$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7aefdb19-b8ac-3df6-bc76-7b87391b4c35.roa File: 7aefdb19-b8ac-3df6-bc76-7b87391b4c35.roa (raw, json) Hash identifier: 0LHyCcA9XH5FFx2XqkVSnYlbpkT4DugMBOtkraVnvrM= Subject key identifier: CE:6A:6F:BE:E0:AD:74:8F:63:54:AA:73:27:85:1B:11:24:27:03:09 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8B0B565C88F8BD4CF3AFBE00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7aefdb19-b8ac-3df6-bc76-7b87391b4c35.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 7029 IP address blocks: 72.172.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:56:5c:88:f8:bd:4c:f3:af:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=34895ec8-a451-4f16-9353-20d45c228374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:57:b4:f5:b9:be:d7:f4:69:06:bd:79:3d:46: c6:a0:56:ba:e9:68:25:6e:0e:c2:b8:0e:c9:d2:c8: db:a1:e9:aa:4e:67:6a:4c:27:da:12:65:09:a4:66: 8e:1c:81:f2:d4:15:56:4b:da:f2:88:cc:a8:e4:0e: a4:13:e0:9c:ce:fd:91:00:05:78:ff:4e:e3:18:9b: 06:07:a6:d1:d7:b0:24:56:b6:9b:cd:c2:bb:86:68: 51:12:7a:54:cf:4d:d3:1d:68:8f:34:59:65:e3:12: 87:fb:0c:1d:02:68:b1:de:53:4f:48:41:7d:ae:b0: 37:9c:76:66:a1:d2:bc:9e:c9:9c:c8:11:cd:f5:55: 6a:85:0c:c0:ae:e6:e2:e6:ef:f7:ec:e7:4e:e5:87: 54:fd:3c:71:2e:69:e5:5c:11:75:ca:84:d5:55:10: 7c:ca:be:0a:43:e0:e3:16:5f:43:13:d0:e8:db:bb: c5:c0:3a:81:74:a4:82:c6:06:60:81:f4:c7:44:76: da:ca:8a:22:1f:da:d7:d2:cb:d7:b5:bc:0a:b3:8e: 21:ea:ed:d2:b4:93:a4:ce:54:4d:4a:ca:0b:fc:e3: 8f:2b:10:31:6d:b3:f8:65:93:8c:4b:c5:2c:2c:7a: 23:ec:57:c1:2b:bb:2a:f5:0d:63:a2:8e:30:42:f0: 79:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6A:6F:BE:E0:AD:74:8F:63:54:AA:73:27:85:1B:11:24:27:03:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7aefdb19-b8ac-3df6-bc76-7b87391b4c35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.172.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:5c:62:90:74:10:a8:6f:7d:e4:01:8d:cf:42:75:07:43:e1: 0b:88:9c:71:c6:41:a1:4f:36:e3:52:39:50:d7:2f:cc:e2:01: 9d:28:8d:f8:b9:2a:1e:49:2a:51:92:1f:3f:3c:a0:25:1c:af: 1d:62:c8:8e:34:37:79:8a:6e:8e:53:aa:48:6c:84:d4:2c:f6: bd:8b:d4:11:4a:bf:22:68:08:b1:56:8a:0d:f2:87:4f:53:b8: a8:ae:76:6e:45:8a:8a:f6:0e:c7:3c:e6:e1:bc:91:07:7b:e0: 86:fc:cf:71:cb:e0:15:0a:d7:fa:a5:e5:8b:35:4a:f4:c7:48: fb:70:4c:b0:a0:a2:b5:4d:8e:8a:40:bd:d9:3c:72:6e:c2:dc: b9:e4:3a:3b:55:91:d1:32:2d:64:3f:bf:b9:b0:30:c3:d9:4c: 69:1c:33:ba:05:67:b7:4a:4c:a7:00:40:77:11:c3:d6:97:05: 3c:42:ae:3d:71:96:4f:fe:98:ee:bb:4e:1f:e7:17:f5:f8:47: 67:74:26:69:56:d5:88:e9:31:39:e9:90:f0:be:68:8e:9b:fd: 66:28:d7:31:5b:96:ae:a0:1d:68:91:74:2c:dd:79:cc:ac:db: 3e:b0:20:d5:56:e6:0e:ed:9f:07:3d:6f:c8:69:7d:18:66:6c: 20:39:d3:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC1ZciPi9TPOvvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk MzQ4OTVlYzgtYTQ1MS00ZjE2LTkzNTMtMjBkNDVjMjI4Mzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVe09bm+1/RpBr15PUbGoFa66Wglbg7CuA7J 0sjboemqTmdqTCfaEmUJpGaOHIHy1BVWS9ryiMyo5A6kE+Cczv2RAAV4/07jGJsG B6bR17AkVrabzcK7hmhREnpUz03THWiPNFll4xKH+wwdAmix3lNPSEF9rrA3nHZm odK8nsmcyBHN9VVqhQzArubi5u/37OdO5YdU/TxxLmnlXBF1yoTVVRB8yr4KQ+Dj Fl9DE9Do27vFwDqBdKSCxgZggfTHRHbayooiH9rX0svXtbwKs44h6u3StJOkzlRN SsoL/OOPKxAxbbP4ZZOMS8UsLHoj7FfBK7sq9Q1joo4wQvB5pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5qb77grXSPY1SqcyeFGxEkJwMJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2FlZmRiMTktYjhhYy0z ZGY2LWJjNzYtN2I4NzM5MWI0YzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSKwYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFcYpB0EKhvfeQBjc9CdQdD4QuInHHGQaFPNuNSOVDXL8ziAZ0ojfi5 Kh5JKlGSHz88oCUcrx1iyI40N3mKbo5TqkhshNQs9r2L1BFKvyJoCLFWig3yh09T uKiudm5Fior2Dsc85uG8kQd74Ib8z3HL4BUK1/ql5Ys1SvTHSPtwTLCgorVNjopA vdk8cm7C3LnkOjtVkdEyLWQ/v7mwMMPZTGkcM7oFZ7dKTKcAQHcRw9aXBTxCrj1x lk/+mO67Th/nF/X4R2d0JmlW1YjpMTnpkPC+aI6b/WYo1zFblq6gHWiRdCzdecys 2z6wINVW5g7tnwc9b8hpfRhmbCA50xs= -----END CERTIFICATE-----Generated at Wed Aug 6 12:39:20 2025 by rpki-client