$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/85c9c65b-55a2-3974-a249-26d85ae95a34.roa File: 85c9c65b-55a2-3974-a249-26d85ae95a34.roa (raw, json) Hash identifier: Gc2Ew+ScacgDcvgp6iAvHUSh2uRWLn5jYgq1vTqeynQ= Subject key identifier: A5:12:F2:4A:5F:03:BE:DE:90:FA:28:7C:F3:BE:94:76:1E:F0:48:F3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A106459EFA080B6E145E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/85c9c65b-55a2-3974-a249-26d85ae95a34.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 19674 IP address blocks: 207.106.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:06:45:9e:fa:08:0b:6e:14:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=6f894863-cb11-4562-ab57-27444ca1cb7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4c:20:17:e0:b4:9c:72:4d:65:53:a0:68:3f: b6:9f:8d:3a:ef:a5:f0:1e:08:2b:56:bb:af:c9:a5: 66:87:25:2f:c9:07:57:6c:38:93:c2:0c:2a:8b:c8: 7d:7e:1f:57:50:91:f8:e6:25:33:7a:8b:86:55:40: a3:dd:ff:de:f5:bc:09:e8:da:36:38:6c:bd:b5:93: 73:bc:b6:5d:02:2c:cb:24:04:82:9a:ee:60:65:29: 11:33:40:ec:3c:86:c1:a7:00:37:68:8b:63:f9:da: 9d:55:87:ab:de:ab:b4:bd:01:34:31:98:2a:09:3d: 42:3a:c3:66:3c:a5:cb:e2:7b:2f:c6:5c:7c:2c:ca: 11:a3:6f:55:47:a2:d8:77:fa:0d:9d:a7:ce:a0:60: ed:7d:ff:ec:67:8a:fc:44:b3:f2:54:b0:63:e1:e8: 8c:ab:c7:06:27:5c:f5:a6:14:ea:75:96:15:54:6e: 65:3e:da:ae:a8:e7:84:11:14:45:a7:ba:3a:2c:78: 06:f6:22:53:17:c0:3c:ae:86:69:58:25:91:7e:a6: db:68:45:cf:65:4d:50:6c:f7:c8:f3:a7:a2:d7:7c: 1f:ec:c6:82:67:37:fa:57:86:61:31:45:dd:41:df: 0e:4a:4a:e9:c8:b1:2d:55:89:f3:0c:49:63:f7:6a: 73:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:12:F2:4A:5F:03:BE:DE:90:FA:28:7C:F3:BE:94:76:1E:F0:48:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/85c9c65b-55a2-3974-a249-26d85ae95a34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.106.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:98:6b:3c:69:1a:4c:a9:eb:d0:6f:89:45:97:1b:82:ef:79: 21:79:d0:8b:00:6c:76:2b:42:b9:f0:2a:84:40:d6:1f:1e:7b: b7:55:15:ac:14:05:f1:2d:ab:31:86:ec:6c:35:53:a0:4e:8d: 0f:94:f6:e0:60:b6:64:af:56:f6:fd:77:48:32:b4:eb:c3:bd: a7:8f:2e:16:a6:31:18:a1:9a:12:d8:e2:e1:be:e4:68:80:bb: 2f:79:f7:f7:20:8f:33:90:31:91:ed:4c:47:2a:d7:67:e1:32: 84:5c:90:a7:96:21:9f:97:61:31:64:1c:5d:7e:38:49:cc:a0: 12:b3:a3:55:d9:f0:cc:77:33:52:13:63:bc:a5:f7:0b:2e:aa: d7:29:26:50:b6:ef:1f:4a:e4:9b:c5:7a:b6:d4:45:26:e9:a2: 8d:4d:c6:48:96:ad:37:05:e7:50:96:dc:f4:c1:a0:57:6f:0b: 1c:29:fe:49:99:0c:db:9d:bf:f3:f6:46:45:6b:87:11:67:fb: 52:21:71:f9:e4:8e:7e:c6:3d:bd:6b:4f:7d:89:40:8d:a4:e7: 4f:df:31:e5:97:a6:24:55:1b:ce:db:47:37:08:93:db:97:92: 3e:04:71:c7:9b:87:d8:2f:e5:ed:80:ef:22:b3:0e:5e:c3:5c: 01:63:b0:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoQZFnvoIC24UXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NmY4OTQ4NjMtY2IxMS00NTYyLWFiNTctMjc0NDRjYTFjYjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkwgF+C0nHJNZVOgaD+2n40676XwHggrVruv yaVmhyUvyQdXbDiTwgwqi8h9fh9XUJH45iUzeouGVUCj3f/e9bwJ6No2OGy9tZNz vLZdAizLJASCmu5gZSkRM0DsPIbBpwA3aItj+dqdVYer3qu0vQE0MZgqCT1COsNm PKXL4nsvxlx8LMoRo29VR6LYd/oNnafOoGDtff/sZ4r8RLPyVLBj4eiMq8cGJ1z1 phTqdZYVVG5lPtquqOeEERRFp7o6LHgG9iJTF8A8roZpWCWRfqbbaEXPZU1QbPfI 86ei13wf7MaCZzf6V4ZhMUXdQd8OSkrpyLEtVYnzDElj92pzvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUS8kpfA77ekPoofPO+lHYe8EjzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODVjOWM2NWItNTVhMi0z OTc0LWEyNDktMjZkODVhZTk1YTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz2oqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKYazxpGkyp69BviUWXG4LveSF50IsAbHYrQrnwKoRA1h8ee7dVFawU BfEtqzGG7Gw1U6BOjQ+U9uBgtmSvVvb9d0gytOvDvaePLhamMRihmhLY4uG+5GiA uy959/cgjzOQMZHtTEcq12fhMoRckKeWIZ+XYTFkHF1+OEnMoBKzo1XZ8Mx3M1IT Y7yl9wsuqtcpJlC27x9K5JvFerbURSbpoo1NxkiWrTcF51CW3PTBoFdvCxwp/kmZ DNudv/P2RkVrhxFn+1Ihcfnkjn7GPb1rT32JQI2k50/fMeWXpiRVG87bRzcIk9uX kj4Eccebh9gv5e2A7yKzDl7DXAFjsLM= -----END CERTIFICATE-----Generated at Fri Aug 8 00:00:16 2025 by rpki-client