$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/158142d2-a6b7-34ca-be4a-89fc8257488f.roa File: 158142d2-a6b7-34ca-be4a-89fc8257488f.roa (raw, json) Hash identifier: 4S3hc9l7VtfTi114x8g8bpED01P+Gcs8Wjm297aiPsQ= Subject key identifier: 01:5B:A3:31:7B:26:03:57:A9:BB:9B:E8:92:CF:A8:BA:D8:3B:41:EA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E605C37CEAB8377569A01C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/158142d2-a6b7-34ca-be4a-89fc8257488f.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 66.32.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:5c:37:ce:ab:83:77:56:9a:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=88ecbb40-00a2-4343-8dc9-289e57b8b72a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d9:be:22:1d:ab:27:89:87:5a:97:7c:da:da: 9d:e3:d1:2d:95:be:14:58:ec:25:21:0b:77:16:66: e2:ba:5f:1f:10:b8:09:49:af:e8:b0:8f:03:a3:05: 95:01:45:75:d6:8c:5f:fc:01:07:29:1f:db:43:36: 94:bb:98:72:02:ea:53:0a:4d:0e:10:34:0f:b0:9c: 63:3f:6b:ab:fa:26:9e:42:77:df:43:04:e7:9c:69: 3c:04:97:7b:a1:a7:a1:e1:3d:c5:54:14:4a:b2:49: 3b:66:07:76:a5:33:f5:5a:3e:49:a4:67:4b:a9:6d: df:7a:db:73:b1:85:61:a5:25:a5:bb:5f:4a:db:9b: 4f:e9:4b:9e:cd:4e:38:07:01:6f:4f:68:bd:97:95: 51:18:9a:27:22:9b:3c:c2:5f:be:c4:15:f9:a4:f6: b7:d9:c7:89:94:8f:73:ad:58:60:b3:29:93:91:19: ce:d4:f0:57:a0:4f:74:69:2c:78:f8:a5:2a:da:e0: 2d:0b:f5:b5:e6:e8:d3:71:f1:8a:aa:50:b5:a4:d8: 62:28:23:ff:2b:b3:c9:20:19:98:26:c3:21:b1:ba: 01:f2:85:f1:d6:d1:03:00:5e:fe:e8:08:93:20:14: 62:83:fa:85:9f:7d:87:8c:3b:b5:47:fa:e5:b2:39: 5d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5B:A3:31:7B:26:03:57:A9:BB:9B:E8:92:CF:A8:BA:D8:3B:41:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/158142d2-a6b7-34ca-be4a-89fc8257488f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.32.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:a0:b3:34:cd:5c:da:21:5b:69:b2:25:68:a5:1b:61:81:3b: bd:65:10:46:f7:6f:62:76:b8:9f:61:70:f5:c5:e2:93:ca:e4: 74:05:95:03:0c:8f:31:e6:4a:da:8e:af:06:5e:8a:b2:93:2f: 76:f3:31:03:b9:6c:1d:ec:62:d1:7d:ce:92:c0:81:07:ad:8d: c4:b7:54:9a:30:40:c7:b6:09:fa:8b:27:d4:6a:c7:e2:98:ac: 3b:7d:f4:2b:06:e4:ca:9c:b9:d6:ba:19:81:41:80:71:62:d2: 7e:d1:86:ca:37:34:e1:3d:a9:f5:32:0a:2f:11:6a:23:61:3e: 0a:66:c8:6c:96:71:51:c8:a5:69:f8:0a:23:7e:15:02:9a:b4: dd:cf:c9:e1:a0:d1:27:99:d8:a9:d5:d0:15:1b:6c:e6:9d:ba: ff:45:4a:25:e5:47:5b:af:37:9f:bb:b4:3b:bc:92:12:22:2c: 85:94:56:1d:a0:69:28:4f:39:3a:d8:55:05:2b:16:00:97:f5: 13:54:89:fd:82:63:35:f5:6e:05:12:7e:b4:66:c2:e0:2c:56: 39:c6:2e:54:e4:bc:2b:f8:df:c8:8f:47:64:ba:2c:fb:dc:a0: 4d:7b:62:56:85:5e:5c:44:30:14:d0:a4:15:b9:f6:9c:17:58: 19:2f:5d:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYFw3zquDd1aaAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk ODhlY2JiNDAtMDBhMi00MzQzLThkYzktMjg5ZTU3YjhiNzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtm+Ih2rJ4mHWpd82tqd49Etlb4UWOwlIQt3 Fmbiul8fELgJSa/osI8DowWVAUV11oxf/AEHKR/bQzaUu5hyAupTCk0OEDQPsJxj P2ur+iaeQnffQwTnnGk8BJd7oaeh4T3FVBRKskk7Zgd2pTP1Wj5JpGdLqW3fettz sYVhpSWlu19K25tP6UuezU44BwFvT2i9l5VRGJonIps8wl++xBX5pPa32ceJlI9z rVhgsymTkRnO1PBXoE90aSx4+KUq2uAtC/W15ujTcfGKqlC1pNhiKCP/K7PJIBmY JsMhsboB8oXx1tEDAF7+6AiTIBRig/qFn32HjDu1R/rlsjldmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFbozF7JgNXqbub6JLPqLrYO0HqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTU4MTQyZDItYTZiNy0z NGNhLWJlNGEtODlmYzgyNTc0ODhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQiAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGgszTNXNohW2myJWilG2GBO71lEEb3b2J2uJ9hcPXF4pPK5HQFlQMM jzHmStqOrwZeirKTL3bzMQO5bB3sYtF9zpLAgQetjcS3VJowQMe2CfqLJ9Rqx+KY rDt99CsG5Mqcuda6GYFBgHFi0n7Rhso3NOE9qfUyCi8RaiNhPgpmyGyWcVHIpWn4 CiN+FQKatN3PyeGg0SeZ2KnV0BUbbOaduv9FSiXlR1uvN5+7tDu8khIiLIWUVh2g aShPOTrYVQUrFgCX9RNUif2CYzX1bgUSfrRmwuAsVjnGLlTkvCv438iPR2S6LPvc oE17YlaFXlxEMBTQpBW59pwXWBkvXc4= -----END CERTIFICATE-----Generated at Wed Jul 9 13:34:19 2025 by rpki-client