$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/607e03b3-c1cd-33a7-9a62-9057775306ab.roa File: 607e03b3-c1cd-33a7-9a62-9057775306ab.roa (raw, json) Hash identifier: +irgnuDBa+D0s9zfZo2S4kuvaYfQiS2XWkRaN9tUgg0= Subject key identifier: 53:EF:A0:E8:75:11:E6:04:BF:86:92:BA:96:FA:AF:74:BF:A6:9C:E4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0F8BADDE9974A83281200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/607e03b3-c1cd-33a7-9a62-9057775306ab.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 66.173.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:f8:ba:dd:e9:97:4a:83:28:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=2cbdb6e8-1d9c-4784-bcfd-ccfeadee403f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:01:d3:0d:0e:2a:1e:b8:93:2f:af:fc:a1:a7: 88:bf:bb:4a:7b:9a:31:79:1d:ad:7d:30:87:cf:61: 06:e8:14:4e:40:f9:81:d2:46:16:fc:8e:e9:35:9e: 3b:e6:c7:61:98:97:12:f5:7a:e0:72:63:53:c9:ef: 59:5b:a3:4d:b3:7f:10:6b:31:03:49:34:8d:f8:5e: 74:78:4f:91:02:74:a0:4a:fd:9d:76:ba:ff:3a:bd: 7f:c2:43:b3:f6:61:60:dc:10:cd:06:56:74:be:0b: 93:b5:f1:b7:c7:3d:ae:91:42:54:93:33:f7:b1:8f: f1:f8:60:72:19:6c:b5:a9:8f:b9:ed:0e:2b:f2:ec: 66:05:02:88:d5:99:97:68:39:96:7a:3f:aa:f4:41: 66:ad:a7:b5:00:7c:a8:af:dd:a2:da:0f:4f:8a:68: 53:ad:c4:6b:b4:5f:fc:bf:d6:2c:ca:d0:15:a5:ed: 13:44:4e:8c:90:1f:be:77:3f:59:b7:cc:a1:e3:d5: ae:e5:40:35:82:2b:2e:1a:2e:e9:d8:49:42:62:cc: 30:58:4a:55:dd:bf:0e:c0:f0:d4:da:9f:bf:2e:00: 67:99:fe:89:0d:21:ef:ca:05:b1:ac:18:e4:61:62: 4a:f8:53:9b:00:12:ab:a0:84:cd:2e:28:30:c0:74: d0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:EF:A0:E8:75:11:E6:04:BF:86:92:BA:96:FA:AF:74:BF:A6:9C:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/607e03b3-c1cd-33a7-9a62-9057775306ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.173.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:9d:8a:e5:a7:2c:0b:d2:8e:f6:35:71:18:a6:03:15:ae:8f: 49:69:f0:1d:58:27:80:fc:c3:6c:07:f0:68:6f:82:15:e4:7e: 78:d5:7e:99:2e:75:ae:86:52:c8:d4:ad:f9:5c:b0:be:e2:b5: d0:f4:ad:4f:86:9b:54:08:50:53:d0:08:2b:45:11:00:03:23: fb:2f:b3:f8:7a:b4:1c:e2:40:5d:7f:7a:86:36:cd:65:95:ce: 19:00:b9:3b:fb:c7:84:7b:08:a1:f4:87:62:6a:98:c4:11:db: 6d:b6:51:fa:ca:29:ae:e3:91:35:f7:34:01:29:0e:e2:85:8c: ac:34:18:09:97:61:16:28:f4:c9:50:ba:d4:b1:a4:5f:c2:42: 14:88:b9:04:b3:5c:29:4d:f6:94:fe:5d:52:29:df:14:af:5c: c6:90:f4:3e:f8:0f:2c:a8:72:b7:bc:07:14:7b:58:a6:ae:dd: 0c:20:82:6a:b0:46:ee:44:f9:7c:7d:a5:50:da:1d:e2:80:c9: 1c:87:ac:db:78:00:a5:98:c8:4c:06:f8:c6:89:c8:c9:03:84: b5:8d:24:92:bc:2c:6a:8f:48:d9:8d:ed:ed:e2:8b:bd:3d:45: 7e:55:cc:49:2a:85:ef:fa:41:1b:69:c6:fc:c3:4e:b4:12:61: ed:39:52:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoPi63emXSoMoEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MmNiZGI2ZTgtMWQ5Yy00Nzg0LWJjZmQtY2NmZWFkZWU0MDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QHTDQ4qHriTL6/8oaeIv7tKe5oxeR2tfTCH z2EG6BROQPmB0kYW/I7pNZ475sdhmJcS9XrgcmNTye9ZW6NNs38QazEDSTSN+F50 eE+RAnSgSv2ddrr/Or1/wkOz9mFg3BDNBlZ0vguTtfG3xz2ukUJUkzP3sY/x+GBy GWy1qY+57Q4r8uxmBQKI1ZmXaDmWej+q9EFmrae1AHyor92i2g9PimhTrcRrtF/8 v9YsytAVpe0TRE6MkB++dz9Zt8yh49Wu5UA1gisuGi7p2ElCYswwWEpV3b8OwPDU 2p+/LgBnmf6JDSHvygWxrBjkYWJK+FObABKroITNLigwwHTQ4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPvoOh1EeYEv4aSupb6r3S/ppzkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjA3ZTAzYjMtYzFjZC0z M2E3LTlhNjItOTA1Nzc3NTMwNmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQq2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSdiuWnLAvSjvY1cRimAxWuj0lp8B1YJ4D8w2wH8GhvghXkfnjVfpku da6GUsjUrflcsL7itdD0rU+Gm1QIUFPQCCtFEQADI/svs/h6tBziQF1/eoY2zWWV zhkAuTv7x4R7CKH0h2JqmMQR2222UfrKKa7jkTX3NAEpDuKFjKw0GAmXYRYo9MlQ utSxpF/CQhSIuQSzXClN9pT+XVIp3xSvXMaQ9D74Dyyocre8BxR7WKau3Qwggmqw Ru5E+Xx9pVDaHeKAyRyHrNt4AKWYyEwG+MaJyMkDhLWNJJK8LGqPSNmN7e3ii709 RX5VzEkqhe/6QRtpxvzDTrQSYe05UpE= -----END CERTIFICATE-----Generated at Thu Aug 7 03:53:11 2025 by rpki-client