$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/174403f0-940c-3d24-a816-e387a0ad0af7.roa File: 174403f0-940c-3d24-a816-e387a0ad0af7.roa (raw, json) Hash identifier: 9g/Gnu22j0/PRBJrNYsanyKKy3Bbs/aKJ+tflp32L9k= Subject key identifier: 9A:5B:5B:D8:5E:F5:48:DA:6E:BF:BA:3A:DD:0C:62:3C:CB:7B:B7:8C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0FA1772CC6FB256053F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/174403f0-940c-3d24-a816-e387a0ad0af7.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 72.4.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:fa:17:72:cc:6f:b2:56:05:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=ec5d5078-609c-4bd2-843d-3d7ec3534c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3a:90:6d:12:a2:b2:69:66:1b:df:bc:53:45: 13:44:58:7f:a1:c3:e2:fe:8e:64:bb:53:57:ca:cf: 97:4b:25:5c:5c:76:8b:df:c5:c4:6a:45:e8:05:9e: fe:9d:1a:ce:24:d9:35:d9:d8:75:65:18:8d:53:58: c2:24:6d:93:7e:4c:d2:be:2c:e6:dc:a6:da:49:81: 10:ad:91:50:56:0a:52:fb:28:d8:eb:22:a2:b8:0a: 1e:65:e2:99:8e:7e:6b:f4:e9:3f:3e:cf:47:2a:3f: f9:e6:85:52:a8:31:5c:d3:2c:95:5b:36:a4:ea:4f: 24:f0:06:e2:26:77:42:25:fd:e7:84:38:af:3a:56: 5a:f2:7b:06:74:4c:87:1d:83:17:45:83:64:3b:be: e4:50:e8:e2:75:c1:35:c1:af:f7:7c:dd:a7:fc:b7: 6e:ab:a1:e3:48:fb:55:b7:1d:17:27:f0:6b:22:f5: 29:e2:09:8e:e8:dd:7a:fd:4a:f5:2a:9f:95:d3:70: 38:ba:d5:e3:ba:47:3c:af:4a:38:c3:4e:f5:73:65: 45:90:c8:8f:b2:0c:12:a5:e5:ad:c9:7d:c8:0c:e8: 60:93:cf:d7:f5:93:c2:19:d1:50:fe:f1:3e:70:b9: d8:39:fc:da:c8:57:e6:54:b7:a7:1a:03:e2:ec:6b: fc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5B:5B:D8:5E:F5:48:DA:6E:BF:BA:3A:DD:0C:62:3C:CB:7B:B7:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/174403f0-940c-3d24-a816-e387a0ad0af7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.4.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:41:15:14:89:66:87:7c:9e:67:10:dc:b9:31:e7:b3:d6:cf: 90:9f:88:58:dd:5a:bc:1c:f4:18:9a:cf:68:6b:14:62:17:36: 64:ff:9f:12:a2:4c:62:37:4c:e8:69:fa:89:90:94:2c:38:f1: 7f:9f:5d:20:28:0d:3b:3b:79:58:cd:c2:9f:59:70:7f:f7:db: 66:ea:98:10:3e:5d:f9:94:11:33:b2:11:21:d5:4d:19:70:ed: e4:dd:9b:36:ab:e5:ed:e8:19:76:c8:66:ad:6c:fb:1a:ba:98: 20:e4:6c:36:a0:4e:d0:c4:0e:f9:5c:f0:a8:99:4a:51:ca:3c: 2f:ae:23:32:35:ce:24:c2:e3:67:e1:34:69:f4:67:93:33:a5: e9:4b:9f:5e:05:83:61:23:71:3f:55:3b:a6:10:ae:b9:a0:12: 2a:77:4f:0b:08:12:b6:9e:03:a4:5e:6b:26:2c:8c:3f:6b:60: 5e:58:30:e3:c2:3b:5c:0b:90:05:af:1c:f7:ed:d5:31:b2:28: 99:1e:e4:39:cf:98:de:6a:da:dc:1f:73:0f:c0:f2:93:9d:e7: 85:a7:47:56:f1:54:b7:ff:09:a5:57:68:b9:a8:58:cc:a3:3e: 99:aa:e2:ee:c9:a2:ed:80:b8:47:f0:eb:bb:11:40:3b:b1:a4: cf:31:e8:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoPoXcsxvslYFPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZWM1ZDUwNzgtNjA5Yy00YmQyLTg0M2QtM2Q3ZWMzNTM0YzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDqQbRKismlmG9+8U0UTRFh/ocPi/o5ku1NX ys+XSyVcXHaL38XEakXoBZ7+nRrOJNk12dh1ZRiNU1jCJG2TfkzSvizm3KbaSYEQ rZFQVgpS+yjY6yKiuAoeZeKZjn5r9Ok/Ps9HKj/55oVSqDFc0yyVWzak6k8k8Abi JndCJf3nhDivOlZa8nsGdEyHHYMXRYNkO77kUOjidcE1wa/3fN2n/Lduq6HjSPtV tx0XJ/BrIvUp4gmO6N16/Ur1Kp+V03A4utXjukc8r0o4w071c2VFkMiPsgwSpeWt yX3IDOhgk8/X9ZPCGdFQ/vE+cLnYOfzayFfmVLenGgPi7Gv80QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpbW9he9Ujabr+6Ot0MYjzLe7eMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTc0NDAzZjAtOTQwYy0z ZDI0LWE4MTYtZTM4N2EwYWQwYWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSAQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVBFRSJZod8nmcQ3Lkx57PWz5CfiFjdWrwc9Biaz2hrFGIXNmT/nxKi TGI3TOhp+omQlCw48X+fXSAoDTs7eVjNwp9ZcH/322bqmBA+XfmUETOyESHVTRlw 7eTdmzar5e3oGXbIZq1s+xq6mCDkbDagTtDEDvlc8KiZSlHKPC+uIzI1ziTC42fh NGn0Z5MzpelLn14Fg2EjcT9VO6YQrrmgEip3TwsIEraeA6ReayYsjD9rYF5YMOPC O1wLkAWvHPft1TGyKJke5DnPmN5q2twfcw/A8pOd54WnR1bxVLf/CaVXaLmoWMyj Ppmq4u7Jou2AuEfw67sRQDuxpM8x6LY= -----END CERTIFICATE-----Generated at Tue Aug 5 23:04:18 2025 by rpki-client