$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d37cc881-fa56-3966-9eca-6b4b6a4edf5c.roa File: d37cc881-fa56-3966-9eca-6b4b6a4edf5c.roa (raw, json) Hash identifier: QkRsXDjJ9S8d4sOerZNVsd+TQPKwo/03WD+Sm4NBJkQ= Subject key identifier: 36:A3:E4:62:AF:89:AD:11:CB:B9:00:67:E1:22:59:52:4D:B6:59:18 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF7E851677603484BF2C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d37cc881-fa56-3966-9eca-6b4b6a4edf5c.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 166.102.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f7:e8:51:67:76:03:48:4b:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=e30fe08a-b027-4982-b92f-d44eb6763a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a8:2d:14:d5:d3:a0:f8:94:75:76:89:53:57: de:19:12:d5:21:f4:0b:32:8e:e2:e2:36:62:1f:87: 72:24:21:b0:1e:db:1e:cf:11:2e:20:b4:21:09:d4: da:fb:00:b6:c7:4b:ab:79:fd:48:4e:7c:7c:32:90: 4d:ca:0c:ca:c8:0a:b5:e1:10:0c:c5:9d:7e:05:a6: 34:19:81:f0:4c:e7:cb:13:48:59:6e:8c:68:b6:1a: ee:97:c0:a6:29:7c:35:af:37:be:c3:a7:23:35:5c: 6b:05:3a:d5:14:1c:a7:6c:71:a1:2c:e9:ef:3c:b7: 33:f2:b6:e5:7f:06:27:70:00:f9:ef:12:d7:9f:a5: ee:ef:5d:a3:e5:e3:36:e0:b7:1f:ed:47:0c:c5:f4: 91:53:cf:27:d8:32:d0:82:ee:ef:30:7c:6b:0e:f3: bf:9f:33:e1:33:dd:c2:8f:84:1f:0c:31:2e:18:b6: 47:da:d5:35:36:29:b9:fc:e1:3e:a2:64:37:fc:60: d8:3f:45:24:e0:40:f4:3e:68:b3:71:49:37:74:e1: 1b:fc:7c:45:40:21:dd:e8:d7:18:a4:e5:f0:2a:86: ae:b5:88:91:66:29:15:d5:ea:19:9f:76:94:08:0a: ce:c8:e7:ce:b4:ba:e9:ec:0e:11:ca:e0:28:81:33: 28:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A3:E4:62:AF:89:AD:11:CB:B9:00:67:E1:22:59:52:4D:B6:59:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d37cc881-fa56-3966-9eca-6b4b6a4edf5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.102.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:ba:ee:a0:d6:80:99:13:2e:d3:4f:f1:86:7a:63:3f:b8:79: f9:fc:b5:5a:a5:9a:a0:9b:3a:1f:f9:21:8b:a0:bb:f1:6e:15: a7:3a:f0:b9:54:ac:54:f6:cf:89:dd:8a:d3:0b:e6:f8:18:d3: af:8a:5f:32:d2:99:cd:4e:19:ff:2f:6a:f7:b8:b3:de:d6:7a: 96:d4:75:be:cf:da:43:ac:85:99:46:cd:31:a1:42:84:cd:dc: 62:a5:bb:7a:4b:74:d6:85:dc:92:94:e8:52:44:c0:76:9f:a8: 37:78:1b:b2:43:62:d8:e2:2a:67:0b:35:26:f3:8d:7e:f2:a4: e0:c7:a2:2f:26:aa:c5:24:82:6e:d4:f4:92:da:41:97:3f:aa: d9:6d:36:b6:4b:67:e4:82:69:00:65:0f:83:b6:3f:fd:14:bc: cb:c5:76:67:f5:3f:62:e2:77:a5:42:87:9d:fe:c2:f3:b5:04: c9:24:9e:60:04:54:e0:18:09:f1:75:2b:2c:4d:f7:53:2c:19: 61:26:bb:e6:70:d4:55:83:7e:67:03:64:28:09:90:ac:73:f9: 62:46:95:3c:e9:94:83:ae:af:5a:a5:26:92:23:40:68:0d:c6: 15:42:0b:67:e2:72:b8:20:39:09:5f:06:f2:e8:93:fc:f7:d0: a5:f7:e3:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPfoUWd2A0hL8sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZTMwZmUwOGEtYjAyNy00OTgyLWI5MmYtZDQ0ZWI2NzYzYTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qgtFNXToPiUdXaJU1feGRLVIfQLMo7i4jZi H4dyJCGwHtsezxEuILQhCdTa+wC2x0uref1ITnx8MpBNygzKyAq14RAMxZ1+BaY0 GYHwTOfLE0hZboxothrul8CmKXw1rze+w6cjNVxrBTrVFBynbHGhLOnvPLcz8rbl fwYncAD57xLXn6Xu712j5eM24Lcf7UcMxfSRU88n2DLQgu7vMHxrDvO/nzPhM93C j4QfDDEuGLZH2tU1Nim5/OE+omQ3/GDYP0Uk4ED0PmizcUk3dOEb/HxFQCHd6NcY pOXwKoautYiRZikV1eoZn3aUCArOyOfOtLrp7A4RyuAogTMoyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDaj5GKvia0Ry7kAZ+EiWVJNtlkYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDM3Y2M4ODEtZmE1Ni0z OTY2LTllY2EtNmI0YjZhNGVkZjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApmYUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJO67qDWgJkTLtNP8YZ6Yz+4efn8tVqlmqCbOh/5IYugu/FuFac68LlU rFT2z4nditML5vgY06+KXzLSmc1OGf8vave4s97WepbUdb7P2kOshZlGzTGhQoTN 3GKlu3pLdNaF3JKU6FJEwHafqDd4G7JDYtjiKmcLNSbzjX7ypODHoi8mqsUkgm7U 9JLaQZc/qtltNrZLZ+SCaQBlD4O2P/0UvMvFdmf1P2Lid6VCh53+wvO1BMkknmAE VOAYCfF1KyxN91MsGWEmu+Zw1FWDfmcDZCgJkKxz+WJGlTzplIOur1qlJpIjQGgN xhVCC2ficrggOQlfBvLok/z30KX345w= -----END CERTIFICATE-----Generated at Fri Oct 10 17:52:02 2025 by rpki-client