$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99a22e7b-afe8-39ca-af75-0fe3d17dd152.roa File: 99a22e7b-afe8-39ca-af75-0fe3d17dd152.roa (raw, json) Hash identifier: MtnR3XbT2kn4fd/UWCeyXNcCApWPhbW5MI5wngl2E5Y= Subject key identifier: D9:B4:89:E0:1D:AC:A9:46:81:ED:D0:7E:A2:D9:64:91:26:6E:3F:94 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A23C02020B2282E75505CA200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99a22e7b-afe8-39ca-af75-0fe3d17dd152.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 66.16.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:20:20:b2:28:2e:75:50:5c:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=621a2f8a-14ac-4ccc-aa69-02690ca5406f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:88:ec:55:0d:79:10:62:73:12:d4:59:32:be: 78:68:fe:d1:f1:61:78:72:91:3a:08:ed:16:e5:89: 25:ab:5f:f2:ef:6f:d8:8e:c1:6c:8f:6a:e3:bf:9e: 6c:1f:64:b0:00:7b:a3:f4:b0:05:d0:ed:c0:79:c2: 13:a1:2d:f6:9d:c7:7c:cd:8c:49:5d:d8:f6:3e:38: 66:8b:db:9b:34:6a:69:1d:52:fb:76:f4:77:ff:18: 58:d9:c2:04:62:01:8b:dd:5a:e7:49:a9:4c:1f:e8: 82:3d:da:7f:5f:78:d7:3b:3b:28:08:46:76:68:e6: 60:57:3a:4c:dd:e0:4f:d0:db:40:9b:b8:f5:1c:d4: d9:ca:a4:4b:ff:c2:ff:db:54:7f:7e:ca:6c:0b:7a: 2c:c6:e6:15:93:9a:4e:2c:de:bd:2d:4e:1c:15:70: b8:f1:2c:7a:09:3e:a0:ed:9b:7f:61:36:ec:62:81: f0:17:34:af:b6:c4:fe:8b:ee:d5:ca:45:ab:6c:3b: 4d:3a:89:46:a0:73:32:99:24:81:63:5b:a1:e4:54: fd:0f:2f:19:f2:6f:4e:49:e7:fb:d4:43:0c:7b:f2: dc:93:23:6b:b5:46:88:10:7d:ba:56:e9:94:a4:7a: 4d:53:cc:4a:ce:9d:c0:0f:24:67:e9:af:1d:11:2a: f2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B4:89:E0:1D:AC:A9:46:81:ED:D0:7E:A2:D9:64:91:26:6E:3F:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99a22e7b-afe8-39ca-af75-0fe3d17dd152.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.16.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:18:21:44:d9:73:c1:e8:ad:c5:1a:24:af:ad:f2:3f:7a:4b: f7:42:db:4c:9c:7c:55:8a:5e:54:ef:4a:1f:f0:8a:e3:82:18: 9e:a0:f5:e9:1e:19:b6:95:76:49:ef:22:f4:ef:26:ec:76:67: fe:82:83:f9:98:51:44:aa:c8:ee:72:4b:2a:68:95:88:4c:8f: e5:0b:80:36:01:24:62:6b:52:5e:2b:40:5b:bf:65:13:b7:de: 93:5d:64:4e:19:8f:0e:1f:e9:dd:9c:4c:c7:e4:70:bc:5f:92: e0:72:db:96:20:eb:32:1e:c5:33:fb:51:f4:f8:18:3f:0e:b3: bf:13:8c:58:f7:e1:9b:c7:7f:85:1a:a9:24:71:e4:07:54:63: cc:bd:c0:ad:af:cf:e2:9e:2f:2e:55:af:b8:a2:89:ea:5b:90: 70:5f:12:3c:a7:a2:a8:f9:cb:6d:fe:4f:14:28:60:ed:6a:0e: e2:e7:43:1b:e8:8c:61:9d:dc:f8:66:99:3d:b1:ef:09:4e:f0: e7:e9:11:c7:02:6a:f3:71:71:73:f6:13:76:ee:af:eb:7c:f6: c4:12:a3:a6:99:91:59:85:ff:62:7f:c3:2c:ce:b8:91:c4:b7: 64:b6:bd:e5:13:cf:99:59:86:f3:1d:c0:dc:f4:1f:fe:37:ed: 67:42:50:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwCAgsigudVBcogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk NjIxYTJmOGEtMTRhYy00Y2NjLWFhNjktMDI2OTBjYTU0MDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkojsVQ15EGJzEtRZMr54aP7R8WF4cpE6CO0W 5Yklq1/y72/YjsFsj2rjv55sH2SwAHuj9LAF0O3AecIToS32ncd8zYxJXdj2Pjhm i9ubNGppHVL7dvR3/xhY2cIEYgGL3VrnSalMH+iCPdp/X3jXOzsoCEZ2aOZgVzpM 3eBP0NtAm7j1HNTZyqRL/8L/21R/fspsC3osxuYVk5pOLN69LU4cFXC48Sx6CT6g 7Zt/YTbsYoHwFzSvtsT+i+7VykWrbDtNOolGoHMymSSBY1uh5FT9Dy8Z8m9OSef7 1EMMe/LckyNrtUaIEH26VumUpHpNU8xKzp3ADyRn6a8dESrypQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNm0ieAdrKlGge3QfqLZZJEmbj+UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTlhMjJlN2ItYWZlOC0z OWNhLWFmNzUtMGZlM2QxN2RkMTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQhBCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8YIUTZc8HorcUaJK+t8j96S/dC20ycfFWKXlTvSh/wiuOCGJ6g9eke GbaVdknvIvTvJux2Z/6Cg/mYUUSqyO5ySypolYhMj+ULgDYBJGJrUl4rQFu/ZRO3 3pNdZE4Zjw4f6d2cTMfkcLxfkuBy25Yg6zIexTP7UfT4GD8Os78TjFj34ZvHf4Ua qSRx5AdUY8y9wK2vz+KeLy5Vr7iiiepbkHBfEjynoqj5y23+TxQoYO1qDuLnQxvo jGGd3PhmmT2x7wlO8OfpEccCavNxcXP2E3bur+t89sQSo6aZkVmF/2J/wyzOuJHE t2S2veUTz5lZhvMdwNz0H/437WdCUK4= -----END CERTIFICATE-----Generated at Mon Jun 30 21:40:59 2025 by rpki-client