$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03c82bd3-ec15-355a-a5f4-d334426ebe0e.roa File: 03c82bd3-ec15-355a-a5f4-d334426ebe0e.roa (raw, json) Hash identifier: xeKrtehU7+Ve3TP6iIu+8TdWOt9yU5dJbA3dI/HsrPY= Subject key identifier: EA:00:79:D3:06:6F:94:E4:81:BE:9B:28:E2:50:93:B8:37:F6:C0:34 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB3861AB033A593EA17F9C900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03c82bd3-ec15-355a-a5f4-d334426ebe0e.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 7029 IP address blocks: 67.141.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:1a:b0:33:a5:93:ea:17:f9:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=e16dbd44-12f5-464f-b9e0-56646b6cdf70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8c:33:0f:21:b9:1e:75:2b:16:c2:dd:3b:8c: 2c:d6:aa:ee:a5:1c:5a:be:fa:d9:72:41:c6:dd:d9: bf:dd:07:4c:54:32:7d:12:5f:19:8a:c9:c5:6c:e7: 28:7e:c1:87:65:b1:3e:8e:77:7c:96:be:10:ce:ff: 0c:4d:8f:da:63:5f:2f:99:3b:0b:b5:48:f5:7c:05: b9:84:37:07:3a:17:e8:84:58:bf:7f:5a:f4:fc:6b: b3:d0:26:2c:7d:c2:58:3f:fb:26:49:e4:2a:39:fb: 71:9a:e2:9d:c5:bc:a6:e7:7f:2e:c8:3d:06:6c:b1: a1:72:17:ec:e5:09:4a:ff:8d:c3:c4:2f:db:06:64: f4:ce:39:74:3a:b3:8e:f1:ca:7f:5e:33:4e:08:d6: c8:cb:19:42:1e:2d:48:45:e7:bb:b3:fc:e3:a8:03: 6d:ce:7b:c9:36:e5:e2:bc:32:1f:15:3f:42:98:ee: 88:ce:44:8b:07:e0:44:0c:2f:75:af:4b:01:90:01: b6:fe:91:99:8c:26:0f:9c:7c:fc:50:c2:1a:11:ac: 56:e4:97:4e:1b:50:e7:59:6f:bf:18:78:38:7b:e6: e2:e0:41:5b:68:dd:1d:53:bd:26:0a:64:3d:e3:4d: 09:c8:3d:cd:b5:54:12:b9:90:00:4a:84:4e:ba:9a: ce:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:00:79:D3:06:6F:94:E4:81:BE:9B:28:E2:50:93:B8:37:F6:C0:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03c82bd3-ec15-355a-a5f4-d334426ebe0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:33:48:93:b2:04:a5:da:b8:00:b1:8c:0f:34:59:74:79:a8: 05:4d:23:d2:ab:41:13:0e:41:73:4a:d8:58:85:8d:d2:2b:34: a3:fa:3e:ea:89:a5:aa:83:1e:47:47:11:68:06:a2:47:be:73: c8:0f:7b:a6:e5:b1:e0:e5:4d:8d:4d:b1:b0:fa:1c:1c:db:27: d4:ea:27:c8:9e:28:0b:86:35:08:06:15:62:e0:15:e1:cd:06: d8:bb:fa:de:e0:df:3d:31:d7:7b:f0:64:87:d9:f3:78:d0:1f: ec:17:5b:e5:b6:1e:36:b1:c6:60:ef:08:1b:65:0a:ca:c9:00: ad:05:df:be:c3:95:6f:fe:01:87:9a:38:ef:da:6a:21:85:66: 6f:dc:60:64:bb:fe:b5:dd:bb:bc:23:42:02:25:7f:8f:2f:b1: 6e:a6:f3:c8:50:1e:77:d1:71:d7:bd:c5:08:8c:f9:04:24:eb: 43:2a:1e:86:06:4d:1c:7e:32:4a:8c:97:55:9d:9b:8b:b8:91: 54:7a:34:23:0a:0b:2f:34:79:8e:75:b3:e3:14:f0:b9:55:be: 39:98:8c:27:e7:9d:0e:9e:9f:1d:56:ad:b2:e4:30:23:cd:25: 3f:11:8f:98:8d:42:92:35:4a:24:b1:b8:63:b2:c7:30:f1:c0: 5e:79:89:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhhqwM6WT6hf5yQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk ZTE2ZGJkNDQtMTJmNS00NjRmLWI5ZTAtNTY2NDZiNmNkZjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYwzDyG5HnUrFsLdO4ws1qrupRxavvrZckHG 3dm/3QdMVDJ9El8ZisnFbOcofsGHZbE+jnd8lr4Qzv8MTY/aY18vmTsLtUj1fAW5 hDcHOhfohFi/f1r0/Guz0CYsfcJYP/smSeQqOftxmuKdxbym538uyD0GbLGhchfs 5QlK/43DxC/bBmT0zjl0OrOO8cp/XjNOCNbIyxlCHi1IRee7s/zjqANtznvJNuXi vDIfFT9CmO6IzkSLB+BEDC91r0sBkAG2/pGZjCYPnHz8UMIaEaxW5JdOG1DnWW+/ GHg4e+bi4EFbaN0dU70mCmQ9400JyD3NtVQSuZAASoROuprO3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOoAedMGb5Tkgb6bKOJQk7g39sA0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDNjODJiZDMtZWMxNS0z NTVhLWE1ZjQtZDMzNDQyNmViZTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ40QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4zSJOyBKXauACxjA80WXR5qAVNI9KrQRMOQXNK2FiFjdIrNKP6PuqJ paqDHkdHEWgGoke+c8gPe6blseDlTY1NsbD6HBzbJ9TqJ8ieKAuGNQgGFWLgFeHN Bti7+t7g3z0x13vwZIfZ83jQH+wXW+W2HjaxxmDvCBtlCsrJAK0F377DlW/+AYea OO/aaiGFZm/cYGS7/rXdu7wjQgIlf48vsW6m88hQHnfRcde9xQiM+QQk60MqHoYG TRx+MkqMl1Wdm4u4kVR6NCMKCy80eY51s+MU8LlVvjmYjCfnnQ6enx1WrbLkMCPN JT8Rj5iNQpI1SiSxuGOyxzDxwF55iWY= -----END CERTIFICATE-----Generated at Mon Aug 4 19:12:41 2025 by rpki-client