$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95ac5d77-1af3-35ce-8e6a-3a6289863538.roa File: 95ac5d77-1af3-35ce-8e6a-3a6289863538.roa (raw, json) Hash identifier: CK07w/lUHebM+IdYucPPBDTQbzs7Z+RLSztTOUrrnzA= Subject key identifier: FE:35:AD:0A:7B:E1:71:C3:3E:8C:97:81:EA:87:00:FF:6D:BE:87:F8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A4970771DC022D4D8711C0B10 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95ac5d77-1af3-35ce-8e6a-3a6289863538.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 166.82.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:77:1d:c0:22:d4:d8:71:1c:0b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=be241517-d8b0-4c68-a897-b0c6dda7b994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1f:32:2a:b6:1e:14:da:ed:12:91:f1:84:af: df:13:26:35:d0:62:75:96:5f:3c:2c:1f:0e:c0:bc: 12:fa:f4:78:54:12:51:ee:66:cf:cc:a8:b3:87:36: 3d:65:59:fc:e3:ca:9a:f0:17:66:ab:72:79:88:64: f6:74:33:81:96:34:db:d0:5d:0a:41:15:c4:d3:29: 74:04:db:4a:45:6a:38:fa:1e:88:ee:35:55:44:e3: c1:06:a0:95:3b:74:66:ec:b9:d0:17:6e:7a:94:49: ee:55:ab:3e:cc:45:f7:37:e0:5e:08:82:70:d9:37: 6b:ba:87:7e:e4:c2:9f:71:eb:74:29:67:08:54:df: ed:f8:d7:08:23:ba:c8:e9:cf:97:44:98:ab:ff:f4: bf:15:0a:03:50:14:70:d7:63:9e:83:45:07:8b:af: 9a:4d:b8:35:da:89:3f:fa:9b:e9:f8:76:e8:36:29: 0e:05:16:1b:8c:58:b9:8a:9a:d5:a3:cd:c6:65:19: 6a:97:1c:d9:d5:d4:73:1f:cf:5d:b1:08:d4:c7:7e: cf:4f:bc:07:ca:a1:44:cd:a9:17:42:7a:d9:8f:82: a5:02:52:f9:af:07:9d:e6:03:56:e4:d1:a1:d2:a4: 83:15:26:c4:7b:7d:16:7b:be:9b:9e:1a:f1:fa:46: db:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:35:AD:0A:7B:E1:71:C3:3E:8C:97:81:EA:87:00:FF:6D:BE:87:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95ac5d77-1af3-35ce-8e6a-3a6289863538.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.82.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:e5:54:fa:02:c9:91:b5:9c:51:c0:73:bb:03:19:9b:c5:4d: 85:2f:64:ea:6b:19:49:0f:5a:94:e3:54:bc:56:cc:50:a6:a5: 67:5c:49:f4:69:ae:71:51:90:f7:f5:3b:61:4b:e2:6d:1e:0a: ba:02:e2:3a:7b:83:0b:60:bd:15:9a:e8:ec:2b:01:99:54:4e: 2b:87:ff:82:5f:50:07:3e:e9:02:cd:94:20:1e:4e:b4:0d:43: b3:fe:f9:00:dd:7d:3d:9a:bb:d8:cc:b6:8c:8d:dd:cd:97:67: f0:fa:8d:7d:21:f1:67:b4:98:a0:56:f8:75:a9:8b:fd:4a:68: 16:2a:03:4b:11:88:7b:11:31:a3:3d:6b:5e:09:cf:1c:8a:b5: d5:5e:45:e6:28:74:c4:34:d9:50:2d:cc:87:fa:6c:3e:81:6b: 9f:9e:32:44:e7:d9:34:ed:a9:6c:2b:40:95:e3:a5:1a:d7:a2: 04:f9:2d:f6:bd:d5:3e:43:9a:59:4c:ff:19:08:53:42:c4:16: c5:b3:96:db:7a:ae:13:b8:6e:cd:ff:e1:76:a8:e9:5a:7c:1c: 1f:2b:d9:cc:c7:92:16:af:39:9a:10:8d:d5:ca:21:85:4d:37: 28:cc:6c:24:7f:7b:f7:12:53:fa:5d:07:02:83:3b:a6:4a:40: 2f:13:6e:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHcdwCLU2HEcCxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk YmUyNDE1MTctZDhiMC00YzY4LWE4OTctYjBjNmRkYTdiOTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR8yKrYeFNrtEpHxhK/fEyY10GJ1ll88LB8O wLwS+vR4VBJR7mbPzKizhzY9ZVn848qa8Bdmq3J5iGT2dDOBljTb0F0KQRXE0yl0 BNtKRWo4+h6I7jVVROPBBqCVO3Rm7LnQF256lEnuVas+zEX3N+BeCIJw2Tdruod+ 5MKfcet0KWcIVN/t+NcII7rI6c+XRJir//S/FQoDUBRw12Oeg0UHi6+aTbg12ok/ +pvp+HboNikOBRYbjFi5iprVo83GZRlqlxzZ1dRzH89dsQjUx37PT7wHyqFEzakX QnrZj4KlAlL5rwed5gNW5NGh0qSDFSbEe30We76bnhrx+kbbTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP41rQp74XHDPoyXgeqHAP9tvof4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTVhYzVkNzctMWFmMy0z NWNlLThlNmEtM2E2Mjg5ODYzNTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCplJQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvlVPoCyZG1nFHAc7sDGZvFTYUvZOprGUkPWpTjVLxWzFCmpWdcSfRp rnFRkPf1O2FL4m0eCroC4jp7gwtgvRWa6OwrAZlUTiuH/4JfUAc+6QLNlCAeTrQN Q7P++QDdfT2au9jMtoyN3c2XZ/D6jX0h8We0mKBW+HWpi/1KaBYqA0sRiHsRMaM9 a14JzxyKtdVeReYodMQ02VAtzIf6bD6Ba5+eMkTn2TTtqWwrQJXjpRrXogT5Lfa9 1T5DmllM/xkIU0LEFsWzltt6rhO4bs3/4Xao6Vp8HB8r2czHkhavOZoQjdXKIYVN NyjMbCR/e/cSU/pdBwKDO6ZKQC8TbgE= -----END CERTIFICATE-----Generated at Tue Jul 1 06:21:59 2025 by rpki-client