$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87c35efc-c5c9-3946-95cf-99b65db08936.roa File: 87c35efc-c5c9-3946-95cf-99b65db08936.roa (raw, json) Hash identifier: +hTjz59xRxXj4AWNlbHISy0uprOhZdu7TcfIaRXH74A= Subject key identifier: F4:67:73:78:D8:5D:0E:50:1C:A9:03:3C:1D:0F:ED:9D:5C:66:81:E6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0CF3D7866D215903E9960 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87c35efc-c5c9-3946-95cf-99b65db08936.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 198.211.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:cf:3d:78:66:d2:15:90:3e:99:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=55d861de-4eae-4547-8f2d-ee771996dcc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:13:53:54:e1:32:f4:a3:7e:1a:f8:67:6e:0b: 47:96:33:7a:74:b1:90:88:f8:9f:3b:4b:bf:e2:e3: 56:d8:ed:33:d1:a8:26:70:ea:5f:13:da:ce:ed:96: ba:f8:d6:82:2b:72:d4:37:59:ac:1b:54:10:88:6e: af:85:6f:cc:5e:d7:d4:f8:18:d2:09:8a:a8:6a:5b: ea:07:46:1e:b0:80:06:01:5f:cc:4d:61:77:8e:bd: e0:5c:0c:ed:59:ce:49:b6:0e:45:5d:b3:7c:9d:d7: a9:d4:60:5f:d0:1b:7f:76:84:2d:ef:8b:c1:fd:9a: a2:7e:cb:9b:2a:41:e4:5b:ab:6f:00:06:8c:e2:e4: 7c:ea:96:ee:60:91:ad:f9:3d:35:07:52:df:24:51: 62:2e:34:73:48:c6:a0:cf:7d:f2:0a:3e:f1:35:5f: d4:93:fa:8c:53:f1:5c:42:55:af:9e:0c:e9:f2:4c: 76:11:3e:5a:a0:95:dd:45:53:10:1e:b6:ba:52:2b: 4a:b2:a3:e6:7e:f1:bf:9d:61:48:d7:a7:91:91:bd: 91:19:f1:cc:9b:c2:b1:6f:39:64:14:bd:a9:61:27: 06:65:2c:6b:eb:71:1b:3f:2f:2f:b5:37:55:93:a9: fc:92:93:8e:42:df:53:c7:83:04:16:3d:4a:08:97: 08:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:67:73:78:D8:5D:0E:50:1C:A9:03:3C:1D:0F:ED:9D:5C:66:81:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87c35efc-c5c9-3946-95cf-99b65db08936.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 198.211.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:9f:b6:6c:32:10:16:b6:7c:8c:ce:0c:a0:c9:f9:0f:72:31: 45:b4:14:6c:ee:c2:17:54:81:39:3e:04:dd:30:86:d3:36:af: f6:eb:d0:9f:a6:44:6b:74:15:81:c4:0c:00:6d:94:88:e2:bf: eb:86:70:00:c2:a7:b7:40:d5:68:d8:9f:f1:8d:b3:60:82:a9: ee:21:3a:72:fa:a5:26:18:8f:91:d1:0f:fb:2d:88:7e:6c:78: eb:19:78:3f:c4:9b:d8:6c:5d:85:2a:08:c5:41:32:3d:08:3f: 73:93:0b:be:3b:0a:85:d8:6c:fb:e2:bf:b5:f3:34:7c:55:fe: 53:ff:b5:87:ff:59:6a:98:90:1e:f3:44:8f:28:8e:08:20:5a: 85:1a:8e:e1:5f:94:df:14:b1:f7:ce:f2:3b:a1:a0:06:c1:94: 61:66:c4:2b:16:3f:4e:e9:c8:78:7b:6f:54:2b:5f:e1:3f:f2: 20:d7:42:da:bf:86:59:26:91:c3:03:85:7a:ed:f2:f2:e2:cb: 46:c6:a2:1e:db:83:f6:46:85:0a:bc:24:91:cf:bf:cd:9f:ec: 9e:10:28:c9:ec:ea:9d:24:1e:97:45:48:33:0b:09:6b:5d:76: 05:12:d2:56:a8:29:de:dd:ff:93:77:79:98:b7:6c:58:7e:f0: 02:b2:ce:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoM89eGbSFZA+mWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NTVkODYxZGUtNGVhZS00NTQ3LThmMmQtZWU3NzE5OTZkY2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxNTVOEy9KN+GvhnbgtHljN6dLGQiPifO0u/ 4uNW2O0z0agmcOpfE9rO7Za6+NaCK3LUN1msG1QQiG6vhW/MXtfU+BjSCYqoalvq B0YesIAGAV/MTWF3jr3gXAztWc5Jtg5FXbN8ndep1GBf0Bt/doQt74vB/Zqifsub KkHkW6tvAAaM4uR86pbuYJGt+T01B1LfJFFiLjRzSMagz33yCj7xNV/Uk/qMU/Fc QlWvngzp8kx2ET5aoJXdRVMQHra6UitKsqPmfvG/nWFI16eRkb2RGfHMm8Kxbzlk FL2pYScGZSxr63EbPy8vtTdVk6n8kpOOQt9Tx4MEFj1KCJcIPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRnc3jYXQ5QHKkDPB0P7Z1cZoHmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODdjMzVlZmMtYzVjOS0z OTQ2LTk1Y2YtOTliNjVkYjA4OTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExtOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiftmwyEBa2fIzODKDJ+Q9yMUW0FGzuwhdUgTk+BN0whtM2r/br0J+m RGt0FYHEDABtlIjiv+uGcADCp7dA1WjYn/GNs2CCqe4hOnL6pSYYj5HRD/stiH5s eOsZeD/Em9hsXYUqCMVBMj0IP3OTC747CoXYbPviv7XzNHxV/lP/tYf/WWqYkB7z RI8ojgggWoUajuFflN8UsffO8juhoAbBlGFmxCsWP07pyHh7b1QrX+E/8iDXQtq/ hlkmkcMDhXrt8vLiy0bGoh7bg/ZGhQq8JJHPv82f7J4QKMns6p0kHpdFSDMLCWtd dgUS0laoKd7d/5N3eZi3bFh+8AKyzls= -----END CERTIFICATE-----Generated at Wed Aug 6 06:02:02 2025 by rpki-client