$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/584dc552-bf81-3462-998c-fcee1ac19d73.roa File: 584dc552-bf81-3462-998c-fcee1ac19d73.roa (raw, json) Hash identifier: SjeR05HbSDxDww2eLNZESwTpnLZZZugEEc8Nj++U0HQ= Subject key identifier: B4:77:8E:A0:15:F3:32:4D:96:94:AE:B1:88:EE:0B:86:EA:9B:9F:C1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CFAB7B694FEA3AD54AE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/584dc552-bf81-3462-998c-fcee1ac19d73.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 207.7.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:fa:b7:b6:94:fe:a3:ad:54:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=dfbe5f56-047a-4fa4-87e0-877c86277389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6b:e0:f8:0c:18:90:d7:07:38:d2:c5:54:39: fa:7a:30:5b:bb:a8:fa:54:30:6c:8a:c6:a6:46:b9: 59:28:23:39:52:52:18:0a:9e:c4:64:49:38:08:54: e1:ac:4b:9f:c3:63:69:03:5b:32:99:48:b6:94:3b: 3f:68:1e:79:32:ce:aa:d3:20:5a:ec:7e:76:55:2d: 22:ec:50:d5:19:76:d7:56:d9:c0:2a:34:fa:38:92: 55:2b:1c:6f:ca:e6:16:40:ac:51:00:a2:7e:64:98: 93:a4:62:79:88:53:06:09:3e:e5:c1:cc:7f:91:f1: ec:94:d7:33:82:a0:db:19:8f:96:30:49:5b:e4:88: e0:73:c0:d3:64:41:b1:4b:3c:f7:e1:fa:c0:f5:c6: b4:48:24:b4:fc:c2:98:12:b6:ac:43:fb:5c:6b:bd: e0:b4:21:63:48:b9:fd:03:6e:2f:8d:d4:81:9f:58: fb:d5:d7:d8:1a:a0:b2:b0:7c:65:86:35:fd:3c:33: 09:eb:c3:0f:97:2c:11:f9:84:4a:6a:47:68:18:7f: 4f:42:3b:ef:57:7a:e5:87:52:ee:ca:ed:6b:41:6e: 71:cd:b8:34:3a:ad:8a:1a:28:1b:0e:7c:dc:5d:78: da:6f:35:b9:8f:82:6e:75:85:9a:15:59:8e:50:2e: db:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:77:8E:A0:15:F3:32:4D:96:94:AE:B1:88:EE:0B:86:EA:9B:9F:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/584dc552-bf81-3462-998c-fcee1ac19d73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.7.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:e1:f8:8d:75:9b:54:9a:20:8f:b4:0b:6b:e6:65:91:38:e0: a1:6c:f8:5e:5c:e4:77:7d:d7:ce:8b:fd:16:23:64:54:e6:71: a1:59:45:78:3a:dc:32:70:22:84:3e:82:2a:c4:0a:01:1d:c3: 7d:a4:d0:cc:bf:b3:8e:2b:90:6a:6d:85:6c:b5:e0:fd:92:92: 9b:4f:83:bb:fe:a4:75:c6:ef:bb:75:f1:a6:d7:6b:3f:58:a1: fa:8e:6f:ce:11:26:19:d4:d6:27:52:84:be:ea:bf:52:75:05: 64:0f:22:01:44:b3:c8:ed:88:f3:03:09:fb:ff:be:97:a3:7e: 32:f4:7e:94:36:22:d8:38:42:c3:7c:dc:cd:fd:1e:26:c4:c4: 91:8e:45:2c:05:4c:ca:8b:88:35:7d:5a:a4:b4:b6:90:fc:8d: 54:31:90:7a:8c:6d:dc:24:cf:fd:84:1e:87:0e:df:cf:fc:0f: ab:a9:78:9a:4f:05:39:9e:1f:61:9d:c8:b3:18:54:44:9d:96: 44:5e:e9:b8:ad:30:6b:6d:70:b6:df:5e:de:f0:bf:b3:a4:a6: 97:b1:c0:e7:1e:ad:4b:cf:1d:2d:0f:f6:18:b6:4b:eb:a4:17: a0:36:94:1c:51:22:9f:5b:2e:04:1e:7e:22:b4:4e:86:d1:51: bc:68:ba:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPq3tpT+o61UroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZGZiZTVmNTYtMDQ3YS00ZmE0LTg3ZTAtODc3Yzg2Mjc3Mzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2vg+AwYkNcHONLFVDn6ejBbu6j6VDBsisam RrlZKCM5UlIYCp7EZEk4CFThrEufw2NpA1symUi2lDs/aB55Ms6q0yBa7H52VS0i 7FDVGXbXVtnAKjT6OJJVKxxvyuYWQKxRAKJ+ZJiTpGJ5iFMGCT7lwcx/kfHslNcz gqDbGY+WMElb5Ijgc8DTZEGxSzz34frA9ca0SCS0/MKYErasQ/tca73gtCFjSLn9 A24vjdSBn1j71dfYGqCysHxlhjX9PDMJ68MPlywR+YRKakdoGH9PQjvvV3rlh1Lu yu1rQW5xzbg0Oq2KGigbDnzcXXjabzW5j4JudYWaFVmOUC7bdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLR3jqAV8zJNlpSusYjuC4bqm5/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTg0ZGM1NTItYmY4MS0z NDYyLTk5OGMtZmNlZTFhYzE5ZDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzwdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzh+I11m1SaII+0C2vmZZE44KFs+F5c5Hd9186L/RYjZFTmcaFZRXg6 3DJwIoQ+girECgEdw32k0My/s44rkGpthWy14P2SkptPg7v+pHXG77t18abXaz9Y ofqOb84RJhnU1idShL7qv1J1BWQPIgFEs8jtiPMDCfv/vpejfjL0fpQ2Itg4QsN8 3M39HibExJGORSwFTMqLiDV9WqS0tpD8jVQxkHqMbdwkz/2EHocO38/8D6upeJpP BTmeH2GdyLMYVESdlkRe6bitMGttcLbfXt7wv7OkppexwOcerUvPHS0P9hi2S+uk F6A2lBxRIp9bLgQefiK0TobRUbxoukU= -----END CERTIFICATE-----Generated at Tue Nov 4 19:15:17 2025 by rpki-client