$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6dced57e-3770-3946-aa28-f17af5922741.roa File: 6dced57e-3770-3946-aa28-f17af5922741.roa (raw, json) Hash identifier: kw8rs2kvyz46hKzlBRi0EEIA2/X44XoRnIebCJhBfsg= Subject key identifier: E1:D9:88:B9:70:E8:F9:26:C1:70:3E:CD:61:17:0F:8C:2F:9D:D0:EF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D98934C45FDE2C50D800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6dced57e-3770-3946-aa28-f17af5922741.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 29877 IP address blocks: 66.29.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d9:89:34:c4:5f:de:2c:50:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=ae3f8b42-06a2-41ff-896a-0b274d1c8d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:93:a2:cb:43:99:ab:38:4f:03:a8:97:3e:25: 7a:3c:1c:4d:ee:4c:ce:96:da:ec:3f:b1:63:81:f9: 21:b5:89:df:d5:7f:e8:53:76:0c:36:58:eb:71:ac: e4:78:97:6a:60:3e:eb:28:0b:bb:80:fb:ec:0d:ce: 80:e6:ca:97:91:73:58:1c:84:f4:0b:54:c4:9b:0c: 29:7d:ff:57:85:7d:a7:a3:84:82:4e:3f:0c:63:b8: 75:50:e8:1e:26:88:fa:06:eb:ec:05:a8:4a:4d:f4: 0c:b4:23:f8:f7:53:0e:2e:0e:71:b0:ba:ed:57:af: 63:24:15:93:d8:69:fa:26:9a:b2:f3:1c:eb:5e:6a: 20:e2:92:ec:95:86:96:52:9a:5d:4e:42:aa:00:60: 2c:b4:43:17:f5:d7:4f:d8:e1:d5:b6:63:9b:18:4f: 12:37:33:4b:22:e0:4d:9d:32:9d:e0:a5:4a:2f:18: 2f:5f:99:4b:bd:e9:5e:85:c0:e0:96:1c:aa:6b:f2: 7f:15:82:c1:e0:3d:9b:a3:4b:10:81:50:cb:6e:af: c0:36:44:3c:fd:25:2a:62:d5:69:e6:97:ae:3c:87: 4f:8c:4a:65:03:2e:c6:65:74:fa:99:75:df:eb:10: 2e:5e:05:9e:5d:5a:bd:91:5d:e3:36:31:43:f2:cd: 75:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D9:88:B9:70:E8:F9:26:C1:70:3E:CD:61:17:0F:8C:2F:9D:D0:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6dced57e-3770-3946-aa28-f17af5922741.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.29.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ac:ac:25:cb:97:06:50:89:bf:50:aa:ed:d3:ad:a8:bb:e8: 58:dc:8b:cc:4b:0f:c2:a7:26:c8:68:23:c3:82:c2:a3:52:0a: c6:b0:73:30:04:bd:ff:3a:c3:dc:f2:28:9c:04:13:9b:06:d4: 6f:ea:42:04:67:08:eb:4b:85:84:d4:92:d1:77:24:a2:34:0e: 31:48:f1:cc:66:d7:f7:72:59:6f:bb:10:ef:8b:aa:ea:93:0e: ee:39:ad:66:a2:4b:99:3f:40:7b:65:91:e7:d1:fe:62:1e:56: 96:01:0d:4f:92:61:17:cb:02:37:06:8a:ad:18:59:bf:2c:30: 19:c3:28:15:80:59:09:67:54:cb:21:22:a1:13:97:3b:b7:72: e7:d3:e0:4c:b5:62:25:62:9a:61:10:71:9e:7a:83:ba:a9:c7: 02:96:0e:57:16:fc:7d:af:4f:ba:a4:8e:61:79:62:76:a4:68: 75:62:45:d1:a6:9a:11:31:05:27:2c:d0:cb:21:6b:43:f3:76: c6:a6:83:e1:99:4d:ca:5e:8f:6d:dd:98:a6:4d:d9:c0:90:92: 6d:98:dd:73:54:03:a3:d4:b9:b5:18:a3:ca:af:6d:94:f4:e8: fc:c3:22:e9:76:43:14:6c:80:85:c9:86:eb:93:8d:56:72:79: e7:f5:27:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNmJNMRf3ixQ2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YWUzZjhiNDItMDZhMi00MWZmLTg5NmEtMGIyNzRkMWM4ZDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5Oiy0OZqzhPA6iXPiV6PBxN7kzOltrsP7Fj gfkhtYnf1X/oU3YMNljrcazkeJdqYD7rKAu7gPvsDc6A5sqXkXNYHIT0C1TEmwwp ff9XhX2no4SCTj8MY7h1UOgeJoj6BuvsBahKTfQMtCP491MOLg5xsLrtV69jJBWT 2Gn6Jpqy8xzrXmog4pLslYaWUppdTkKqAGAstEMX9ddP2OHVtmObGE8SNzNLIuBN nTKd4KVKLxgvX5lLvelehcDglhyqa/J/FYLB4D2bo0sQgVDLbq/ANkQ8/SUqYtVp 5peuPIdPjEplAy7GZXT6mXXf6xAuXgWeXVq9kV3jNjFD8s11RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHZiLlw6PkmwXA+zWEXD4wvndDvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmRjZWQ1N2UtMzc3MC0z OTQ2LWFhMjgtZjE3YWY1OTIyNzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQh3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6srCXLlwZQib9Qqu3Trai76Fjci8xLD8KnJshoI8OCwqNSCsawczAE vf86w9zyKJwEE5sG1G/qQgRnCOtLhYTUktF3JKI0DjFI8cxm1/dyWW+7EO+LquqT Du45rWaiS5k/QHtlkefR/mIeVpYBDU+SYRfLAjcGiq0YWb8sMBnDKBWAWQlnVMsh IqETlzu3cufT4Ey1YiVimmEQcZ56g7qpxwKWDlcW/H2vT7qkjmF5YnakaHViRdGm mhExBScs0Msha0Pzdsamg+GZTcpej23dmKZN2cCQkm2Y3XNUA6PUubUYo8qvbZT0 6PzDIul2QxRsgIXJhuuTjVZyeef1J6Y= -----END CERTIFICATE-----Generated at Fri Aug 8 13:03:53 2025 by rpki-client