$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ab4aa8-25bc-3a21-b234-327defea1e21.roa File: 08ab4aa8-25bc-3a21-b234-327defea1e21.roa (raw, json) Hash identifier: c0gTOpqkViHAKc1iT7xONrFyKcMIhWxOnuhtkFP/HM4= Subject key identifier: 8B:41:38:D8:7E:6C:06:3C:58:7E:8C:7E:53:B0:92:04:9F:A3:68:70 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A9900CC84837CD5BFCFC6D780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ab4aa8-25bc-3a21-b234-327defea1e21.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 67.141.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:cc:84:83:7c:d5:bf:cf:c6:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=d1e80062-aeb1-4783-8a02-a73eb7c7a9cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:94:56:a5:57:22:38:c4:46:20:82:60:df:61: 34:2f:a3:a9:fd:2e:d9:cf:e6:ad:93:88:c7:be:bb: 6e:01:d3:d2:73:c6:70:67:c7:a8:ff:03:08:87:15: 5e:66:36:4a:83:08:c8:85:9e:72:22:45:e4:17:78: 05:85:09:29:91:d3:32:7d:0d:62:05:68:68:77:a3: c5:a2:97:c4:23:29:fb:55:14:d2:51:eb:da:bb:11: c9:8c:03:dd:90:da:94:f5:d2:47:8f:b9:25:1f:bc: 8d:11:d5:f0:df:76:84:ed:ec:1a:d8:0b:50:8c:aa: 26:56:ef:bd:c6:94:26:a9:fa:28:88:86:75:6e:63: ad:f8:2b:d3:5b:44:c0:84:74:a4:94:07:15:9f:93: 04:ee:5e:b7:49:9a:21:51:e8:6e:32:8f:e2:c2:de: 46:58:f8:cd:a1:5a:a0:39:54:43:d9:e4:62:42:1f: d4:8a:0a:8f:1b:08:6a:85:19:2d:1e:14:e2:ec:65: 08:c9:ed:ff:67:bb:54:9b:f2:f7:78:3f:0a:35:45: 81:83:86:66:9c:34:89:df:f4:d9:9b:1b:9a:f5:6d: 42:86:9f:9b:24:9a:ba:8b:96:10:ab:17:1a:f8:05: 3f:32:d0:15:82:c8:2d:c3:b6:c5:f1:0c:81:66:0f: b1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:41:38:D8:7E:6C:06:3C:58:7E:8C:7E:53:B0:92:04:9F:A3:68:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ab4aa8-25bc-3a21-b234-327defea1e21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ce:c7:52:b4:9b:3b:56:55:1b:a5:05:ae:53:a3:e1:12:4c: 2b:f2:72:a2:92:69:e2:cb:79:8d:ae:1f:68:a9:55:b6:d0:74: 12:78:53:45:8f:9b:1d:f3:5d:bc:1e:ae:92:f4:b6:83:52:2f: de:40:ea:b0:ad:cf:bf:65:36:5c:52:6c:d2:f9:3c:6e:dd:78: af:12:47:16:c6:21:0a:cf:2d:5d:b0:63:17:12:f4:48:95:4c: 7c:05:78:69:88:5e:3a:5a:e4:ef:2a:c6:92:ea:42:59:73:b0: 88:2a:12:75:c1:28:0b:fa:01:49:73:84:01:00:85:fd:28:40: 09:71:96:65:72:2c:7d:70:82:90:8f:3d:bd:03:4d:26:e4:a4: ad:45:25:a0:77:fa:b3:b6:b0:7a:07:1b:4d:08:7b:9f:08:75: 41:76:76:a8:69:d5:4f:19:32:14:dc:49:3b:0a:96:53:2c:3c: 71:ed:6f:28:ec:43:85:c9:b3:71:24:03:7c:db:3a:df:48:a6: 9c:12:dd:0d:61:4f:1a:0c:77:0f:1c:69:87:53:4f:30:bc:9a: 76:75:41:7f:c2:94:3c:ca:cf:0f:1e:b9:b4:56:3c:1c:c0:e7: 39:c8:4e:8e:ab:92:b3:c0:e1:bc:5c:39:c9:c5:cb:68:13:93: 32:a3:3f:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMyEg3zVv8/G14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk ZDFlODAwNjItYWViMS00NzgzLThhMDItYTczZWI3YzdhOWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopRWpVciOMRGIIJg32E0L6Op/S7Zz+atk4jH vrtuAdPSc8ZwZ8eo/wMIhxVeZjZKgwjIhZ5yIkXkF3gFhQkpkdMyfQ1iBWhod6PF opfEIyn7VRTSUevauxHJjAPdkNqU9dJHj7klH7yNEdXw33aE7ewa2AtQjKomVu+9 xpQmqfooiIZ1bmOt+CvTW0TAhHSklAcVn5ME7l63SZohUehuMo/iwt5GWPjNoVqg OVRD2eRiQh/UigqPGwhqhRktHhTi7GUIye3/Z7tUm/L3eD8KNUWBg4ZmnDSJ3/TZ mxua9W1Chp+bJJq6i5YQqxca+AU/MtAVgsgtw7bF8QyBZg+x7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItBONh+bAY8WH6MflOwkgSfo2hwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDhhYjRhYTgtMjViYy0z YTIxLWIyMzQtMzI3ZGVmZWExZTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ41YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjOx1K0mztWVRulBa5To+ESTCvycqKSaeLLeY2uH2ipVbbQdBJ4U0WP mx3zXbwerpL0toNSL95A6rCtz79lNlxSbNL5PG7deK8SRxbGIQrPLV2wYxcS9EiV THwFeGmIXjpa5O8qxpLqQllzsIgqEnXBKAv6AUlzhAEAhf0oQAlxlmVyLH1wgpCP Pb0DTSbkpK1FJaB3+rO2sHoHG00Ie58IdUF2dqhp1U8ZMhTcSTsKllMsPHHtbyjs Q4XJs3EkA3zbOt9IppwS3Q1hTxoMdw8caYdTTzC8mnZ1QX/ClDzKzw8eubRWPBzA 5znITo6rkrPA4bxcOcnFy2gTkzKjP1g= -----END CERTIFICATE-----Generated at Thu Aug 7 05:07:13 2025 by rpki-client