$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c3a9a40-4595-38f8-a92b-fdb444293646.roa File: 4c3a9a40-4595-38f8-a92b-fdb444293646.roa (raw, json) Hash identifier: Wb8VYszSNiXVU8i2yvfki4TqPIgR97PT8sJHxsoqTqo= Subject key identifier: 9F:F8:22:E6:96:C8:1C:7F:B4:4D:AC:26:AE:9A:F5:11:FE:67:AB:3B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF7FA33C103A410418EC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c3a9a40-4595-38f8-a92b-fdb444293646.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 166.102.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f7:fa:33:c1:03:a4:10:41:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=20509cb4-460f-484c-baf5-27741f63b959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:17:ea:45:92:40:57:fd:c8:9c:82:9c:18:7c: 13:73:4d:69:7b:d2:15:d8:45:1c:b1:c8:c7:eb:40: 60:07:39:25:e6:01:e2:26:a0:51:36:f9:58:38:e7: 85:a3:32:90:63:53:a3:0c:b9:69:57:87:0f:79:4b: 6d:3c:f2:d0:22:8d:ff:32:13:06:a6:58:9f:a0:14: 1c:ec:e1:b2:79:b2:24:db:bd:cf:3d:47:ad:d7:d9: 16:56:40:74:8f:96:73:b5:73:0e:07:a2:11:12:84: a1:65:a4:b3:6f:60:5f:21:82:9d:a0:38:ae:b5:98: 17:50:e1:30:98:35:57:79:57:1d:c3:43:d2:64:d6: c3:21:76:39:0c:1e:dd:05:b1:ab:dd:bd:c8:f6:bb: 3a:1e:ba:0b:73:87:16:47:fb:61:94:d2:72:d1:8e: e7:47:75:3a:56:25:6b:af:d5:4f:e4:6b:8d:60:86: 01:58:74:5a:75:4c:f1:bf:d7:71:21:b0:1d:33:57: 02:41:a9:46:91:1b:3c:8f:36:0e:c2:18:59:0e:6e: e1:2b:8f:10:5b:41:40:57:e3:07:88:95:e1:d3:11: 38:a2:9a:55:fe:b1:24:fb:bb:34:f8:51:f7:ea:e1: 2b:22:76:83:46:69:7f:dd:ac:62:53:97:5d:1f:d2: f9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F8:22:E6:96:C8:1C:7F:B4:4D:AC:26:AE:9A:F5:11:FE:67:AB:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c3a9a40-4595-38f8-a92b-fdb444293646.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.102.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:5f:b2:e3:ba:ae:bd:c6:1a:99:57:89:1f:1a:3c:a6:5e:f7: 6c:c4:d3:e3:bb:c7:f4:fa:c7:73:28:41:aa:95:b2:d3:05:47: eb:ad:c1:fd:ee:50:bc:99:c8:0c:c2:ac:15:3a:82:a2:1e:a2: 0b:b5:ce:84:fa:95:83:e2:69:c7:4d:1f:17:ef:3f:fc:32:0b: 9d:c4:3c:30:31:7d:71:ba:4a:98:45:42:ea:25:2a:ea:97:26: 16:aa:02:80:e9:40:12:63:25:c7:54:69:c1:82:c1:19:90:d2: 3c:04:80:33:83:85:73:fa:b8:30:a0:cd:a1:4b:a8:06:07:51: 07:c9:83:e0:08:de:13:9d:b4:b9:fa:e2:79:c4:0e:b9:85:e7: 38:f4:40:4b:5e:f6:3c:c3:64:21:57:43:0b:b6:c7:20:d9:b9: 3a:9e:37:9f:fa:92:cf:4b:66:1e:8e:04:82:75:3f:e8:de:24: 86:60:42:6c:4c:10:ed:2f:f0:28:60:cd:bd:f5:88:e9:9d:d9: cc:97:20:c3:02:76:8a:32:97:6b:54:e3:77:8f:ca:63:33:45: 2f:72:7b:6c:af:07:44:d9:74:a6:06:39:1c:68:a9:14:7c:ad: 57:58:bb:fa:7b:99:36:28:a3:ab:52:0e:47:f4:d4:e2:ce:2c: 67:6f:dd:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPf6M8EDpBBBjsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MjA1MDljYjQtNDYwZi00ODRjLWJhZjUtMjc3NDFmNjNiOTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhfqRZJAV/3InIKcGHwTc01pe9IV2EUcscjH 60BgBzkl5gHiJqBRNvlYOOeFozKQY1OjDLlpV4cPeUttPPLQIo3/MhMGplifoBQc 7OGyebIk273PPUet19kWVkB0j5ZztXMOB6IREoShZaSzb2BfIYKdoDiutZgXUOEw mDVXeVcdw0PSZNbDIXY5DB7dBbGr3b3I9rs6HroLc4cWR/thlNJy0Y7nR3U6ViVr r9VP5GuNYIYBWHRadUzxv9dxIbAdM1cCQalGkRs8jzYOwhhZDm7hK48QW0FAV+MH iJXh0xE4oppV/rEk+7s0+FH36uErInaDRml/3axiU5ddH9L5xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/4IuaWyBx/tE2sJq6a9RH+Z6s7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGMzYTlhNDAtNDU5NS0z OGY4LWE5MmItZmRiNDQ0MjkzNjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApmYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdfsuO6rr3GGplXiR8aPKZe92zE0+O7x/T6x3MoQaqVstMFR+utwf3u ULyZyAzCrBU6gqIeogu1zoT6lYPiacdNHxfvP/wyC53EPDAxfXG6SphFQuolKuqX JhaqAoDpQBJjJcdUacGCwRmQ0jwEgDODhXP6uDCgzaFLqAYHUQfJg+AI3hOdtLn6 4nnEDrmF5zj0QEte9jzDZCFXQwu2xyDZuTqeN5/6ks9LZh6OBIJ1P+jeJIZgQmxM EO0v8Chgzb31iOmd2cyXIMMCdooyl2tU43ePymMzRS9ye2yvB0TZdKYGORxoqRR8 rVdYu/p7mTYoo6tSDkf01OLOLGdv3WE= -----END CERTIFICATE-----Generated at Fri Oct 10 20:04:13 2025 by rpki-client