$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/218756c3-af8c-38b1-b072-6e0e113f26f2.roa File: 218756c3-af8c-38b1-b072-6e0e113f26f2.roa (raw, json) Hash identifier: l+B8YyHJPGFreax0GqH8//03/gmIVQo42GUfQ/vAhG8= Subject key identifier: 1F:8A:66:92:4E:A4:C1:F5:1D:EA:AF:4C:0F:E3:4F:66:CF:B7:0D:2A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0CFB65DD53F19FCF59C40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/218756c3-af8c-38b1-b072-6e0e113f26f2.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 204.32.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:cf:b6:5d:d5:3f:19:fc:f5:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=464081e3-dba4-4795-b007-f17897f9d02a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ba:2e:d6:05:0d:05:65:06:66:bf:e4:81:73: 95:19:2c:2e:f0:8b:16:b2:c9:b4:1a:f5:18:c2:a3: fa:37:c2:cd:83:7f:84:66:da:f0:00:4b:2e:f0:55: 93:44:1f:90:c6:fd:dd:52:4f:c4:c1:c7:a5:6d:c6: cf:36:8a:82:0f:cf:4c:ef:7d:d2:c2:ad:75:11:cc: 7c:1c:41:94:4c:5b:4d:b7:91:49:85:0f:fa:d9:50: ef:3a:1f:90:6b:98:13:c3:bc:fd:9c:51:4b:59:9c: 2c:93:26:ed:a2:ba:16:52:a1:e9:10:20:4c:aa:b2: 2b:de:a8:d9:20:d0:4b:49:2e:9e:bb:89:f1:eb:c8: 6a:98:29:c3:e8:8d:fd:55:8f:e7:a6:eb:af:45:1f: 5e:ac:22:d9:cc:2c:7d:b4:03:6a:32:4e:46:6a:74: ac:c9:65:db:c6:ba:73:ea:fb:98:c6:dd:1f:52:66: 75:2e:bc:a2:06:d3:ba:1d:20:19:2c:55:53:1d:25: b9:a8:e2:25:36:2b:2c:22:21:13:82:05:1c:90:be: 71:f8:64:cf:0e:10:58:b1:64:81:19:82:94:74:ad: f4:75:17:08:de:5b:d9:8d:74:d7:6a:f2:06:a9:7c: 22:de:1b:a8:ea:5d:9f:c0:14:c7:fd:3a:9f:b4:44: 69:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8A:66:92:4E:A4:C1:F5:1D:EA:AF:4C:0F:E3:4F:66:CF:B7:0D:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/218756c3-af8c-38b1-b072-6e0e113f26f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 204.32.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:14:be:dc:48:7f:1e:4b:59:18:ba:ea:c9:9d:8b:5c:20:6e: 7a:70:ee:bf:45:26:57:7e:ad:4f:75:70:4d:7a:3c:84:60:9a: 28:d2:72:61:35:6a:66:09:20:25:72:65:3f:62:cc:b7:b7:97: 41:a8:84:3a:82:3b:0d:e9:be:09:92:7f:1b:d2:43:b4:9e:ca: b2:cd:d6:6f:1a:60:63:b3:5b:d1:38:f2:68:5f:9b:d1:a3:24: 5d:99:e9:f8:fe:cb:90:9d:e7:29:c6:cd:ec:d3:f4:50:45:a1: b8:fb:25:f1:0f:1b:7f:3d:59:0f:11:cf:fc:48:cc:3c:8a:05: c3:fb:f6:ca:ad:df:c3:1b:d8:82:1a:9d:96:d4:4b:8e:45:ea: 89:3c:a9:a1:18:ff:6a:f9:bb:84:e1:e9:9c:49:2b:0e:bd:eb: 4b:3a:6b:37:81:9b:8a:66:a4:10:38:92:05:df:15:7e:4a:e2: 9e:be:3e:e7:40:b9:33:2c:68:45:d4:76:82:5b:a1:8b:4f:49: 3a:ab:5a:01:64:62:24:d3:34:28:67:eb:17:22:f6:f1:55:c0: a3:3d:ab:78:f0:44:7d:d0:55:0e:75:8a:37:2d:a1:28:2f:41: f1:41:23:de:bd:59:69:ed:43:9b:3a:2b:8e:4f:b4:73:16:48: c1:22:e5:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoM+2XdU/Gfz1nEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NDY0MDgxZTMtZGJhNC00Nzk1LWIwMDctZjE3ODk3ZjlkMDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7ou1gUNBWUGZr/kgXOVGSwu8IsWssm0GvUY wqP6N8LNg3+EZtrwAEsu8FWTRB+Qxv3dUk/EwcelbcbPNoqCD89M733Swq11Ecx8 HEGUTFtNt5FJhQ/62VDvOh+Qa5gTw7z9nFFLWZwskybtoroWUqHpECBMqrIr3qjZ INBLSS6eu4nx68hqmCnD6I39VY/npuuvRR9erCLZzCx9tANqMk5GanSsyWXbxrpz 6vuYxt0fUmZ1LryiBtO6HSAZLFVTHSW5qOIlNissIiETggUckL5x+GTPDhBYsWSB GYKUdK30dRcI3lvZjXTXavIGqXwi3huo6l2fwBTH/TqftERpVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+KZpJOpMH1HeqvTA/jT2bPtw0qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjE4NzU2YzMtYWY4Yy0z OGIxLWIwNzItNmUwZTExM2YyNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzCDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgUvtxIfx5LWRi66smdi1wgbnpw7r9FJld+rU91cE16PIRgmijScmE1 amYJICVyZT9izLe3l0GohDqCOw3pvgmSfxvSQ7SeyrLN1m8aYGOzW9E48mhfm9Gj JF2Z6fj+y5Cd5ynGzezT9FBFobj7JfEPG389WQ8Rz/xIzDyKBcP79sqt38Mb2IIa nZbUS45F6ok8qaEY/2r5u4Th6ZxJKw6960s6azeBm4pmpBA4kgXfFX5K4p6+PudA uTMsaEXUdoJboYtPSTqrWgFkYiTTNChn6xci9vFVwKM9q3jwRH3QVQ51ijctoSgv QfFBI969WWntQ5s6K45PtHMWSMEi5So= -----END CERTIFICATE-----Generated at Wed Aug 6 09:42:25 2025 by rpki-client