$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3e7810e2-19b8-34f9-8ff4-18ffabae701b.roa File: 3e7810e2-19b8-34f9-8ff4-18ffabae701b.roa (raw, json) Hash identifier: hUq0VLlO2T817rGy1HMlk3/17Tr3iOn4mCd71ooRUjU= Subject key identifier: C4:32:1D:E0:FA:0F:87:86:7B:97:47:FC:3E:BB:FE:28:C4:F1:AD:42 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB3861F9A6B34B4D0D9745680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3e7810e2-19b8-34f9-8ff4-18ffabae701b.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 7029 IP address blocks: 71.7.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:1f:9a:6b:34:b4:d0:d9:74:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=c64c22a2-b222-4829-ad90-3d8e4a721906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ee:9c:94:7b:66:6c:8d:02:5f:34:68:03:a2: 85:b1:15:7b:1b:ec:b4:f6:79:78:1c:4c:4b:d2:eb: 32:76:ca:d4:48:4c:9e:6a:e9:7d:c9:e7:0f:97:b5: bd:dd:71:5c:98:f8:71:15:56:67:b1:4d:60:e5:aa: 08:cd:0d:a3:64:82:0c:7f:0e:d9:cf:bb:38:24:d2: 26:45:bc:80:40:ee:9c:10:1f:a5:14:40:00:7b:0d: d1:6e:0f:8c:c4:8a:ca:6d:a4:c7:f1:a2:12:75:ab: 70:99:b4:1e:c9:73:7a:f9:fc:aa:34:31:2c:e8:a1: 0c:08:82:0e:b0:89:fe:2a:5f:1e:13:a5:f8:63:bd: 6d:62:2c:b0:73:4c:08:fb:f6:9f:5b:03:ae:f4:e7: 91:ce:35:55:18:d4:84:d7:16:29:a5:fb:32:2f:5c: 4a:a8:00:81:23:a5:20:f2:0b:60:07:73:73:2e:5e: 36:92:0b:14:4a:c9:5e:3a:98:c6:f9:d2:6d:eb:79: 1b:87:72:56:fd:db:5d:27:fc:72:8e:83:70:76:69: 55:09:f0:b9:22:68:ce:2c:62:44:b5:8a:d4:75:8a: b8:7f:07:11:b7:7c:0b:8d:de:ef:cd:a7:cb:dc:c1: 81:06:74:5d:91:b5:04:ea:a3:9d:46:f4:2b:01:0c: 35:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:32:1D:E0:FA:0F:87:86:7B:97:47:FC:3E:BB:FE:28:C4:F1:AD:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3e7810e2-19b8-34f9-8ff4-18ffabae701b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.7.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:88:e0:1b:ad:10:7f:a3:8c:17:47:b0:23:87:7a:d9:d4:cd: 04:b9:36:ab:3d:0e:0f:9b:a5:22:37:3d:51:d8:37:09:93:34: 96:48:63:16:a8:ea:d1:c8:64:ba:d9:b0:b4:d9:23:b1:51:71: 18:e6:d9:7f:5f:0e:39:4d:da:18:93:7b:7c:55:6a:5d:d7:0c: 60:e3:22:61:d1:51:81:45:62:30:00:ad:82:14:f2:40:71:98: 58:ca:68:2c:d8:86:50:52:ea:12:85:ae:bc:d6:f0:9a:1d:2f: 52:52:32:f4:34:7b:59:1e:95:4d:00:6c:98:8a:d9:72:76:d5: 61:52:14:c4:ad:51:6a:82:be:40:ce:6a:c1:8d:7c:1b:b3:c4: 23:01:bc:b7:8f:8a:07:54:07:b4:6d:07:48:56:97:5f:e5:6a: 65:35:f8:20:5f:1f:ce:2a:de:1b:0e:34:58:20:95:14:d5:4e: f7:b2:37:31:3e:7b:4c:9a:c7:7a:1d:2e:65:17:b6:91:a9:bc: 26:1e:a0:4e:cd:2a:e5:d0:a7:d3:98:0c:ae:6b:ff:08:05:05: ed:ce:f5:cf:4f:b9:6a:9e:8e:a2:3b:3d:18:2c:46:69:46:d0: 05:1d:09:1f:16:00:4c:d5:74:3a:96:43:8b:d3:64:6f:a0:cb: d6:ef:29:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhh+aazS00Nl0VoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk YzY0YzIyYTItYjIyMi00ODI5LWFkOTAtM2Q4ZTRhNzIxOTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+6clHtmbI0CXzRoA6KFsRV7G+y09nl4HExL 0usydsrUSEyeaul9yecPl7W93XFcmPhxFVZnsU1g5aoIzQ2jZIIMfw7Zz7s4JNIm RbyAQO6cEB+lFEAAew3Rbg+MxIrKbaTH8aISdatwmbQeyXN6+fyqNDEs6KEMCIIO sIn+Kl8eE6X4Y71tYiywc0wI+/afWwOu9OeRzjVVGNSE1xYppfsyL1xKqACBI6Ug 8gtgB3NzLl42kgsUSsleOpjG+dJt63kbh3JW/dtdJ/xyjoNwdmlVCfC5ImjOLGJE tYrUdYq4fwcRt3wLjd7vzafL3MGBBnRdkbUE6qOdRvQrAQw13QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQyHeD6D4eGe5dH/D67/ijE8a1CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2U3ODEwZTItMTliOC0z NGY5LThmZjQtMThmZmFiYWU3MDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERwdQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyI4ButEH+jjBdHsCOHetnUzQS5Nqs9Dg+bpSI3PVHYNwmTNJZIYxao 6tHIZLrZsLTZI7FRcRjm2X9fDjlN2hiTe3xVal3XDGDjImHRUYFFYjAArYIU8kBx mFjKaCzYhlBS6hKFrrzW8JodL1JSMvQ0e1kelU0AbJiK2XJ21WFSFMStUWqCvkDO asGNfBuzxCMBvLePigdUB7RtB0hWl1/lamU1+CBfH84q3hsONFgglRTVTveyNzE+ e0yax3odLmUXtpGpvCYeoE7NKuXQp9OYDK5r/wgFBe3O9c9PuWqejqI7PRgsRmlG 0AUdCR8WAEzVdDqWQ4vTZG+gy9bvKe8= -----END CERTIFICATE-----Generated at Wed Aug 6 05:54:59 2025 by rpki-client