$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6a4227de-446b-3a2c-8da9-61e4da730c97.roa File: 6a4227de-446b-3a2c-8da9-61e4da730c97.roa (raw, json) Hash identifier: nyvk16A9t0DPybyBdfKfzw3q2v9RQy4YMcxvjS2d2EU= Subject key identifier: 7E:58:24:A4:DE:8D:FF:CA:49:6D:AD:47:2C:73:89:68:09:95:ED:AF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0FA36E758D854EA523C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6a4227de-446b-3a2c-8da9-61e4da730c97.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 72.8.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:fa:36:e7:58:d8:54:ea:52:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=f82a49a7-10c1-4c92-bd9b-596eefbfc2a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:13:0a:a5:d1:d1:0e:1e:29:72:18:7f:b1:f6: 40:f3:dd:b1:dc:a9:9d:a4:e2:60:88:a7:e7:05:98: e0:14:0e:70:28:33:ef:37:fa:53:b7:34:0e:3a:59: cf:f8:e7:f8:c9:7c:ee:4e:58:d0:c0:3a:3b:ae:6d: 73:cc:98:11:b9:34:a2:65:3f:71:0d:02:8e:95:6e: 45:1b:54:d8:b1:cb:93:fc:bd:96:5b:8c:9b:ce:40: 5b:3b:20:bb:ba:32:d6:a3:22:26:eb:54:10:16:59: 93:9c:cd:fb:57:40:db:2a:cd:ff:fc:cb:16:62:71: 46:a1:50:66:04:2e:bc:21:01:36:e9:9c:e3:95:3a: 26:4c:c7:cc:fd:f4:ab:ba:9e:77:47:76:05:ca:bd: 0f:fc:eb:08:7c:2f:9f:e0:6c:b9:d7:91:b6:9d:e1: 93:e8:14:cb:fd:0a:36:04:31:00:51:78:ee:0c:4a: c7:38:6d:db:9c:5c:3a:05:a6:fd:55:c8:54:b9:e1: 36:e2:75:d3:4b:07:93:2a:b5:7c:c5:c6:f4:58:88: 70:66:79:6a:97:88:57:54:d0:aa:af:8b:24:77:ff: e0:71:a6:e4:74:32:d9:89:94:67:98:86:67:fc:4f: ef:24:39:ae:e7:47:79:51:83:a6:bf:45:fb:ec:2c: 4c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:58:24:A4:DE:8D:FF:CA:49:6D:AD:47:2C:73:89:68:09:95:ED:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6a4227de-446b-3a2c-8da9-61e4da730c97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.8.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:29:62:45:d4:1e:0c:ec:96:fd:45:7c:53:02:7d:b7:72:8b: ab:1a:d1:6c:48:6f:44:b1:4e:e2:ee:33:b7:87:ab:30:95:35: 23:28:fa:e7:a9:b3:7a:12:b6:d4:6c:31:ea:66:c4:96:49:59: 20:63:d2:d9:bf:1b:53:c7:8c:ec:e7:8c:67:f0:76:e0:4e:09: ef:7b:8a:7e:99:17:66:da:a5:1e:6e:47:26:2a:df:ab:68:c6: 0d:f8:b1:7e:78:f2:ef:2a:3e:ac:73:d0:2a:0d:96:14:4a:10: e3:e6:55:bd:5d:c5:14:41:33:dd:e4:95:ae:dd:03:1e:7b:10: 43:77:3c:61:75:64:0c:4a:fb:7b:74:0c:3b:b9:92:19:00:bf: 5c:1e:3a:e2:07:f4:ae:ac:9d:4c:9f:bb:32:87:5c:5a:e2:a3: 7c:46:b0:96:ce:b4:6d:31:cf:19:4f:15:34:86:90:17:6f:0f: bd:85:91:63:25:c0:7e:0c:e3:37:bd:60:bd:4d:87:73:74:9e: e0:15:0f:f7:2a:47:d9:18:06:a8:d3:d1:1f:ff:16:c8:12:0f: 2e:5f:c2:3c:20:53:26:fb:8d:56:ed:5d:66:07:26:f6:0b:77: be:03:e7:f8:a9:d9:79:43:c9:36:c4:76:ba:66:43:e6:10:58: d5:23:50:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoPo251jYVOpSPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZjgyYTQ5YTctMTBjMS00YzkyLWJkOWItNTk2ZWVmYmZjMmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRMKpdHRDh4pchh/sfZA892x3KmdpOJgiKfn BZjgFA5wKDPvN/pTtzQOOlnP+Of4yXzuTljQwDo7rm1zzJgRuTSiZT9xDQKOlW5F G1TYscuT/L2WW4ybzkBbOyC7ujLWoyIm61QQFlmTnM37V0DbKs3//MsWYnFGoVBm BC68IQE26ZzjlTomTMfM/fSrup53R3YFyr0P/OsIfC+f4Gy515G2neGT6BTL/Qo2 BDEAUXjuDErHOG3bnFw6Bab9VchUueE24nXTSweTKrV8xcb0WIhwZnlql4hXVNCq r4skd//gcabkdDLZiZRnmIZn/E/vJDmu50d5UYOmv0X77CxMeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5YJKTejf/KSW2tRyxziWgJle2vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmE0MjI3ZGUtNDQ2Yi0z YTJjLThkYTktNjFlNGRhNzMwYzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSAgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYpYkXUHgzslv1FfFMCfbdyi6sa0WxIb0SxTuLuM7eHqzCVNSMo+uep s3oSttRsMepmxJZJWSBj0tm/G1PHjOznjGfwduBOCe97in6ZF2bapR5uRyYq36to xg34sX548u8qPqxz0CoNlhRKEOPmVb1dxRRBM93kla7dAx57EEN3PGF1ZAxK+3t0 DDu5khkAv1weOuIH9K6snUyfuzKHXFrio3xGsJbOtG0xzxlPFTSGkBdvD72FkWMl wH4M4ze9YL1Nh3N0nuAVD/cqR9kYBqjT0R//FsgSDy5fwjwgUyb7jVbtXWYHJvYL d74D5/ip2XlDyTbEdrpmQ+YQWNUjUBc= -----END CERTIFICATE-----Generated at Wed Aug 6 00:45:01 2025 by rpki-client