$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32c9f427-a3e0-378d-8608-0451c0373bca.roa File: 32c9f427-a3e0-378d-8608-0451c0373bca.roa (raw, json) Hash identifier: 34gWfBsHqbgmQX/aRbmMVzCN5rKcwexDTYe6IkQ83yQ= Subject key identifier: EE:2D:1D:12:DA:14:48:41:05:16:37:CB:2E:CF:A4:4C:65:2C:63:75 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0F6C5F3D17674829044D0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32c9f427-a3e0-378d-8608-0451c0373bca.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 64.69.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:f6:c5:f3:d1:76:74:82:90:44:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=151b63f2-092b-454a-ab80-6abfe7e421e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9e:64:64:4f:08:24:8f:58:23:cb:77:a5:9a: b4:01:77:9a:09:b8:cc:9d:cc:66:70:3e:ea:eb:8b: 29:61:52:a4:e0:c0:fb:d8:66:89:a8:ab:9b:93:aa: 93:1d:3a:88:84:6c:c2:e5:15:56:36:d0:d9:31:1f: f2:37:cf:2a:ce:3b:80:bf:d8:2e:82:f7:5c:a4:4d: 88:ff:e9:07:f7:a3:53:1b:fb:05:28:c3:30:b5:07: 41:47:24:d2:1d:24:1e:fc:05:79:35:a6:38:40:18: cc:af:55:34:ef:f9:cf:eb:c6:9f:21:7f:d3:19:23: 70:dc:48:b5:73:39:fb:81:ba:93:b2:f6:05:f2:f3: 6d:82:a6:30:d6:ce:c8:ba:f7:d6:66:49:cb:ab:f5: 61:a9:35:23:bc:ec:3c:cb:a3:28:6a:5d:1c:5e:6a: c2:76:e6:e5:54:23:31:25:60:f7:58:f0:a3:f4:ca: df:2f:ad:7f:1b:bc:ef:f8:c9:9a:78:61:df:a9:7b: ae:88:56:d7:ab:6d:92:bc:a0:b4:71:b8:f3:23:49: 11:f3:19:03:cf:20:75:76:ae:e1:71:05:8d:39:cb: 3e:49:ef:c2:65:fa:68:cb:0d:4b:63:59:94:6d:a7: 0b:6f:11:7d:0d:15:31:f8:fd:8a:b4:71:84:37:78: 2a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2D:1D:12:DA:14:48:41:05:16:37:CB:2E:CF:A4:4C:65:2C:63:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32c9f427-a3e0-378d-8608-0451c0373bca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.69.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:75:e9:fd:cf:02:47:52:6f:99:56:54:9b:f3:37:41:4a:d7: de:52:9c:75:50:fb:3e:32:b7:dc:37:6d:e1:f9:90:58:9e:40: fe:9b:28:ae:e2:4b:6f:44:6e:1c:d0:80:6a:52:0c:07:93:6e: 96:73:c8:6f:e3:20:b4:47:9c:86:1e:e3:2e:e1:16:39:9f:dc: c9:13:bf:1f:56:a2:b5:3f:74:41:20:e9:3b:06:a5:96:df:71: 9c:39:e4:93:a4:f6:6e:c0:35:06:b4:ac:98:8a:95:9e:93:29: de:7b:62:2f:c5:d5:44:44:e4:a5:ad:14:08:2f:3e:95:d9:82: 7c:4d:d4:4f:7e:c9:85:ff:9f:46:8e:65:9c:a7:07:4f:62:67: 85:61:d9:6b:a5:07:70:86:3a:28:38:0a:d4:40:4e:54:9c:5b: 3d:5d:90:1c:c7:3a:25:43:e3:1a:1f:5e:df:39:4d:6a:8a:4c: 72:fa:cb:8f:8e:e5:8b:00:af:3d:82:ef:5f:92:77:3a:4d:72: cd:e0:26:39:b2:4b:d3:e5:d8:fa:3a:b4:41:73:b0:b2:de:76: 74:06:49:ad:a7:17:4e:61:34:b7:68:e9:65:ab:77:4b:fd:d6: 3c:8e:c5:b9:24:5a:b5:14:84:33:6a:25:9e:09:de:62:11:3e: 60:10:95:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoPbF89F2dIKQRNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MTUxYjYzZjItMDkyYi00NTRhLWFiODAtNmFiZmU3ZTQyMWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx55kZE8IJI9YI8t3pZq0AXeaCbjMncxmcD7q 64spYVKk4MD72GaJqKubk6qTHTqIhGzC5RVWNtDZMR/yN88qzjuAv9gugvdcpE2I /+kH96NTG/sFKMMwtQdBRyTSHSQe/AV5NaY4QBjMr1U07/nP68afIX/TGSNw3Ei1 czn7gbqTsvYF8vNtgqYw1s7IuvfWZknLq/VhqTUjvOw8y6Moal0cXmrCdublVCMx JWD3WPCj9MrfL61/G7zv+MmaeGHfqXuuiFbXq22SvKC0cbjzI0kR8xkDzyB1dq7h cQWNOcs+Se/CZfpoyw1LY1mUbacLbxF9DRUx+P2KtHGEN3gq9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4tHRLaFEhBBRY3yy7PpExlLGN1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzJjOWY0MjctYTNlMC0z NzhkLTg2MDgtMDQ1MWMwMzczYmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQEVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJd16f3PAkdSb5lWVJvzN0FK195SnHVQ+z4yt9w3beH5kFieQP6bKK7i S29EbhzQgGpSDAeTbpZzyG/jILRHnIYe4y7hFjmf3MkTvx9WorU/dEEg6TsGpZbf cZw55JOk9m7ANQa0rJiKlZ6TKd57Yi/F1URE5KWtFAgvPpXZgnxN1E9+yYX/n0aO ZZynB09iZ4Vh2WulB3CGOig4CtRATlScWz1dkBzHOiVD4xofXt85TWqKTHL6y4+O 5YsArz2C71+SdzpNcs3gJjmyS9Pl2Po6tEFzsLLednQGSa2nF05hNLdo6WWrd0v9 1jyOxbkkWrUUhDNqJZ4J3mIRPmAQlSU= -----END CERTIFICATE-----Generated at Wed Aug 6 14:18:58 2025 by rpki-client