$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ec27b64-b946-30a2-a82f-7c536af28e32.roa File: 1ec27b64-b946-30a2-a82f-7c536af28e32.roa (raw, json) Hash identifier: 7VpLt1ljCqSuz+JNPu3F6NIkpnPEkx5nm9MV3AUHhJQ= Subject key identifier: D3:2C:4D:42:8C:50:76:26:34:D2:98:76:80:BA:5E:87:AD:A7:B3:B5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0CAFBE363A7370281EB80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ec27b64-b946-30a2-a82f-7c536af28e32.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 69.40.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ca:fb:e3:63:a7:37:02:81:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=31bc39b0-3cdf-46a9-9860-949bee3c1bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:54:f7:2d:04:68:1a:02:a9:fd:e6:a0:98:18: 49:23:8c:64:17:45:33:d4:56:54:3c:0a:f3:42:e2: 84:4b:82:a4:5c:ef:e4:5a:d7:24:31:33:09:e1:c3: 42:6c:f7:9c:9f:3e:41:44:b5:71:10:b5:ea:f5:8e: 69:ef:2d:f5:97:99:d5:d6:49:ac:1e:f8:cb:24:a2: 7a:da:f7:99:37:96:f1:56:30:d7:f4:74:ff:32:a0: 2c:e2:77:95:e8:c1:fd:80:73:40:c5:b6:95:08:fc: f8:73:52:d0:36:68:89:7a:8d:0e:7c:12:3e:c7:7c: 26:ee:ec:03:c1:b1:38:95:ac:11:f1:c3:75:41:31: ce:fd:86:93:a3:ef:85:cb:66:27:7b:b5:95:47:25: 06:12:40:0c:36:d0:ef:ea:da:26:fd:79:52:65:37: 9d:ef:ee:1b:7d:7e:03:43:77:c5:1b:61:b8:6b:2f: f4:30:0e:85:9d:64:31:b7:da:54:8b:e6:b5:fe:26: 3e:03:16:24:f4:40:bf:ca:31:8a:ca:cb:b7:97:ed: 78:6e:f2:d4:d2:08:34:cb:ff:1e:bd:41:a2:ec:10: 8f:d3:58:e7:fa:b9:18:82:52:51:b6:b0:8d:90:a1: 88:a0:6a:e1:cd:b8:e7:50:1e:99:1a:d7:57:85:3a: da:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2C:4D:42:8C:50:76:26:34:D2:98:76:80:BA:5E:87:AD:A7:B3:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ec27b64-b946-30a2-a82f-7c536af28e32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:58:7f:66:84:06:03:a4:39:fc:6a:2c:07:21:e7:76:3e:21: 32:57:a1:af:28:64:ed:e3:40:af:64:a6:da:9b:cf:86:24:6c: 01:da:db:a5:75:b6:92:6d:8e:d1:79:19:4b:b7:9d:a7:16:72: 16:72:1a:b2:ef:cf:6a:af:67:29:40:59:73:e1:cd:b8:8c:49: cf:70:b3:48:91:75:63:e3:85:89:7b:9b:98:c3:c0:28:6c:ff: d4:97:c5:4e:60:b6:9b:c7:dd:88:47:42:3b:3c:39:2d:5c:dd: 27:52:3b:38:80:8d:88:82:2a:d7:07:4f:65:ba:a7:74:d2:89: e7:48:1f:7e:56:e0:02:40:89:2d:d6:d0:51:ab:d2:4d:ee:0f: f0:fb:cf:81:3b:34:38:56:5f:14:5f:50:65:fc:4d:68:7e:54: f3:84:0b:4b:fe:81:7d:88:6d:b8:17:6f:a6:0f:84:49:7b:96: 6f:83:0d:26:f2:01:a1:63:c6:32:cc:e7:36:1a:0c:39:9c:82: 43:b0:5b:a6:ea:85:6c:f8:04:d7:58:5f:b6:2d:74:35:ed:b6: a0:77:9a:b9:b4:45:9a:b7:11:18:ac:eb:ea:95:46:2d:00:82: 6b:f4:ac:08:a9:26:8f:24:c0:06:69:0e:63:ca:54:9d:a1:a1: 05:8f:7a:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoMr742OnNwKB64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MzFiYzM5YjAtM2NkZi00NmE5LTk4NjAtOTQ5YmVlM2MxYmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1T3LQRoGgKp/eagmBhJI4xkF0Uz1FZUPArz QuKES4KkXO/kWtckMTMJ4cNCbPecnz5BRLVxELXq9Y5p7y31l5nV1kmsHvjLJKJ6 2veZN5bxVjDX9HT/MqAs4neV6MH9gHNAxbaVCPz4c1LQNmiJeo0OfBI+x3wm7uwD wbE4lawR8cN1QTHO/YaTo++Fy2Yne7WVRyUGEkAMNtDv6tom/XlSZTed7+4bfX4D Q3fFG2G4ay/0MA6FnWQxt9pUi+a1/iY+AxYk9EC/yjGKysu3l+14bvLU0gg0y/8e vUGi7BCP01jn+rkYglJRtrCNkKGIoGrhzbjnUB6ZGtdXhTraLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMsTUKMUHYmNNKYdoC6Xoetp7O1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWVjMjdiNjQtYjk0Ni0z MGEyLWE4MmYtN2M1MzZhZjI4ZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRSgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZYf2aEBgOkOfxqLAch53Y+ITJXoa8oZO3jQK9kptqbz4YkbAHa26V1 tpJtjtF5GUu3nacWchZyGrLvz2qvZylAWXPhzbiMSc9ws0iRdWPjhYl7m5jDwChs /9SXxU5gtpvH3YhHQjs8OS1c3SdSOziAjYiCKtcHT2W6p3TSiedIH35W4AJAiS3W 0FGr0k3uD/D7z4E7NDhWXxRfUGX8TWh+VPOEC0v+gX2IbbgXb6YPhEl7lm+DDSby AaFjxjLM5zYaDDmcgkOwW6bqhWz4BNdYX7YtdDXttqB3mrm0RZq3ERis6+qVRi0A gmv0rAipJo8kwAZpDmPKVJ2hoQWPekU= -----END CERTIFICATE-----Generated at Mon Aug 4 16:14:37 2025 by rpki-client