+WzIOi7mD2NpiUW02UdIknkzlURtECcf5 V0/Lp6ge0QVtYtRRY+7Oqbr5Trzcr9ihHsem18Wy2gFyXEdzxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVi9AOEQYpwzEnglRHDPEanc3VZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjg3NTk2ZmEtMTdjMS0z OGVmLTkzY2YtMjBlMzJmYzYwMWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpmbEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPA6igxWZO2ki3QoRXrT/g4NLon7kN9omTfyGqMl3wuanvEw0ftQIDP /Gj4LOkGTBLmZiHVnc8A2jeKruzZ/UJt7Fdt7kGKmIiJ3mf5YdFNMCF5p5ce9L/F qtikmpQn4MNl4i7yheL8CmMXwahQpB1mGK/VCD+D6vQpLLX2KeO3RSkmyEIIZym9 427Qt0vkbba/YVxIGkBcGw7gtcthkhX2yRn2Fjb90Q8/ijJ2MlcZGm/cIaNmijbQ 43PH0FGy1JTWQx469ee/9VKCh8/OvycN06RFu27m+QZyOwzc3OVt+N2d5Aa/I3WQ N+INmwxToZcI2P3OYEuW6zCbqgz6SKE= -----END CERTIFICATE-----Generated at Thu Aug 7 03:52:18 2025 by rpki-client