$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/57c1c6e7-8a00-3d9c-a4e7-1e40ef76c181.roa File: 57c1c6e7-8a00-3d9c-a4e7-1e40ef76c181.roa (raw, json) Hash identifier: toiLh4AP6tkoewfaiVnU88mnXEGXv6T0MYk2xVRNlCw= Subject key identifier: 73:50:7B:22:12:3C:80:C7:69:13:89:42:A4:FE:4B:0A:81:39:92:61 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0C9891852051CF7DF6A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/57c1c6e7-8a00-3d9c-a4e7-1e40ef76c181.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 66.29.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:c9:89:18:52:05:1c:f7:df:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=37ce5615-e770-452c-b583-96cd791e5c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4e:f9:04:ce:4d:83:3f:14:5b:b8:c6:18:3c: 35:fe:8f:17:fd:b1:b8:ac:4f:33:3d:86:40:b0:27: 02:eb:e6:a6:9d:a3:67:6e:17:ed:b0:b8:3d:0a:af: f2:3b:71:a9:3b:c4:55:86:40:7b:e5:1b:a6:75:6f: ae:1c:39:0d:a9:38:9d:83:ea:67:2f:86:ee:24:55: 53:a1:5a:c9:f4:cb:05:34:ec:8d:47:05:16:38:77: e8:cd:c8:32:32:6d:ea:3b:0e:ef:bb:79:5e:69:e3: 9f:24:fe:f5:77:5a:90:a1:90:2d:b4:29:e7:55:85: 2f:7e:48:5b:f5:ce:0d:0e:3c:70:bc:55:e0:fe:fd: f4:45:e0:8c:4e:ed:5d:a8:75:b7:78:5e:4b:38:53: 7f:ac:55:64:1f:b5:61:75:8a:9d:69:88:fe:e4:aa: 01:04:40:02:d1:4a:d3:ea:e6:bb:db:60:85:06:ec: 5c:b1:4e:14:0f:3a:9c:8f:73:bf:95:c0:82:fa:1c: 24:f1:77:44:83:f4:9a:b5:e3:38:e9:ce:2d:a1:a5: 69:2f:0b:a7:73:04:6d:e5:00:f8:bd:01:07:45:f4: 35:ca:49:68:d2:81:58:9c:84:3d:73:cf:9c:61:0e: 3b:0f:c7:ac:a3:e3:4c:53:83:ca:ea:53:72:51:60: e5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:50:7B:22:12:3C:80:C7:69:13:89:42:A4:FE:4B:0A:81:39:92:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/57c1c6e7-8a00-3d9c-a4e7-1e40ef76c181.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.29.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:bb:ff:52:fc:ea:87:4e:56:03:cb:15:3c:90:40:60:74:1a: 66:1e:f6:4d:b8:db:c0:37:51:0a:db:12:c6:07:30:fc:ff:87: 87:d1:a8:fd:bd:91:de:ef:a5:9e:46:e8:f3:7c:a5:3a:10:8c: 99:c0:96:24:90:2e:52:60:0c:6d:08:87:ea:a8:49:de:f2:0a: 90:7e:eb:08:84:5a:85:b4:c7:8b:cb:03:46:aa:f7:0d:dc:45: 88:25:ae:25:87:d9:7c:6c:d9:16:72:d7:74:67:df:29:9f:80: b0:8b:c0:7c:07:4f:ed:70:05:ec:af:45:9a:c7:8b:e9:b8:df: 61:6d:8d:6e:29:46:63:9d:cb:e7:7d:a4:ee:ae:60:e4:25:9b: 44:dc:33:0b:bd:9d:d5:32:c3:9a:57:c7:8a:3e:c8:0a:be:5b: f8:0f:a7:78:be:f5:2b:86:29:2b:a4:60:bc:f1:13:77:ad:8f: 9a:c3:ef:78:e9:77:21:28:ae:4d:9c:43:dd:d5:e8:fd:5a:07: 0b:30:6b:11:0f:84:81:d8:36:8d:7e:7d:09:72:c0:0a:4d:66: 04:f2:56:36:ce:a8:1e:fa:f2:fa:54:27:ae:98:56:7f:8c:a9: ea:d8:eb:fd:17:da:09:57:b3:ff:de:f2:ce:74:83:dd:53:ac: b2:9e:4e:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoMmJGFIFHPffaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MzdjZTU2MTUtZTc3MC00NTJjLWI1ODMtOTZjZDc5MWU1YzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE75BM5Ngz8UW7jGGDw1/o8X/bG4rE8zPYZA sCcC6+amnaNnbhftsLg9Cq/yO3GpO8RVhkB75RumdW+uHDkNqTidg+pnL4buJFVT oVrJ9MsFNOyNRwUWOHfozcgyMm3qOw7vu3leaeOfJP71d1qQoZAttCnnVYUvfkhb 9c4NDjxwvFXg/v30ReCMTu1dqHW3eF5LOFN/rFVkH7VhdYqdaYj+5KoBBEAC0UrT 6ua722CFBuxcsU4UDzqcj3O/lcCC+hwk8XdEg/SateM46c4toaVpLwuncwRt5QD4 vQEHRfQ1yklo0oFYnIQ9c8+cYQ47D8eso+NMU4PK6lNyUWDlEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNQeyISPIDHaROJQqT+SwqBOZJhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTdjMWM2ZTctOGEwMC0z ZDljLWE0ZTctMWU0MGVmNzZjMTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQh3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADW7/1L86odOVgPLFTyQQGB0GmYe9k2428A3UQrbEsYHMPz/h4fRqP29 kd7vpZ5G6PN8pToQjJnAliSQLlJgDG0Ih+qoSd7yCpB+6wiEWoW0x4vLA0aq9w3c RYglriWH2Xxs2RZy13Rn3ymfgLCLwHwHT+1wBeyvRZrHi+m432FtjW4pRmOdy+d9 pO6uYOQlm0TcMwu9ndUyw5pXx4o+yAq+W/gPp3i+9SuGKSukYLzxE3etj5rD73jp dyEork2cQ93V6P1aBwswaxEPhIHYNo1+fQlywApNZgTyVjbOqB768vpUJ66YVn+M qerY6/0X2glXs//e8s50g91TrLKeTlc= -----END CERTIFICATE-----Generated at Mon Aug 4 18:37:19 2025 by rpki-client