$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6e646695-998a-3951-a3ca-a84efeb22b5b.roa File: 6e646695-998a-3951-a3ca-a84efeb22b5b.roa (raw, json) Hash identifier: MBmQ6ujNTYPJxPX9L//8e92RClaG0iSuXNrDi7ESz+A= Subject key identifier: FB:C4:4A:64:61:5D:E8:84:64:46:B6:A3:B3:46:CA:A0:F3:D0:DC:71 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8C70DD548D33F4B007B04C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6e646695-998a-3951-a3ca-a84efeb22b5b.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 162.40.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:dd:54:8d:33:f4:b0:07:b0:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=9b6707f4-5d71-4d71-ba4d-d919ddee1748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b3:9d:e2:60:89:4e:07:4c:2f:84:4b:34:92: cf:f2:1d:d3:b5:90:64:6f:c1:09:4f:a6:1b:c1:0e: 1c:dd:00:d7:c1:1a:68:41:0b:2b:67:8c:4b:39:dc: 74:73:b1:d0:c6:6f:df:c9:ca:e9:49:96:0f:9f:bf: 99:60:51:38:2c:0f:4d:a5:b8:ff:64:ed:48:0c:6d: 8c:c6:a0:d7:dc:06:8b:8c:39:09:2b:c5:55:d5:9b: 24:94:5d:0d:16:26:18:bd:89:db:66:45:71:a0:b5: aa:b9:d7:ff:06:a5:25:26:03:0e:59:db:1e:bc:8d: ae:8b:cc:1b:3c:d6:e7:0c:c9:67:a0:e1:12:81:b2: 60:38:46:d0:d9:5f:52:50:7c:74:6e:64:6e:43:f0: b4:66:7f:10:dd:a3:0a:d8:29:8f:c5:26:df:e8:cf: be:1b:eb:fa:d0:46:e5:a6:c9:72:8d:80:c7:ce:fb: b0:e7:ee:cd:5b:ac:7f:ad:f4:25:01:10:db:a7:93: fe:8f:f8:2b:ce:c3:b9:b2:16:68:2a:43:03:75:1b: 3b:ef:63:c1:26:e8:9d:3a:01:f4:58:27:62:ca:4f: ec:61:60:33:d3:23:e2:2f:b2:2e:67:ac:e7:76:a6: be:37:5b:d9:a5:fe:74:31:49:5f:e9:ba:a1:2a:00: 0f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C4:4A:64:61:5D:E8:84:64:46:B6:A3:B3:46:CA:A0:F3:D0:DC:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6e646695-998a-3951-a3ca-a84efeb22b5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.40.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:92:55:db:bc:11:ef:a5:92:36:2d:c7:e4:22:74:66:8d:5e: 2f:7f:b2:0a:c5:2b:06:d8:35:6b:63:08:44:12:3a:07:78:e5: aa:26:a2:7f:ef:e5:d0:c7:d3:30:10:f9:bf:e3:3f:78:d0:25: f4:5a:42:f7:e2:64:87:c9:98:a0:74:55:eb:f6:af:75:85:74: 3f:07:7c:d4:7e:5d:d3:9a:ba:8e:cb:07:df:26:9c:e7:8b:6d: 8d:b5:07:67:39:a3:7d:9a:61:1c:f3:3e:f7:37:91:87:95:4a: c3:3b:dd:6a:a0:af:51:09:32:0d:c5:43:63:66:c6:d5:85:ce: f9:a4:5a:66:e8:8e:91:35:24:b4:30:26:12:49:24:3d:76:f3: c6:c3:88:98:8f:c3:8c:59:4c:b1:47:b7:ed:29:f5:50:9c:59: 07:9d:f5:86:30:69:8b:f4:f5:71:e3:ae:51:2d:3b:4c:9d:7f: df:d6:fd:af:6b:03:f0:9b:96:36:84:fc:02:f5:91:25:15:32: ab:30:6c:07:5f:1d:c5:0a:3f:b4:01:0d:d0:2d:ed:27:69:89: bc:15:2a:f5:0c:e4:19:aa:f1:59:06:18:ae:c3:90:f7:21:f8: 60:9c:70:f2:03:49:16:a8:80:fd:b8:a6:04:e8:3e:42:1a:00: 2f:c1:ba:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcN1UjTP0sAewTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk OWI2NzA3ZjQtNWQ3MS00ZDcxLWJhNGQtZDkxOWRkZWUxNzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobOd4mCJTgdML4RLNJLP8h3TtZBkb8EJT6Yb wQ4c3QDXwRpoQQsrZ4xLOdx0c7HQxm/fycrpSZYPn7+ZYFE4LA9Npbj/ZO1IDG2M xqDX3AaLjDkJK8VV1ZsklF0NFiYYvYnbZkVxoLWqudf/BqUlJgMOWdsevI2ui8wb PNbnDMlnoOESgbJgOEbQ2V9SUHx0bmRuQ/C0Zn8Q3aMK2CmPxSbf6M++G+v60Ebl pslyjYDHzvuw5+7NW6x/rfQlARDbp5P+j/grzsO5shZoKkMDdRs772PBJuidOgH0 WCdiyk/sYWAz0yPiL7IuZ6zndqa+N1vZpf50MUlf6bqhKgAPPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvESmRhXeiEZEa2o7NGyqDz0NxxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmU2NDY2OTUtOTk4YS0z OTUxLWEzY2EtYTg0ZWZlYjIyYjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoiigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaSVdu8Ee+lkjYtx+QidGaNXi9/sgrFKwbYNWtjCEQSOgd45aomon/v 5dDH0zAQ+b/jP3jQJfRaQvfiZIfJmKB0Vev2r3WFdD8HfNR+XdOauo7LB98mnOeL bY21B2c5o32aYRzzPvc3kYeVSsM73Wqgr1EJMg3FQ2NmxtWFzvmkWmbojpE1JLQw JhJJJD1288bDiJiPw4xZTLFHt+0p9VCcWQed9YYwaYv09XHjrlEtO0ydf9/W/a9r A/CbljaE/AL1kSUVMqswbAdfHcUKP7QBDdAt7SdpibwVKvUM5Bmq8VkGGK7DkPch +GCccPIDSRaogP24pgToPkIaAC/Bupc= -----END CERTIFICATE-----Generated at Fri Aug 8 00:06:40 2025 by rpki-client