$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d242c1a2-0bf3-3976-88e9-20789a846b33.roa File: d242c1a2-0bf3-3976-88e9-20789a846b33.roa (raw, json) Hash identifier: vrVuMs4U+hH+NuD4cr9WN69mWNEu01sU/QEE7QWYZIo= Subject key identifier: 65:FC:2B:73:8B:7F:FC:77:A2:AB:00:15:7E:51:44:D7:24:2C:66:6B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2A2C496E469235B54BE11B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d242c1a2-0bf3-3976-88e9-20789a846b33.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 166.82.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:49:6e:46:92:35:b5:4b:e1:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=1691fae4-34fa-4f3e-a790-312038ecbc67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:81:f7:33:27:af:8a:27:c1:fb:ef:b4:53:d4: f1:3a:25:4a:fa:07:ed:2c:6c:6e:a5:78:6b:b9:e6: b2:8b:c1:c0:d8:a8:3e:80:63:90:f6:7c:31:0e:b1: d9:81:a2:aa:b8:29:1d:d2:af:e7:07:07:12:bb:57: cb:df:fe:3c:f3:5b:36:a4:70:f6:4c:31:36:96:d5: 55:01:28:b5:61:38:3d:68:59:fb:33:f7:ce:4d:20: 84:ca:0d:52:05:93:b5:db:b8:81:eb:33:53:23:67: 24:c5:2a:e4:f1:d7:5b:91:55:a6:02:15:91:b9:8b: d4:84:9d:49:35:bc:b8:4e:f6:08:c8:2e:82:6e:e9: 66:b2:04:7c:e9:24:f3:b0:d0:6f:0e:dc:d2:c2:5f: b9:30:9b:15:32:65:3f:59:c6:84:91:9f:93:28:7e: 2e:a5:f1:06:03:6c:07:4f:07:c2:51:d6:e4:0f:0a: 12:06:40:93:2c:8d:03:f2:bc:91:bc:ef:e4:87:73: 27:7a:7f:c7:7c:cc:5e:3b:77:1e:53:8a:f8:37:b1: 9c:4d:7f:94:cb:a3:18:00:f4:fd:fd:45:0f:b6:51: ed:e2:df:40:aa:bf:8c:72:6e:51:a9:a2:67:50:0d: 8f:c3:b4:2b:f3:a2:6e:3a:ff:b5:36:0e:76:48:d6: 89:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FC:2B:73:8B:7F:FC:77:A2:AB:00:15:7E:51:44:D7:24:2C:66:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d242c1a2-0bf3-3976-88e9-20789a846b33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.82.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:db:c7:d5:bf:b1:8e:94:d2:5a:b3:e2:13:dc:70:6c:5e:d1: 0b:28:2a:6e:ef:3c:1e:de:13:03:fd:65:c9:c3:05:e8:cd:7d: ca:10:1a:93:8d:65:52:92:e7:fc:2d:f9:c6:50:87:d1:75:af: 13:ee:10:4a:04:b6:d9:56:b9:29:ed:7d:4f:c8:77:f8:14:bb: 27:2a:94:c8:09:90:83:14:5c:bd:95:9f:bb:0b:c2:77:ea:8d: 7d:60:5a:5b:a1:81:ce:58:6f:e4:5c:fb:c1:ec:32:91:9c:2e: de:6f:0d:e5:ea:b5:6a:49:16:26:c9:16:7b:da:98:7f:9f:e5: 5f:48:f3:e4:65:10:3c:4a:69:ba:7c:f9:8c:72:f7:60:83:c2: 38:d0:8e:02:c1:eb:fe:ad:87:aa:08:a1:5c:41:89:61:60:b6: 3d:22:5d:10:c0:95:03:b4:03:15:88:50:bf:7b:98:70:0d:70: a4:2e:33:0d:fe:9e:61:ef:35:3b:97:b3:ae:93:d8:a7:ad:7d: 38:b7:3b:9f:47:e0:cb:50:75:a7:9a:b4:8c:3c:a1:27:b5:ed: 64:df:5a:7f:45:84:23:6a:89:29:40:c1:2f:81:04:fa:ab:b8: 7b:0e:d3:b9:68:9a:16:78:f8:90:8b:d6:e6:fb:fe:8a:7b:58: d1:10:e4:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEluRpI1tUvhG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk MTY5MWZhZTQtMzRmYS00ZjNlLWE3OTAtMzEyMDM4ZWNiYzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4H3MyeviifB+++0U9TxOiVK+gftLGxupXhr ueayi8HA2Kg+gGOQ9nwxDrHZgaKquCkd0q/nBwcSu1fL3/4881s2pHD2TDE2ltVV ASi1YTg9aFn7M/fOTSCEyg1SBZO127iB6zNTI2ckxSrk8ddbkVWmAhWRuYvUhJ1J Nby4TvYIyC6CbulmsgR86STzsNBvDtzSwl+5MJsVMmU/WcaEkZ+TKH4upfEGA2wH TwfCUdbkDwoSBkCTLI0D8ryRvO/kh3Mnen/HfMxeO3ceU4r4N7GcTX+Uy6MYAPT9 /UUPtlHt4t9Aqr+Mcm5RqaJnUA2Pw7Qr86JuOv+1Ng52SNaJhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGX8K3OLf/x3oqsAFX5RRNckLGZrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDI0MmMxYTItMGJmMy0z OTc2LTg4ZTktMjA3ODlhODQ2YjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCplKcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXbx9W/sY6U0lqz4hPccGxe0QsoKm7vPB7eEwP9ZcnDBejNfcoQGpON ZVKS5/wt+cZQh9F1rxPuEEoEttlWuSntfU/Id/gUuycqlMgJkIMUXL2Vn7sLwnfq jX1gWluhgc5Yb+Rc+8HsMpGcLt5vDeXqtWpJFibJFnvamH+f5V9I8+RlEDxKabp8 +Yxy92CDwjjQjgLB6/6th6oIoVxBiWFgtj0iXRDAlQO0AxWIUL97mHANcKQuMw3+ nmHvNTuXs66T2KetfTi3O59H4MtQdaeatIw8oSe17WTfWn9FhCNqiSlAwS+BBPqr uHsO07lomhZ4+JCL1ub7/op7WNEQ5EY= -----END CERTIFICATE-----Generated at Fri Oct 10 17:54:04 2025 by rpki-client