$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48f10b89-5898-35f6-a8b5-3db508c46210.roa File: 48f10b89-5898-35f6-a8b5-3db508c46210.roa (raw, json) Hash identifier: 8AB1brLmK6dh/oBoyoL9Jliph68WD4cZUELUgq871X0= Subject key identifier: D8:5E:39:E8:A2:38:F0:6C:C2:5E:43:56:F9:BE:D2:53:39:8E:51:DD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0F9B6EDB9062ADB9E1628 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48f10b89-5898-35f6-a8b5-3db508c46210.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 71.7.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:f9:b6:ed:b9:06:2a:db:9e:16:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=f2e71e4a-8291-4671-ac50-ed77fac08e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:94:66:13:36:e5:af:1d:41:70:ee:ce:d3:1d: af:94:c0:c0:ee:cc:02:28:c3:8d:e7:8f:7b:fc:87: a0:d4:8d:c5:d3:5a:fe:31:df:bf:b9:18:a1:cb:ef: f9:46:f6:1c:d9:35:cd:5f:67:b5:a1:a8:3e:62:aa: 6b:9d:85:91:e3:ad:e6:1f:24:34:65:1e:93:ab:6f: 34:dc:da:49:17:dd:db:01:f7:77:fc:36:c0:cb:fe: f9:a0:ae:4b:6b:5f:03:2b:9b:b8:50:0e:d2:40:0c: e3:ad:c4:e4:98:fb:86:20:d8:bc:1e:91:e2:28:c7: 66:b9:ca:35:d4:b7:12:ed:1d:1b:9b:d1:b0:c5:b5: 7d:e3:27:a3:76:19:ac:ae:b8:d9:5f:6b:78:a0:c8: 6c:e0:b2:9f:62:73:e2:4c:23:3f:6d:c1:b4:ac:6c: 5b:8f:94:5f:17:5f:6b:c7:fb:8d:58:f5:b4:41:95: d3:94:55:f6:92:c4:c0:e1:02:1e:f2:5d:d1:7f:46: 4c:55:ec:55:8e:63:f1:1d:97:21:ac:1a:a4:c0:a2: 33:c2:16:3a:6f:55:75:1a:8b:21:0f:6a:48:bb:ec: 12:9a:35:e6:32:f9:6d:8a:2a:e9:26:61:28:ab:7c: 05:a7:2b:45:c8:1e:09:a3:6b:57:91:e0:80:63:26: 00:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5E:39:E8:A2:38:F0:6C:C2:5E:43:56:F9:BE:D2:53:39:8E:51:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48f10b89-5898-35f6-a8b5-3db508c46210.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.7.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:02:0f:71:94:5b:24:fd:a3:1a:d8:16:11:41:16:d9:cd:c9: 65:4c:7b:16:90:a4:32:e3:69:f4:00:a6:5b:cb:20:36:60:1d: fe:c3:3b:06:90:a3:88:91:aa:c5:81:d9:2c:2e:86:e0:d1:f3: 89:af:24:6a:0e:94:a3:d4:d8:04:05:b0:ed:66:36:2a:c1:5b: 09:88:a0:0c:aa:7d:cf:14:d6:17:96:0c:7b:b0:5d:2e:65:5a: 24:67:a5:97:61:aa:74:3d:16:a1:fe:4c:6d:7f:b9:b6:af:5e: f1:2c:42:b9:60:68:0e:58:78:e1:58:a1:d2:a6:90:9c:9a:29: 0f:27:5d:fc:35:b0:8d:a1:2e:bd:df:52:ee:4a:ba:45:2d:d6: cb:f9:dd:15:24:ee:b2:1b:37:f7:7a:51:eb:97:c0:92:8e:7a: 99:c6:a1:b0:53:97:01:12:8c:d3:5a:20:31:7f:b1:db:5f:5b: c6:ca:8a:23:ec:b9:22:e7:1f:e6:22:81:c4:8a:00:13:d6:ec: d2:a1:36:ad:c8:59:f7:e2:4e:e0:31:90:b1:d9:a6:26:88:ab: 88:6f:d3:2a:48:ae:75:b0:aa:d3:f9:a2:b4:07:ef:98:8d:3b: 47:db:68:8c:0d:31:70:50:46:4d:b7:06:10:b0:41:c1:38:f1: b5:14:f9:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoPm27bkGKtueFigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZjJlNzFlNGEtODI5MS00NjcxLWFjNTAtZWQ3N2ZhYzA4ZTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopRmEzblrx1BcO7O0x2vlMDA7swCKMON5497 /Ieg1I3F01r+Md+/uRihy+/5RvYc2TXNX2e1oag+YqprnYWR463mHyQ0ZR6Tq280 3NpJF93bAfd3/DbAy/75oK5La18DK5u4UA7SQAzjrcTkmPuGINi8HpHiKMdmuco1 1LcS7R0bm9GwxbV94yejdhmsrrjZX2t4oMhs4LKfYnPiTCM/bcG0rGxbj5RfF19r x/uNWPW0QZXTlFX2ksTA4QIe8l3Rf0ZMVexVjmPxHZchrBqkwKIzwhY6b1V1Gosh D2pIu+wSmjXmMvltiirpJmEoq3wFpytFyB4Jo2tXkeCAYyYAjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNheOeiiOPBswl5DVvm+0lM5jlHdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDhmMTBiODktNTg5OC0z NWY2LWE4YjUtM2RiNTA4YzQ2MjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRwcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoCD3GUWyT9oxrYFhFBFtnNyWVMexaQpDLjafQAplvLIDZgHf7DOwaQ o4iRqsWB2SwuhuDR84mvJGoOlKPU2AQFsO1mNirBWwmIoAyqfc8U1heWDHuwXS5l WiRnpZdhqnQ9FqH+TG1/ubavXvEsQrlgaA5YeOFYodKmkJyaKQ8nXfw1sI2hLr3f Uu5KukUt1sv53RUk7rIbN/d6UeuXwJKOepnGobBTlwESjNNaIDF/sdtfW8bKiiPs uSLnH+YigcSKABPW7NKhNq3IWffiTuAxkLHZpiaIq4hv0ypIrnWwqtP5orQH75iN O0fbaIwNMXBQRk23BhCwQcE48bUU+RE= -----END CERTIFICATE-----Generated at Thu Aug 7 04:33:12 2025 by rpki-client