$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d242c1a2-0bf3-3976-88e9-20789a846b33.roa File: d242c1a2-0bf3-3976-88e9-20789a846b33.roa (raw, json) Hash identifier: 9YEpwoQ4yBeZKsBmRd6Joo9LKGRkksgb1bcDePa75Ko= Subject key identifier: 42:92:5C:A6:1D:5F:DC:D8:59:4C:4A:BB:84:80:E7:CB:C2:00:26:01 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A49707BE802EF8C93165C9F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d242c1a2-0bf3-3976-88e9-20789a846b33.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 166.82.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:7b:e8:02:ef:8c:93:16:5c:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=b593078d-a692-428b-a381-95e0114d1da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:93:3f:48:b2:87:a7:b2:d0:10:ed:72:b9:60: cd:40:22:28:56:4f:31:e9:d9:11:15:bc:c4:bf:d3: 00:bd:71:84:11:30:c6:60:60:d9:0d:c3:27:50:cf: 1b:91:b3:78:98:10:0e:a9:89:c4:b2:f3:f1:0a:e0: 2b:03:50:21:dd:8e:da:7a:c0:22:f1:e8:c2:43:ae: 87:b5:44:af:f8:03:85:62:4d:69:eb:1e:97:68:f5: 7b:3b:c3:96:69:c1:71:2a:8f:c2:75:a0:fb:84:f7: 7e:35:d1:45:76:d8:30:fd:0b:29:86:75:9f:2e:a4: d6:fa:8d:1d:ff:e4:52:b3:da:ca:61:3f:36:59:1c: 4d:3f:34:d1:75:bc:95:bf:40:dc:b7:1d:0b:28:2c: a0:c8:22:12:ef:96:95:9d:78:01:f5:d1:83:30:9e: 2b:d6:45:60:55:64:4a:c6:a6:6f:44:bb:31:c9:c8: 3f:d6:7a:db:2c:9b:6f:97:60:45:30:81:b5:f0:ba: b7:e6:6b:23:55:be:db:ac:19:d7:9c:a8:56:49:ff: c0:e8:32:ed:04:af:8e:ee:16:66:9a:8e:99:3b:2f: f1:e6:4a:c6:1f:e1:07:79:d6:ee:14:64:8f:a5:74: 5a:e7:9d:91:c2:39:57:62:d2:13:56:20:91:4f:25: cb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:92:5C:A6:1D:5F:DC:D8:59:4C:4A:BB:84:80:E7:CB:C2:00:26:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d242c1a2-0bf3-3976-88e9-20789a846b33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.82.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:91:4b:2d:19:ba:b8:b5:25:cc:66:12:ef:a5:76:42:de:71: 65:08:e6:af:89:30:00:d2:1c:59:de:e6:94:c1:5a:4d:76:30: 39:1a:a3:b5:3d:d9:c5:1e:b8:b2:53:ad:fa:09:73:4e:30:c8: 8a:23:49:81:ce:fd:fc:a3:0d:3f:02:14:4a:dc:2b:50:c1:2c: ec:c4:96:d4:73:85:48:66:20:7b:45:76:a2:dc:7b:86:52:da: b4:f6:4f:cd:55:03:44:26:08:bc:a2:7c:7b:91:23:13:71:69: 10:15:29:49:24:d3:d2:19:36:b5:bc:de:67:63:e8:42:35:7d: fd:74:10:0a:ba:e4:73:a1:97:c2:84:04:69:0d:e7:00:31:e5: fe:a9:d8:ac:4a:d9:b6:7d:c4:3d:8b:5d:3b:8c:32:dd:7c:fd: c7:d5:ea:1c:93:bb:57:f1:9e:30:30:41:1e:cf:de:ef:3d:7e: 45:c5:52:8b:7d:f5:26:b8:14:d5:f2:0f:1f:cd:8e:b7:fc:dd: a2:57:6f:2a:20:61:e0:7f:6c:de:0c:40:cb:ac:96:78:9c:f5: ce:f7:c0:ed:63:00:fe:7f:a4:8c:ad:8a:bd:11:76:2b:99:ba: 3e:fa:8f:42:a8:bf:cc:3b:f3:dc:94:27:9d:c0:95:76:df:7d: 28:97:b4:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHvoAu+MkxZcnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk YjU5MzA3OGQtYTY5Mi00MjhiLWEzODEtOTVlMDExNGQxZGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJM/SLKHp7LQEO1yuWDNQCIoVk8x6dkRFbzE v9MAvXGEETDGYGDZDcMnUM8bkbN4mBAOqYnEsvPxCuArA1Ah3Y7aesAi8ejCQ66H tUSv+AOFYk1p6x6XaPV7O8OWacFxKo/CdaD7hPd+NdFFdtgw/QsphnWfLqTW+o0d /+RSs9rKYT82WRxNPzTRdbyVv0Dctx0LKCygyCIS75aVnXgB9dGDMJ4r1kVgVWRK xqZvRLsxycg/1nrbLJtvl2BFMIG18Lq35msjVb7brBnXnKhWSf/A6DLtBK+O7hZm mo6ZOy/x5krGH+EHedbuFGSPpXRa552RwjlXYtITViCRTyXL7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKSXKYdX9zYWUxKu4SA58vCACYBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDI0MmMxYTItMGJmMy0z OTc2LTg4ZTktMjA3ODlhODQ2YjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCplKcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWRSy0Zuri1JcxmEu+ldkLecWUI5q+JMADSHFne5pTBWk12MDkao7U9 2cUeuLJTrfoJc04wyIojSYHO/fyjDT8CFErcK1DBLOzEltRzhUhmIHtFdqLce4ZS 2rT2T81VA0QmCLyifHuRIxNxaRAVKUkk09IZNrW83mdj6EI1ff10EAq65HOhl8KE BGkN5wAx5f6p2KxK2bZ9xD2LXTuMMt18/cfV6hyTu1fxnjAwQR7P3u89fkXFUot9 9Sa4FNXyDx/Njrf83aJXbyogYeB/bN4MQMuslnic9c73wO1jAP5/pIytir0RdiuZ uj76j0Kov8w789yUJ53AlXbffSiXtGg= -----END CERTIFICATE-----Generated at Tue Jul 1 15:32:08 2025 by rpki-client