$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99df0eb4-3887-3d68-9078-a9b81d93ba46.roa File: 99df0eb4-3887-3d68-9078-a9b81d93ba46.roa (raw, json) Hash identifier: WmPGWlUHsJS76i8vmp0XR83F0iu156VDBpVB0LsjM8E= Subject key identifier: D1:F4:E3:70:3F:C3:FC:9B:8C:E1:CF:A2:69:2F:49:8B:ED:B2:81:57 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADECBD60E27EB95C17CA50F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99df0eb4-3887-3d68-9078-a9b81d93ba46.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 7029 IP address blocks: 66.19.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:d6:0e:27:eb:95:c1:7c:a5:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=f602dbe1-f670-4877-9481-436ea31882a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:00:c9:f9:a9:38:0e:96:5b:7f:54:a5:c5:3b: 7b:ce:2a:85:2e:ac:4e:60:e0:f1:ef:19:24:a8:ea: dd:67:82:be:ca:65:58:89:dc:57:31:14:76:13:cf: a0:df:c9:5a:02:68:8a:fc:21:3d:ce:8d:a8:34:5b: 53:ff:e4:53:40:1d:15:fe:c5:7d:bf:35:17:1f:7d: 5b:ec:59:30:e6:a6:db:8a:3d:b8:3b:02:20:c7:5d: 8d:dc:50:e2:81:bb:11:af:68:94:56:06:b1:81:d5: c9:a9:1d:0d:42:a5:2a:95:21:a1:60:a4:42:b7:6d: fc:ae:4f:54:47:00:3a:e7:f5:88:2b:55:37:be:9a: b3:f1:d8:ef:8f:c6:d5:be:48:7c:87:7c:ef:f4:49: c9:32:a2:b4:40:23:fd:b8:35:98:3a:95:e0:88:9f: ac:9d:f9:3f:a1:93:08:34:a7:7c:30:35:aa:7c:8e: 1d:e2:74:bb:6d:9b:41:37:29:18:b2:4d:be:35:35: aa:b1:e8:35:97:c8:7a:99:1c:dd:f5:f2:57:dd:8e: e0:e6:af:36:79:bf:18:1c:8c:9a:90:d5:7d:cd:c3: 37:17:86:65:e5:6d:0c:2e:0c:be:54:a1:3b:66:cf: a3:96:a0:43:96:e8:0a:65:da:f7:bd:6c:d5:8b:11: 83:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F4:E3:70:3F:C3:FC:9B:8C:E1:CF:A2:69:2F:49:8B:ED:B2:81:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99df0eb4-3887-3d68-9078-a9b81d93ba46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.19.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:1b:96:9d:b5:02:7b:bd:64:08:61:b3:4d:e2:01:b0:52:69: 7f:cf:be:86:62:34:30:f1:96:0f:4f:a2:80:49:28:3f:7a:fe: 8b:e2:0f:6b:e5:e2:d8:dd:04:4c:ab:4b:2e:34:bf:d4:e9:e4: bb:bf:e0:5b:95:6b:ff:47:41:2b:4f:00:8e:b7:1c:df:c2:a9: 0b:90:ad:32:19:74:b2:a6:ce:f1:34:09:fa:69:50:25:5f:c6: a8:1a:7a:9b:94:ff:8e:36:c2:17:76:f9:26:f8:3c:44:d3:ab: de:4b:8f:d0:85:6c:0c:58:ec:f0:78:c2:ab:0a:d8:1c:27:40: 33:d1:4d:64:ca:aa:58:7c:7b:87:1f:13:19:64:3d:8f:02:65: 48:d0:6f:b6:4b:5a:2f:06:3e:84:ea:d7:02:3a:94:95:1e:07: 40:58:8e:cd:d7:41:40:70:85:e9:0c:0b:12:9f:54:32:ba:61: c2:3e:d5:1d:53:a6:22:50:50:b3:fe:4b:48:f2:1a:cf:78:f4: 02:2c:87:eb:ec:58:1f:ea:10:a1:99:8b:b8:d8:a8:c8:43:d1: 1d:f5:cb:c2:65:7d:e0:d4:d0:94:43:36:a4:67:77:87:ec:4f: 2f:53:c4:0e:b0:88:51:05:ca:41:af:e6:26:d3:d1:bd:90:65: 2c:13:08:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey9YOJ+uVwXylDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk ZjYwMmRiZTEtZjY3MC00ODc3LTk0ODEtNDM2ZWEzMTg4MmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgDJ+ak4DpZbf1SlxTt7ziqFLqxOYODx7xkk qOrdZ4K+ymVYidxXMRR2E8+g38laAmiK/CE9zo2oNFtT/+RTQB0V/sV9vzUXH31b 7Fkw5qbbij24OwIgx12N3FDigbsRr2iUVgaxgdXJqR0NQqUqlSGhYKRCt238rk9U RwA65/WIK1U3vpqz8djvj8bVvkh8h3zv9EnJMqK0QCP9uDWYOpXgiJ+snfk/oZMI NKd8MDWqfI4d4nS7bZtBNykYsk2+NTWqseg1l8h6mRzd9fJX3Y7g5q82eb8YHIya kNV9zcM3F4Zl5W0MLgy+VKE7Zs+jlqBDlugKZdr3vWzVixGD1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNH043A/w/ybjOHPomkvSYvtsoFXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTlkZjBlYjQtMzg4Ny0z ZDY4LTkwNzgtYTliODFkOTNiYTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQhO9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8blp21Anu9ZAhhs03iAbBSaX/PvoZiNDDxlg9PooBJKD96/oviD2vl 4tjdBEyrSy40v9Tp5Lu/4FuVa/9HQStPAI63HN/CqQuQrTIZdLKmzvE0CfppUCVf xqgaepuU/442whd2+Sb4PETTq95Lj9CFbAxY7PB4wqsK2BwnQDPRTWTKqlh8e4cf ExlkPY8CZUjQb7ZLWi8GPoTq1wI6lJUeB0BYjs3XQUBwhekMCxKfVDK6YcI+1R1T piJQULP+S0jyGs949AIsh+vsWB/qEKGZi7jYqMhD0R31y8JlfeDU0JRDNqRnd4fs Ty9TxA6wiFEFykGv5ibT0b2QZSwTCJk= -----END CERTIFICATE-----Generated at Sat Aug 23 18:50:06 2025 by rpki-client