$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f201d1e-868d-371e-83c4-199549900b92.roa File: 2f201d1e-868d-371e-83c4-199549900b92.roa (raw, json) Hash identifier: 3w9Hv937IP3VGZSualAnYaA9DvtX5/lHM45ktXavGL8= Subject key identifier: 3C:9F:D4:2D:E1:CF:62:3D:9A:8A:BD:E9:78:3D:AA:DB:79:BA:CC:84 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0CB0CA803D892E167D340 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f201d1e-868d-371e-83c4-199549900b92.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 69.40.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:cb:0c:a8:03:d8:92:e1:67:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=0ea7f226-64cc-4510-93ce-3d431bfa4eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:30:72:5e:af:5a:ec:ca:07:61:63:a9:13:90: c4:43:b9:31:b2:6b:6b:23:90:07:da:15:e7:ab:cd: 39:76:98:3b:42:32:e7:60:7b:4d:fc:d2:69:63:70: 69:f0:47:c9:ed:9d:2f:48:cb:c8:0d:48:9c:97:76: f1:2f:fa:ab:b5:8d:64:08:bd:1e:30:c2:d9:d3:5b: 18:17:b7:3a:57:92:cf:b3:d3:cf:fc:3b:0f:a7:20: 46:5d:78:3f:83:97:92:eb:0b:87:ec:c9:8c:89:01: 75:5c:9d:30:a7:f9:b7:f6:3f:19:bf:89:bf:e9:f8: 34:1b:d3:65:0f:ae:ac:89:fe:01:6e:19:18:ff:f3: f5:92:5e:00:74:de:5c:a3:aa:3b:ca:2d:62:5f:74: 80:4e:bc:7e:70:12:2c:f2:cf:5f:63:e0:cc:d5:3f: 74:1b:a4:95:39:4d:ae:eb:ef:fb:1b:1c:74:53:c4: 6f:bd:76:4c:c2:a9:9b:4b:61:7e:22:6b:79:79:81: ac:38:25:02:f4:7e:f2:2e:20:48:37:38:58:cf:03: 18:84:11:9d:24:c8:f8:c7:a0:c0:99:b8:09:2e:3c: 1b:ff:4d:30:a7:b4:67:be:12:e7:1a:b0:99:19:14: 36:05:5f:b9:62:ec:79:a8:1a:a0:41:be:71:99:81: 22:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9F:D4:2D:E1:CF:62:3D:9A:8A:BD:E9:78:3D:AA:DB:79:BA:CC:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f201d1e-868d-371e-83c4-199549900b92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:50:d6:10:37:fb:90:54:12:f3:99:1f:3a:08:13:dc:06:f1: 78:6d:23:15:77:49:bc:6d:a3:d2:47:b2:90:e5:a3:40:af:40: cb:b6:7f:f1:90:05:b2:5c:b0:b8:0a:9a:b2:a7:be:03:d4:77: 1f:12:e5:9f:25:93:65:9c:45:12:44:ed:6c:c1:08:f2:93:0c: f0:88:fb:23:25:7d:66:92:71:dd:3d:ff:f6:06:1a:12:94:46: fd:b6:a8:ab:46:09:52:9e:c9:06:a7:0c:bd:fe:b8:7b:61:f9: ce:85:ca:c8:3d:8f:5e:28:e7:0a:85:89:2c:98:aa:79:4b:77: 4d:13:93:9a:6c:d1:93:70:62:20:ea:d0:33:b7:b3:a6:c3:89: e0:bb:51:9d:bf:87:6c:ee:0b:a7:75:ee:d7:24:fd:bf:ee:82: b5:e1:d9:fa:f5:86:76:e9:79:6f:7e:b4:84:a4:77:1b:e9:a4: 7a:c2:98:60:f6:a0:2f:6e:11:cc:d3:6e:a3:e0:1b:85:30:00: 2e:64:f3:4c:6e:f1:5d:d3:d4:ea:7a:b4:6f:f9:10:74:92:19: 1e:91:18:93:c8:f4:18:1c:04:37:cc:c4:89:82:1a:9f:08:31: 38:34:e5:fd:22:7e:ae:4e:6d:e5:f2:ab:6b:c1:28:41:7c:8c: 67:6c:cd:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoMsMqAPYkuFn00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MGVhN2YyMjYtNjRjYy00NTEwLTkzY2UtM2Q0MzFiZmE0ZWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjByXq9a7MoHYWOpE5DEQ7kxsmtrI5AH2hXn q805dpg7QjLnYHtN/NJpY3Bp8EfJ7Z0vSMvIDUicl3bxL/qrtY1kCL0eMMLZ01sY F7c6V5LPs9PP/DsPpyBGXXg/g5eS6wuH7MmMiQF1XJ0wp/m39j8Zv4m/6fg0G9Nl D66sif4BbhkY//P1kl4AdN5co6o7yi1iX3SATrx+cBIs8s9fY+DM1T90G6SVOU2u 6+/7Gxx0U8RvvXZMwqmbS2F+Imt5eYGsOCUC9H7yLiBINzhYzwMYhBGdJMj4x6DA mbgJLjwb/00wp7RnvhLnGrCZGRQ2BV+5Yux5qBqgQb5xmYEiYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyf1C3hz2I9moq96Xg9qtt5usyEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmYyMDFkMWUtODY4ZC0z NzFlLTgzYzQtMTk5NTQ5OTAwYjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRSiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFQ1hA3+5BUEvOZHzoIE9wG8XhtIxV3Sbxto9JHspDlo0CvQMu2f/GQ BbJcsLgKmrKnvgPUdx8S5Z8lk2WcRRJE7WzBCPKTDPCI+yMlfWaScd09//YGGhKU Rv22qKtGCVKeyQanDL3+uHth+c6Fysg9j14o5wqFiSyYqnlLd00Tk5ps0ZNwYiDq 0DO3s6bDieC7UZ2/h2zuC6d17tck/b/ugrXh2fr1hnbpeW9+tISkdxvppHrCmGD2 oC9uEczTbqPgG4UwAC5k80xu8V3T1Op6tG/5EHSSGR6RGJPI9BgcBDfMxImCGp8I MTg05f0ifq5ObeXyq2vBKEF8jGdszdM= -----END CERTIFICATE-----Generated at Wed Aug 6 07:51:34 2025 by rpki-client