$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b76a72ad-8f1b-3e54-bad4-8b1f74c4044c.roa File: b76a72ad-8f1b-3e54-bad4-8b1f74c4044c.roa (raw, json) Hash identifier: WBMh8dYBOrPbPHLRuOwATmsloSvxCG2zrxaoe9k5BCk= Subject key identifier: 4B:CE:2E:A1:73:7D:45:BD:BD:34:A1:0F:AD:46:09:4F:52:EA:DD:25 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ACCA667A5B3E3572E6A62F700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b76a72ad-8f1b-3e54-bad4-8b1f74c4044c.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 66.19.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:67:a5:b3:e3:57:2e:6a:62:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=a1fc2c72-c542-4646-9297-2ac433c8f6e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:58:e0:6e:d8:f5:38:c3:bf:bc:b8:23:08:b3: 7d:a0:9b:b4:4d:5f:92:33:2f:21:b8:34:a1:ef:3f: 13:d7:e0:cf:37:f5:04:d3:f7:8c:dd:3f:34:07:9e: 66:e4:0c:cf:aa:27:2d:d0:23:b2:d0:4d:20:4f:45: 24:86:15:15:c0:3b:1b:44:8c:f0:88:55:5b:d1:c3: c6:4e:80:72:2f:ea:2b:57:41:15:2c:19:0f:e1:6d: 60:53:c5:ff:92:00:77:4b:b3:cb:2b:ea:54:f6:ac: c5:27:ea:b9:31:b8:60:b7:4d:af:c5:01:3f:c7:1a: 78:9d:19:f7:c5:3f:2f:a4:39:e1:60:66:42:e4:50: 07:ba:ba:b5:75:d7:76:70:a2:43:33:55:59:69:00: aa:35:33:4a:c4:a5:d9:fa:2c:ee:f7:7d:f2:62:17: 94:c6:05:a8:80:ac:42:6e:e2:c5:d2:fc:f2:86:06: 4c:bc:a4:6e:d9:5e:b7:e6:e2:88:b7:4c:01:16:c6: ef:e1:ae:0d:0c:12:f3:ae:11:ea:7b:91:99:b8:48: 56:a1:16:05:cf:22:fb:77:42:85:49:f2:6a:a6:ac: 44:e4:c8:d6:a9:47:11:76:f3:08:92:54:0a:cd:65: 5d:c5:26:02:a5:1b:fe:19:06:82:bd:e3:b4:e6:f2: 72:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CE:2E:A1:73:7D:45:BD:BD:34:A1:0F:AD:46:09:4F:52:EA:DD:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b76a72ad-8f1b-3e54-bad4-8b1f74c4044c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.19.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:9a:1d:2b:bb:00:fa:67:f5:f5:d6:0a:62:11:13:57:6b:ca: f7:9e:ba:64:8b:3e:4a:83:ad:8e:5e:e4:f4:d1:26:48:bf:86: 4d:2a:29:89:41:36:a7:71:1b:88:d4:5a:0c:0a:59:61:ed:0f: 2e:56:ba:c5:e6:56:7c:0d:a6:45:d7:0a:39:1a:90:75:29:19: 3d:80:7b:8f:6e:c8:c6:82:ce:0c:6c:4f:47:fe:af:c5:b0:a3: 21:8f:6b:88:9c:3c:4b:e3:92:4e:bd:e2:85:af:6f:d5:d5:ce: a2:9b:85:24:12:09:1a:3f:08:c1:5f:c5:25:dd:58:55:2c:73: f9:46:de:b7:39:e0:fc:ad:90:26:71:20:9b:ad:34:e1:ed:0a: b1:46:e8:10:0d:fb:64:87:02:54:5e:a2:79:e4:ba:c8:05:7a: 17:e2:54:01:7d:4a:17:9d:ff:28:b0:5b:fc:db:e2:9e:20:5c: 34:03:06:f8:71:6c:10:0b:8b:a6:e5:fd:d9:88:c7:e5:d2:64: d2:cd:2f:d6:33:f1:33:9e:a1:ae:9a:6c:63:62:5a:08:fa:4e: 25:dc:ee:82:94:bc:b8:e4:11:d1:03:a2:45:8a:7e:45:85:36: f6:35:1a:1e:82:a8:57:e6:0a:04:1a:62:7d:2e:bd:6f:1b:3a: bf:a4:43:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpmels+NXLmpi9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk YTFmYzJjNzItYzU0Mi00NjQ2LTkyOTctMmFjNDMzYzhmNmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsljgbtj1OMO/vLgjCLN9oJu0TV+SMy8huDSh 7z8T1+DPN/UE0/eM3T80B55m5AzPqict0COy0E0gT0UkhhUVwDsbRIzwiFVb0cPG ToByL+orV0EVLBkP4W1gU8X/kgB3S7PLK+pU9qzFJ+q5Mbhgt02vxQE/xxp4nRn3 xT8vpDnhYGZC5FAHurq1ddd2cKJDM1VZaQCqNTNKxKXZ+izu933yYheUxgWogKxC buLF0vzyhgZMvKRu2V635uKIt0wBFsbv4a4NDBLzrhHqe5GZuEhWoRYFzyL7d0KF SfJqpqxE5MjWqUcRdvMIklQKzWVdxSYCpRv+GQaCveO05vJyswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvOLqFzfUW9vTShD61GCU9S6t0lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjc2YTcyYWQtOGYxYi0z ZTU0LWJhZDQtOGIxZjc0YzQwNDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQhOrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+aHSu7APpn9fXWCmIRE1dryveeumSLPkqDrY5e5PTRJki/hk0qKYlB NqdxG4jUWgwKWWHtDy5WusXmVnwNpkXXCjkakHUpGT2Ae49uyMaCzgxsT0f+r8Ww oyGPa4icPEvjkk694oWvb9XVzqKbhSQSCRo/CMFfxSXdWFUsc/lG3rc54PytkCZx IJutNOHtCrFG6BAN+2SHAlReonnkusgFehfiVAF9Shed/yiwW/zb4p4gXDQDBvhx bBALi6bl/dmIx+XSZNLNL9Yz8TOeoa6abGNiWgj6TiXc7oKUvLjkEdEDokWKfkWF NvY1Gh6CqFfmCgQaYn0uvW8bOr+kQ8M= -----END CERTIFICATE-----Generated at Sat Aug 23 15:49:41 2025 by rpki-client