$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/72e0dbc4-703d-3d14-a85f-0a273c2816ce.roa File: 72e0dbc4-703d-3d14-a85f-0a273c2816ce.roa (raw, json) Hash identifier: Q97h4Q+wqBwY/U0h1XCspwVqideAjbtvwea1VDIoyQ4= Subject key identifier: 01:55:A9:C7:00:3B:2A:C3:87:F6:52:18:2C:20:CB:A3:B3:95:08:EF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0F764401D9B68CA67DD60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/72e0dbc4-703d-3d14-a85f-0a273c2816ce.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 64.196.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:f7:64:40:1d:9b:68:ca:67:dd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=3ea365d9-7d36-48f6-a3b4-3f69a8fa37cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:58:87:fb:fa:39:17:5b:52:e8:54:31:7e:ba: 0e:3e:a9:81:7a:0c:b2:a9:42:fa:ec:4a:4f:a8:68: e3:e5:f7:c6:a4:53:a0:a9:42:66:7a:40:62:1e:f0: 0c:65:48:a1:4a:9a:de:7f:2f:ab:39:e3:1b:dc:35: d2:18:36:e3:41:33:c4:dd:b8:2a:81:ac:7e:fa:70: 6d:d8:da:e0:5d:92:70:aa:5f:0a:65:50:24:62:aa: 45:12:9b:c5:08:c4:e2:cf:15:1c:9a:a8:ce:83:f6: 07:c7:09:de:40:81:f7:30:11:b2:6e:30:1a:ea:0a: 49:f9:25:2a:cd:f2:64:c6:3d:34:45:65:51:c6:09: 49:6f:a2:dd:bd:13:75:69:58:18:7a:d2:92:03:bb: d0:27:ad:10:11:7f:94:6c:79:50:88:4d:84:db:e6: 53:cf:f1:d1:52:5a:9e:fd:18:8e:cd:d2:b9:68:7f: b7:04:2a:c4:54:ab:cf:67:15:09:99:49:e2:17:e5: ab:98:c0:43:d5:39:9c:df:09:23:78:06:e7:a3:0b: 04:c6:12:7e:98:b5:df:4c:bd:00:b0:3c:69:01:4f: 8d:ee:ff:ef:eb:6b:76:17:41:ba:55:ab:11:a9:51: e2:78:e4:90:28:ff:25:aa:c5:16:29:e8:4b:cc:cb: b0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:55:A9:C7:00:3B:2A:C3:87:F6:52:18:2C:20:CB:A3:B3:95:08:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/72e0dbc4-703d-3d14-a85f-0a273c2816ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.196.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:20:9c:84:d0:7f:cd:21:33:01:49:d8:5a:b6:10:c4:46:7c: 77:b7:75:e1:d2:43:6a:7d:07:c5:d1:d4:21:34:fe:1f:8a:82: 72:55:41:65:6d:ea:d1:48:0b:d9:c4:58:0e:6f:1b:14:3e:bf: a1:78:33:bf:37:3c:90:87:ad:90:7c:44:94:23:68:45:74:31: 9d:28:68:64:8a:2f:82:a0:be:20:a5:4d:b5:59:09:60:bd:89: e3:45:fa:2e:12:ec:0d:0e:ec:4b:d3:bd:14:c1:a6:c2:55:6c: 5d:f4:2b:3a:21:e5:9c:d4:60:f1:21:7a:66:62:fa:f9:68:7f: 82:76:ce:dd:85:1a:33:a8:c5:d0:c1:c2:c0:50:12:03:8f:61: 30:c4:ad:71:ad:65:85:72:a0:85:53:bc:50:a8:9b:bb:63:ad: 78:9e:45:33:85:c4:c2:30:9c:bc:96:f2:75:c4:70:bf:cb:55: 8f:70:bc:67:fd:62:a7:4d:86:96:f3:fc:13:17:5d:13:05:b5: dd:b3:d7:a0:ab:35:6d:bd:e9:e0:92:d0:00:a2:4b:96:2f:8c: f4:9f:20:5c:39:d8:b9:8e:53:c2:93:0e:ed:4d:87:fa:e5:46: 50:27:66:bb:9f:6a:fd:7b:27:a2:52:e7:aa:a2:1a:72:db:c8: 81:25:9b:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoPdkQB2baMpn3WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk M2VhMzY1ZDktN2QzNi00OGY2LWEzYjQtM2Y2OWE4ZmEzN2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1iH+/o5F1tS6FQxfroOPqmBegyyqUL67EpP qGjj5ffGpFOgqUJmekBiHvAMZUihSprefy+rOeMb3DXSGDbjQTPE3bgqgax++nBt 2NrgXZJwql8KZVAkYqpFEpvFCMTizxUcmqjOg/YHxwneQIH3MBGybjAa6gpJ+SUq zfJkxj00RWVRxglJb6LdvRN1aVgYetKSA7vQJ60QEX+UbHlQiE2E2+ZTz/HRUlqe /RiOzdK5aH+3BCrEVKvPZxUJmUniF+WrmMBD1Tmc3wkjeAbnowsExhJ+mLXfTL0A sDxpAU+N7v/v62t2F0G6VasRqVHieOSQKP8lqsUWKehLzMuwlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFVqccAOyrDh/ZSGCwgy6OzlQjvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzJlMGRiYzQtNzAzZC0z ZDE0LWE4NWYtMGEyNzNjMjgxNmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMTEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEognITQf80hMwFJ2Fq2EMRGfHe3deHSQ2p9B8XR1CE0/h+KgnJVQWVt 6tFIC9nEWA5vGxQ+v6F4M783PJCHrZB8RJQjaEV0MZ0oaGSKL4KgviClTbVZCWC9 ieNF+i4S7A0O7EvTvRTBpsJVbF30Kzoh5ZzUYPEhemZi+vlof4J2zt2FGjOoxdDB wsBQEgOPYTDErXGtZYVyoIVTvFCom7tjrXieRTOFxMIwnLyW8nXEcL/LVY9wvGf9 YqdNhpbz/BMXXRMFtd2z16CrNW296eCS0ACiS5YvjPSfIFw52LmOU8KTDu1Nh/rl RlAnZrufav17J6JS56qiGnLbyIElm68= -----END CERTIFICATE-----Generated at Tue Aug 5 17:22:39 2025 by rpki-client