$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a224cec-745f-335a-bdb0-1812db5a8b1c.roa File: 1a224cec-745f-335a-bdb0-1812db5a8b1c.roa (raw, json) Hash identifier: AXvzuoRWPMlS8stB+e+bORIu1diKok8eywv27wyNUVg= Subject key identifier: 47:B5:0B:4A:D9:B5:4A:F4:15:50:BB:78:3A:F9:7E:A8:DB:80:DF:BC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8B0B4B2026D843A92387A200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a224cec-745f-335a-bdb0-1812db5a8b1c.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 7029 IP address blocks: 72.16.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:4b:20:26:d8:43:a9:23:87:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=d825d054-5d9f-4a9a-ada8-3c8086457fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:db:0f:2f:97:3c:ce:3a:6a:06:86:94:54:38: 3b:81:f0:16:15:ad:13:32:73:7e:1d:ac:32:0b:74: 7b:2b:9d:f0:be:f7:e1:f2:91:7d:cb:42:83:7b:4a: 35:46:3a:18:44:ae:af:ce:f2:c8:0b:13:ab:0d:56: cc:3a:e4:9b:32:f0:70:8d:07:1e:42:88:24:64:7b: e8:81:21:c3:69:63:cb:29:a1:ed:d8:68:66:f9:d1: 62:ab:de:97:42:6d:57:e0:48:0e:6b:5c:cf:4a:b3: aa:f8:94:d0:ee:dc:04:e3:30:79:d4:9d:8b:37:62: ff:29:6b:84:98:30:d1:d4:d3:a5:d9:35:64:60:39: c6:42:a0:6b:41:63:fa:77:89:f5:66:24:90:93:c7: 28:17:9e:b9:41:38:0c:a4:26:9e:4b:e2:ed:2e:63: 8f:a4:32:bf:8b:ba:42:73:f4:50:48:70:b8:ff:02: 22:38:bb:ed:2d:8f:e1:b6:a5:68:ff:80:e7:6c:5d: 30:ab:18:81:a6:72:9b:24:48:d6:d3:cd:96:d4:07: b1:f0:89:50:04:54:0e:1e:68:71:7c:50:5e:f2:f0: 15:f0:65:ef:ce:56:1d:43:66:06:aa:39:69:da:41: cc:ce:2d:33:8c:83:3b:24:33:1a:83:42:a1:b9:18: 0e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B5:0B:4A:D9:B5:4A:F4:15:50:BB:78:3A:F9:7E:A8:DB:80:DF:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a224cec-745f-335a-bdb0-1812db5a8b1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:fa:c2:f4:30:c5:2f:84:71:b9:b9:d9:39:b3:44:f2:7a:00: 53:95:20:3c:34:b2:cd:cc:7e:33:87:b6:b4:17:6c:6a:57:91: f7:3a:51:f9:59:16:f0:6b:a5:99:a3:60:b8:8c:27:0d:e1:aa: ca:1a:d1:41:c0:46:b6:1d:34:8e:83:5e:2d:4d:97:92:39:89: 18:93:6b:0a:40:ec:2a:a4:c8:2b:c6:50:4b:6c:03:2a:ba:27: f0:44:3d:b8:25:64:32:be:05:39:f3:8d:77:48:79:67:1b:19: 91:20:f5:3d:a7:38:5d:a0:ae:78:bc:86:c2:d9:38:de:60:29: db:85:17:07:73:25:f3:9f:b3:d5:9f:e5:78:96:44:73:63:16: 2c:ee:60:36:cf:5d:57:46:be:62:3d:0c:69:4d:4f:b4:dd:b5: 75:45:4c:87:9c:11:7d:44:7a:36:60:ec:75:7a:1e:15:59:db: b5:42:00:c8:8e:f2:53:46:00:4d:7a:90:5c:55:f6:3e:15:56: 16:33:67:a3:c0:3a:4d:e3:6a:59:89:32:49:6f:43:e9:b6:c0: bd:7b:a3:ad:d4:7f:d0:3f:23:a4:56:aa:55:e8:cc:19:ea:cd: e7:63:37:24:46:d5:67:c9:39:6d:ae:0f:27:22:7d:fe:21:57: 9d:a5:0f:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC0sgJthDqSOHogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk ZDgyNWQwNTQtNWQ5Zi00YTlhLWFkYTgtM2M4MDg2NDU3ZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdsPL5c8zjpqBoaUVDg7gfAWFa0TMnN+Hawy C3R7K53wvvfh8pF9y0KDe0o1RjoYRK6vzvLICxOrDVbMOuSbMvBwjQceQogkZHvo gSHDaWPLKaHt2Ghm+dFiq96XQm1X4EgOa1zPSrOq+JTQ7twE4zB51J2LN2L/KWuE mDDR1NOl2TVkYDnGQqBrQWP6d4n1ZiSQk8coF565QTgMpCaeS+LtLmOPpDK/i7pC c/RQSHC4/wIiOLvtLY/htqVo/4DnbF0wqxiBpnKbJEjW082W1Aex8IlQBFQOHmhx fFBe8vAV8GXvzlYdQ2YGqjlp2kHMzi0zjIM7JDMag0KhuRgOnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEe1C0rZtUr0FVC7eDr5fqjbgN+8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWEyMjRjZWMtNzQ1Zi0z MzVhLWJkYjAtMTgxMmRiNWE4YjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSBAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAf6wvQwxS+Ecbm52TmzRPJ6AFOVIDw0ss3MfjOHtrQXbGpXkfc6UflZ FvBrpZmjYLiMJw3hqsoa0UHARrYdNI6DXi1Nl5I5iRiTawpA7CqkyCvGUEtsAyq6 J/BEPbglZDK+BTnzjXdIeWcbGZEg9T2nOF2grni8hsLZON5gKduFFwdzJfOfs9Wf 5XiWRHNjFizuYDbPXVdGvmI9DGlNT7TdtXVFTIecEX1EejZg7HV6HhVZ27VCAMiO 8lNGAE16kFxV9j4VVhYzZ6PAOk3jalmJMklvQ+m2wL17o63Uf9A/I6RWqlXozBnq zedjNyRG1WfJOW2uDyciff4hV52lD4A= -----END CERTIFICATE-----Generated at Wed Aug 6 05:27:08 2025 by rpki-client