$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75a6223c-2cf8-30cc-bc58-4e6a0be4b1c8.roa File: 75a6223c-2cf8-30cc-bc58-4e6a0be4b1c8.roa (raw, json) Hash identifier: k3ZWpYEsagJTyWnSJ/zbHgC9gaAMVcj4D4VJaOh0Tak= Subject key identifier: 3B:BA:EA:46:A4:2F:8C:15:80:E0:33:8C:54:26:AC:40:A3:75:19:6A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0CC738C4BCEF86D758480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75a6223c-2cf8-30cc-bc58-4e6a0be4b1c8.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 97.66.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:cc:73:8c:4b:ce:f8:6d:75:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=11a06ae8-1d1a-4283-8660-91b5c6a0bfe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:59:61:be:ff:31:dc:04:86:59:05:cb:15:37: 01:c5:25:c0:cf:6f:1c:e5:f6:79:3d:f1:8e:16:6e: f4:98:4e:93:e7:21:ab:4b:08:55:5b:32:51:e2:6b: 2b:54:3a:25:d7:5f:08:61:da:6d:fd:c2:2e:0b:69: ca:44:fb:a5:e8:30:b8:bd:67:08:4c:55:39:19:1e: 03:d5:3e:cc:c5:7a:9a:d0:e2:89:9a:9d:a2:1a:43: 7d:e4:0f:64:30:59:20:07:9c:0a:7f:d6:02:d8:4b: b0:85:f0:b4:df:36:5d:ad:26:25:e5:9a:c7:42:5f: 61:e6:f5:f1:56:ae:0f:b2:a8:83:c0:e5:f2:45:ae: 09:fe:f8:d1:d6:6a:d9:cd:61:8a:aa:af:61:88:ea: ad:2f:22:7c:93:4c:65:2b:e1:a1:66:f9:4d:50:0a: 33:52:1b:54:b5:d6:f2:1e:91:c9:b2:4d:c8:c0:92: 2d:6a:58:73:de:e4:ce:44:bf:92:41:25:98:65:c7: cc:2e:dd:eb:c2:fa:5e:61:a8:b1:70:82:83:d6:86: 30:97:e9:51:1b:e8:f4:f8:17:b1:b9:e7:22:53:d6: 59:12:5f:80:8b:9f:74:3d:11:48:60:02:b1:57:b3: 1d:e5:c8:e1:7e:ed:5c:69:ef:7b:9b:c5:2e:85:52: 16:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BA:EA:46:A4:2F:8C:15:80:E0:33:8C:54:26:AC:40:A3:75:19:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75a6223c-2cf8-30cc-bc58-4e6a0be4b1c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 97.66.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:2b:80:4b:73:67:ca:5d:5e:fb:0f:65:4e:8c:b3:8f:c5:17: 6e:37:75:83:d8:ad:1c:d5:fe:6e:2a:e7:77:fe:9f:82:38:87: 33:d3:0d:6d:eb:3b:78:3f:66:a5:0f:87:6d:57:36:eb:0f:6e: 32:e2:82:10:02:a4:be:4d:d7:e2:75:39:35:3a:18:9c:54:37: 3f:2a:9d:18:50:06:66:24:37:55:68:31:cd:54:3a:04:f3:40: 53:10:37:3d:ff:24:aa:1b:e8:95:88:97:bb:41:ae:24:05:a1: d1:f8:43:d2:8e:91:4c:21:22:d0:90:f5:38:36:75:58:61:61: 17:db:24:46:8a:b1:b5:2c:3b:3f:27:57:5a:ce:63:f7:d6:17: 63:7f:9e:8b:76:69:c1:43:cd:15:88:0e:30:50:da:3a:cd:05: 8b:90:14:a3:96:9c:63:1d:b9:3e:fa:ea:1c:dd:c7:eb:66:d9: 76:49:ec:6c:ff:cc:18:98:9d:0d:67:29:31:d9:6e:f8:4a:ee: a3:f4:7e:79:54:6d:c9:43:05:66:ee:e3:1c:8d:3d:0e:ff:bb: c6:cf:4b:02:95:bd:d1:df:48:80:52:93:33:6b:a2:a0:23:76: 2c:fa:5e:1b:bf:dc:74:5e:00:a3:3d:22:68:76:3b:eb:22:f3: 08:d3:ea:01 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqQoMxzjEvO+G11hIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MTFhMDZhZTgtMWQxYS00MjgzLTg2NjAtOTFiNWM2YTBiZmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Vlhvv8x3ASGWQXLFTcBxSXAz28c5fZ5PfGO Fm70mE6T5yGrSwhVWzJR4msrVDol118IYdpt/cIuC2nKRPul6DC4vWcITFU5GR4D 1T7MxXqa0OKJmp2iGkN95A9kMFkgB5wKf9YC2EuwhfC03zZdrSYl5ZrHQl9h5vXx Vq4PsqiDwOXyRa4J/vjR1mrZzWGKqq9hiOqtLyJ8k0xlK+GhZvlNUAozUhtUtdby HpHJsk3IwJItalhz3uTORL+SQSWYZcfMLt3rwvpeYaixcIKD1oYwl+lRG+j0+Bex ueciU9ZZEl+Ai590PRFIYAKxV7Md5cjhfu1cae97m8UuhVIWBQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDu66kakL4wVgOAzjFQmrECjdRlqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzVhNjIyM2MtMmNmOC0z MGNjLWJjNTgtNGU2YTBiZTRiMWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBYUIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAeCuAS3Nnyl1e+w9lToyzj8UXbjd1g9itHNX+birnd/6fgjiHM9MNbes7 eD9mpQ+HbVc26w9uMuKCEAKkvk3X4nU5NToYnFQ3PyqdGFAGZiQ3VWgxzVQ6BPNA UxA3Pf8kqhvolYiXu0GuJAWh0fhD0o6RTCEi0JD1ODZ1WGFhF9skRoqxtSw7PydX Ws5j99YXY3+ei3ZpwUPNFYgOMFDaOs0Fi5AUo5acYx25PvrqHN3H62bZdknsbP/M GJidDWcpMdlu+Eruo/R+eVRtyUMFZu7jHI09Dv+7xs9LApW90d9IgFKTM2uioCN2 LPpeG7/cdF4Aoz0iaHY76yLzCNPqAQ== -----END CERTIFICATE-----Generated at Wed Aug 6 00:53:13 2025 by rpki-client