$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/814cbe67-9c67-3420-81e6-2b9acdf04041.roa File: 814cbe67-9c67-3420-81e6-2b9acdf04041.roa (raw, json) Hash identifier: n4dbrRF5sjQwFmQf97Qv8KNHKgTsaLC5tu6V5MbwRmo= Subject key identifier: 47:00:C0:4C:63:3C:88:5F:2A:C1:76:C2:C8:ED:CA:38:0C:4D:B4:33 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A1005C1207B3D6A6ADB680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/814cbe67-9c67-3420-81e6-2b9acdf04041.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 208.101.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:00:5c:12:07:b3:d6:a6:ad:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=615f9b6b-345d-4ca3-b5d9-3e7090edc318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e6:e1:76:26:f3:e2:be:b6:71:b4:2d:30:41: 57:f8:70:50:ae:f9:e4:2d:45:09:38:63:0c:2e:30: b1:e4:79:6b:c3:d9:16:8d:61:14:02:07:a3:8d:22: 6c:94:7d:2e:4f:28:8c:36:40:27:81:a1:4f:9c:a6: 4b:23:d5:45:5b:fe:c1:43:90:f7:b5:31:ce:57:74: e6:47:7d:0a:ba:ca:79:31:1f:d4:6b:1b:dc:d3:62: 2f:23:76:37:42:9b:2a:4f:24:5d:8c:09:48:d8:8b: 7e:31:75:63:e1:d3:12:df:8c:cd:05:56:7f:f5:95: ff:8c:36:dd:43:86:63:40:7e:c5:d1:7e:01:23:b6: ee:69:bd:72:8f:76:e0:e9:c9:c2:4b:b7:36:9f:b6: 13:92:8b:e5:54:25:0d:15:9e:bc:b5:bc:39:7b:84: af:3e:18:6c:bb:e0:0c:8a:0d:55:37:0d:34:d1:60: bf:86:8d:33:bd:8f:3f:1a:fb:f9:73:41:f1:24:35: ec:2e:c3:9f:85:48:67:cd:a3:87:b7:2d:d6:70:b6: be:5b:76:bd:a5:1f:8f:22:54:e2:ed:9d:3e:3b:41: d0:ca:42:b4:1e:e7:cf:4f:94:bc:b2:b3:f3:41:59: 25:7c:4e:04:65:e9:8a:28:fe:b7:9a:85:bb:0e:12: a0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:00:C0:4C:63:3C:88:5F:2A:C1:76:C2:C8:ED:CA:38:0C:4D:B4:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/814cbe67-9c67-3420-81e6-2b9acdf04041.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 208.101.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:1e:a0:fa:b7:34:b5:76:1b:2c:f5:49:31:95:29:09:b5:48: c7:fc:b6:2d:e1:c0:5b:6d:1c:3a:05:b2:17:76:2c:f7:76:10: 65:ee:74:ed:50:56:ba:24:44:f1:db:10:9e:03:59:26:83:25: fe:b0:14:4d:d4:5f:39:fb:98:4a:cb:7c:06:38:80:f0:e5:23: 37:0a:d8:70:57:d9:87:28:a4:c0:0a:1c:76:3e:c6:80:44:df: 2a:a3:3d:7c:d6:b0:95:dd:b4:0f:f9:77:43:08:1a:c2:8e:8e: 7d:91:9f:2e:f1:76:0d:ac:67:43:8a:ee:d7:cb:9e:fc:80:cf: d4:04:a2:a8:4a:a6:a1:83:86:04:ae:e1:38:5d:f4:dc:e3:60: 72:dd:c3:00:61:26:e2:bb:d4:be:d8:5d:98:11:17:c9:21:d5: 15:92:4d:36:21:9e:93:b1:ba:a3:69:50:1b:1c:f3:86:eb:e7: cf:a1:ac:73:73:47:06:69:eb:a0:10:c2:a3:31:fc:6d:ab:8a: 20:a0:d2:fb:98:d0:a9:47:a5:f7:f9:45:06:ab:45:fe:65:f2: 4a:1e:c6:19:c7:75:e3:a9:23:3e:ba:91:32:7f:7c:f2:de:58: 9b:cb:6f:c1:96:86:fe:92:42:20:ca:92:ae:4c:64:e8:a1:02: 4f:2f:8a:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoQBcEgez1qattoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NjE1ZjliNmItMzQ1ZC00Y2EzLWI1ZDktM2U3MDkwZWRjMzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqubhdibz4r62cbQtMEFX+HBQrvnkLUUJOGMM LjCx5Hlrw9kWjWEUAgejjSJslH0uTyiMNkAngaFPnKZLI9VFW/7BQ5D3tTHOV3Tm R30Kusp5MR/Uaxvc02IvI3Y3QpsqTyRdjAlI2It+MXVj4dMS34zNBVZ/9ZX/jDbd Q4ZjQH7F0X4BI7buab1yj3bg6cnCS7c2n7YTkovlVCUNFZ68tbw5e4SvPhhsu+AM ig1VNw000WC/ho0zvY8/Gvv5c0HxJDXsLsOfhUhnzaOHty3WcLa+W3a9pR+PIlTi 7Z0+O0HQykK0HufPT5S8srPzQVklfE4EZemKKP63moW7DhKgmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcAwExjPIhfKsF2wsjtyjgMTbQzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODE0Y2JlNjctOWM2Ny0z NDIwLTgxZTYtMmI5YWNkZjA0MDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0GWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEseoPq3NLV2Gyz1STGVKQm1SMf8ti3hwFttHDoFshd2LPd2EGXudO1Q VrokRPHbEJ4DWSaDJf6wFE3UXzn7mErLfAY4gPDlIzcK2HBX2YcopMAKHHY+xoBE 3yqjPXzWsJXdtA/5d0MIGsKOjn2Rny7xdg2sZ0OK7tfLnvyAz9QEoqhKpqGDhgSu 4Thd9NzjYHLdwwBhJuK71L7YXZgRF8kh1RWSTTYhnpOxuqNpUBsc84br58+hrHNz RwZp66AQwqMx/G2riiCg0vuY0KlHpff5RQarRf5l8koexhnHdeOpIz66kTJ/fPLe WJvLb8GWhv6SQiDKkq5MZOihAk8viik= -----END CERTIFICATE-----Generated at Mon Aug 4 16:08:47 2025 by rpki-client