$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6de40d45-7fe7-33d1-9f5b-221e7432f515.roa File: 6de40d45-7fe7-33d1-9f5b-221e7432f515.roa (raw, json) Hash identifier: WjFZeGbqyRIuMu334113zvo3e5vf2vA5eeEp3iE04/o= Subject key identifier: C8:A8:5F:FE:F7:57:8A:73:07:C1:0A:1B:26:39:43:2A:62:DE:C5:8E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0F690DA4032C380872200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6de40d45-7fe7-33d1-9f5b-221e7432f515.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 64.52.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:f6:90:da:40:32:c3:80:87:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=5405464a-305f-4a14-92bb-30a9f8638de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a4:1b:ae:9e:37:ce:52:05:3d:af:42:c8:a1: 8b:f3:c2:ab:61:5d:4f:b2:c7:81:16:ea:10:b4:19: e7:f0:ed:76:e8:b9:2d:e1:86:f3:61:4c:1f:2c:f7: b9:c4:31:a5:1e:1e:b0:e9:e9:ad:ec:7a:7a:52:6f: 79:43:53:f9:7f:21:51:a4:65:58:38:7a:29:f9:cd: 74:84:e4:2a:2a:57:a1:ec:92:e8:2d:4c:86:8a:96: b3:e2:ba:b5:d0:dd:94:c9:0a:2b:e4:d8:ab:d5:17: 95:db:04:0f:d3:e7:40:f5:5e:07:77:8b:33:f6:ea: 28:0d:06:6b:9a:ae:72:d1:2f:b4:8e:8d:27:e5:58: ef:17:f0:a2:cc:bf:03:ea:b8:e5:3f:0e:5f:29:86: 12:df:c4:cd:0d:c2:68:a8:b2:5f:ae:2d:86:fb:8b: 62:5b:b2:06:52:6b:64:f5:fd:38:2a:35:90:30:b1: 34:36:97:a1:76:6c:c1:b0:28:71:2d:d3:a6:f7:45: 73:75:ae:32:41:5f:6c:7a:b1:40:73:03:2a:00:98: e5:af:c3:20:54:b2:0a:51:f7:39:14:e0:88:54:ca: 14:0d:41:76:70:85:9f:12:71:fe:6c:04:6c:cb:1b: c7:d5:8d:2a:83:a3:3a:fe:5a:f6:1f:2a:6e:25:28: c0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A8:5F:FE:F7:57:8A:73:07:C1:0A:1B:26:39:43:2A:62:DE:C5:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6de40d45-7fe7-33d1-9f5b-221e7432f515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.52.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:0c:a1:73:9c:93:72:f9:b0:be:56:34:c0:89:13:6d:15:3d: 92:9d:3d:5c:1f:14:66:f8:e2:23:fb:dc:b0:73:00:6c:ac:65: 39:9b:8d:09:6d:19:64:bb:73:d7:18:6c:1b:ac:0e:f1:37:3b: ca:fe:f6:a5:16:f4:09:32:4f:5e:89:e1:44:1f:23:98:20:dc: 6a:dd:25:1a:3c:de:e5:77:be:d7:d4:6d:0e:6d:59:e2:4f:ae: 82:b7:fc:e6:d4:9c:1e:0c:3e:63:3f:df:f4:23:6e:48:48:44: 3e:c3:94:de:61:ed:92:57:04:6d:be:75:33:b2:07:07:4a:73: fe:5a:91:e5:3a:44:6b:2f:84:61:d0:73:e7:53:e3:dd:73:66: 11:06:c2:80:45:b5:7b:a2:54:c6:cb:a7:e5:c0:88:73:97:36: 1a:21:d8:fd:5c:c7:03:6a:47:dc:3d:57:e8:80:10:4b:e3:da: 32:22:fd:c5:2f:0d:f9:32:be:9b:f0:a3:5d:f6:97:d9:3f:f9: 53:a4:7a:63:e9:6d:bc:82:43:79:5f:98:e7:d8:91:90:da:cb: 29:f0:d1:e6:46:94:58:d9:8c:fd:57:b6:73:22:0d:fa:f2:8b: b3:f5:0d:7c:48:a5:19:60:25:2f:39:0e:02:18:17:61:23:cf: fe:d3:f4:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoPaQ2kAyw4CHIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NTQwNTQ2NGEtMzA1Zi00YTE0LTkyYmItMzBhOWY4NjM4ZGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqQbrp43zlIFPa9CyKGL88KrYV1PsseBFuoQ tBnn8O126Lkt4YbzYUwfLPe5xDGlHh6w6emt7Hp6Um95Q1P5fyFRpGVYOHop+c10 hOQqKleh7JLoLUyGipaz4rq10N2UyQor5Nir1ReV2wQP0+dA9V4Hd4sz9uooDQZr mq5y0S+0jo0n5VjvF/CizL8D6rjlPw5fKYYS38TNDcJoqLJfri2G+4tiW7IGUmtk 9f04KjWQMLE0NpehdmzBsChxLdOm90Vzda4yQV9serFAcwMqAJjlr8MgVLIKUfc5 FOCIVMoUDUF2cIWfEnH+bARsyxvH1Y0qg6M6/lr2HypuJSjA2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMioX/73V4pzB8EKGyY5Qypi3sWOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmRlNDBkNDUtN2ZlNy0z M2QxLTlmNWItMjIxZTc0MzJmNTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQDQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0MoXOck3L5sL5WNMCJE20VPZKdPVwfFGb44iP73LBzAGysZTmbjQlt GWS7c9cYbBusDvE3O8r+9qUW9AkyT16J4UQfI5gg3GrdJRo83uV3vtfUbQ5tWeJP roK3/ObUnB4MPmM/3/QjbkhIRD7DlN5h7ZJXBG2+dTOyBwdKc/5akeU6RGsvhGHQ c+dT491zZhEGwoBFtXuiVMbLp+XAiHOXNhoh2P1cxwNqR9w9V+iAEEvj2jIi/cUv Dfkyvpvwo132l9k/+VOkemPpbbyCQ3lfmOfYkZDayynw0eZGlFjZjP1XtnMiDfry i7P1DXxIpRlgJS85DgIYF2Ejz/7T9LE= -----END CERTIFICATE-----Generated at Mon Aug 4 16:04:48 2025 by rpki-client