$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4210d371-03b7-36cf-8e48-2cb75c5ad6a2.roa File: 4210d371-03b7-36cf-8e48-2cb75c5ad6a2.roa (raw, json) Hash identifier: N0Mpx+fDxvPYCAF1ueD9NHr+sF+w6vucZjuyGN8FdHk= Subject key identifier: 89:B8:CD:51:F3:92:BC:D5:C4:22:88:08:8D:5D:A4:75:EC:D1:70:77 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0CAD9B2F9BA2801AE6D60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4210d371-03b7-36cf-8e48-2cb75c5ad6a2.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 69.30.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ca:d9:b2:f9:ba:28:01:ae:6d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=8bc44e8d-a815-4e13-84d4-f2c1d76bffd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2b:f4:94:b2:4b:b9:4f:31:fe:a9:00:b7:57: 60:dc:d5:ed:41:1c:84:d4:b9:16:c8:95:4f:00:8d: be:87:de:fa:15:7b:c2:d1:85:80:d8:ee:fc:dc:7b: 89:93:ca:1a:35:73:f5:0e:90:15:59:ba:c4:77:ff: 2f:30:b9:a6:05:43:78:52:21:7b:d0:76:88:14:96: c0:70:9f:3d:d4:b7:42:2f:c5:af:86:13:47:88:d5: a0:9b:97:e3:19:27:70:dd:32:25:eb:69:11:c3:78: 83:e4:cb:9f:5f:e3:eb:8a:b9:9c:65:93:b7:c0:3a: 28:ec:52:46:cc:18:c1:2f:24:f2:29:2d:2a:ed:07: f9:06:92:9a:02:4a:33:a2:90:40:92:16:62:4a:6f: d5:de:ac:66:fd:ac:39:69:94:97:9e:0a:d9:91:cf: eb:1a:50:0b:d2:79:09:6b:40:4f:96:fe:ed:ae:1b: 78:17:91:f1:02:28:a8:42:78:8f:df:cc:ca:56:9c: 43:d6:76:0a:7f:97:f5:21:f3:d6:0c:b4:c0:f6:29: 5d:f0:73:f5:25:fd:13:a1:16:8f:72:0b:40:05:57: 33:fa:95:c1:14:64:09:57:7c:e7:fa:08:b5:0f:f3: 92:76:ff:d7:85:eb:13:2d:64:3e:3d:3d:96:7a:fc: 38:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B8:CD:51:F3:92:BC:D5:C4:22:88:08:8D:5D:A4:75:EC:D1:70:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4210d371-03b7-36cf-8e48-2cb75c5ad6a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.30.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:e4:e2:ee:a4:16:80:92:1e:11:07:55:d6:9c:d7:90:76:33: 53:bd:38:24:b6:0d:99:57:5b:02:f3:29:c8:a1:ca:f2:5a:8e: fe:a2:4a:f6:e9:48:a5:52:7c:4e:29:0d:09:5a:7c:dc:76:ed: db:72:b6:48:8b:4c:7a:51:e7:eb:82:b7:3c:20:47:e4:2a:08: 8c:88:59:e4:05:98:29:9f:02:0f:c4:42:d2:20:64:29:ce:66: fb:2b:f1:ca:ab:75:99:15:61:7b:00:ef:00:99:e2:18:65:82: ce:27:20:95:d1:f3:cb:4d:56:5a:39:55:85:36:0b:50:d9:bc: 22:a5:1c:f3:19:d1:67:74:fc:b0:5a:09:15:e6:6b:e8:92:ef: 12:ef:6e:02:0f:6e:d7:f6:31:08:13:ed:80:68:1c:10:ca:2f: 66:14:e0:c2:2e:19:44:67:93:48:ed:47:2f:4c:f1:88:e9:9a: a7:02:ae:6b:ed:d3:97:0e:2d:d9:9a:05:45:fa:d8:bb:15:e2: 3b:13:a5:c9:ec:c4:28:71:21:66:2d:9b:5a:ca:14:e9:0e:72: 11:82:99:df:31:ce:48:14:09:e4:a1:26:18:ac:66:88:1a:7b: f4:cd:25:86:47:88:04:fa:f9:97:79:57:a4:b5:6d:ce:0f:4d: a6:1f:eb:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoMrZsvm6KAGubWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk OGJjNDRlOGQtYTgxNS00ZTEzLTg0ZDQtZjJjMWQ3NmJmZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCv0lLJLuU8x/qkAt1dg3NXtQRyE1LkWyJVP AI2+h976FXvC0YWA2O783HuJk8oaNXP1DpAVWbrEd/8vMLmmBUN4UiF70HaIFJbA cJ891LdCL8WvhhNHiNWgm5fjGSdw3TIl62kRw3iD5MufX+PrirmcZZO3wDoo7FJG zBjBLyTyKS0q7Qf5BpKaAkozopBAkhZiSm/V3qxm/aw5aZSXngrZkc/rGlAL0nkJ a0BPlv7trht4F5HxAiioQniP38zKVpxD1nYKf5f1IfPWDLTA9ild8HP1Jf0ToRaP cgtABVcz+pXBFGQJV3zn+gi1D/OSdv/XhesTLWQ+PT2Wevw4uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIm4zVHzkrzVxCKICI1dpHXs0XB3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDIxMGQzNzEtMDNiNy0z NmNmLThlNDgtMmNiNzVjNWFkNmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRR6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7k4u6kFoCSHhEHVdac15B2M1O9OCS2DZlXWwLzKcihyvJajv6iSvbp SKVSfE4pDQlafNx27dtytkiLTHpR5+uCtzwgR+QqCIyIWeQFmCmfAg/EQtIgZCnO Zvsr8cqrdZkVYXsA7wCZ4hhlgs4nIJXR88tNVlo5VYU2C1DZvCKlHPMZ0Wd0/LBa CRXma+iS7xLvbgIPbtf2MQgT7YBoHBDKL2YU4MIuGURnk0jtRy9M8YjpmqcCrmvt 05cOLdmaBUX62LsV4jsTpcnsxChxIWYtm1rKFOkOchGCmd8xzkgUCeShJhisZoga e/TNJYZHiAT6+Zd5V6S1bc4PTaYf65E= -----END CERTIFICATE-----Generated at Wed Aug 6 05:16:58 2025 by rpki-client