$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/880f3735-f73d-3dab-8ba3-3dc57da7e499.roa File: 880f3735-f73d-3dab-8ba3-3dc57da7e499.roa (raw, json) Hash identifier: DfuwQngOLYtKz7CGhPtQBQIq5BewYuoevDoopcRPiGI= Subject key identifier: 9E:28:7C:3E:22:13:56:27:3C:52:9B:64:46:4E:B8:23:93:FF:4D:0E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D833A9CAC856A45F0400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/880f3735-f73d-3dab-8ba3-3dc57da7e499.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 22904 IP address blocks: 67.217.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d8:33:a9:ca:c8:56:a4:5f:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=c2392002-5a9b-4c57-8eed-4a074bc492a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:b2:46:51:10:4e:91:34:a4:d7:2b:b6:ba:2c: b4:d9:2a:46:37:9e:66:a3:72:32:f0:da:d4:40:5e: 75:f7:93:ca:e8:20:9c:f2:c6:98:47:85:e8:98:f4: 65:49:7b:c6:ac:1f:46:3c:d6:1d:85:6b:31:89:e1: db:95:0f:fd:de:0a:2f:66:65:7d:71:7f:c8:04:5d: ad:a5:f7:4f:96:eb:46:97:ed:39:db:f9:7b:38:95: 32:3c:1e:41:d1:8f:c2:31:47:77:b9:55:0a:b3:3f: 2f:ed:7f:84:73:cd:76:ef:86:79:5b:36:b4:77:e8: 78:85:2d:ce:c1:f7:5d:dd:81:55:77:0b:df:cc:e8: 41:58:90:b2:ff:f0:60:03:72:90:aa:63:32:b9:33: c3:90:02:07:f3:75:94:d2:f3:f0:a5:ed:d1:9b:c3: 99:d5:0c:50:92:d7:31:e9:c3:c4:be:ac:75:4f:16: 34:4e:3e:5b:8c:6f:3d:73:29:39:95:3e:44:81:71: 9c:a1:a9:de:41:b2:b2:30:2d:cb:4a:a2:b9:96:6e: 1e:22:a9:24:65:e3:6c:b4:5e:d9:e5:07:72:33:a8: 1e:dc:1d:19:88:8a:9c:f1:b0:a1:19:be:19:28:93: 29:6b:20:16:a2:21:a0:a0:7c:0d:26:77:50:60:fc: fd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:28:7C:3E:22:13:56:27:3C:52:9B:64:46:4E:B8:23:93:FF:4D:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/880f3735-f73d-3dab-8ba3-3dc57da7e499.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.217.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:cc:a7:04:36:27:da:f5:4a:85:c3:fa:ab:7d:c9:97:d7:5d: 72:fb:b1:7a:0f:18:ac:1e:bc:e5:ea:aa:1c:df:55:8c:36:a9: 9d:0d:49:97:93:6b:a3:5a:45:d9:ed:32:66:0e:17:36:90:48: 70:0c:b9:9e:2c:f4:8c:d0:10:24:d3:fd:33:66:62:6f:37:0e: 55:fc:72:5b:a6:76:ed:f5:4c:25:d0:f0:76:93:0b:95:72:f0: 37:d9:03:bb:e1:74:9a:5d:7c:21:bd:40:24:0a:ef:d3:80:5c: b5:3e:6a:a1:29:9f:8a:cd:2c:0f:61:67:9d:b0:4d:a7:6c:75: 09:d4:1d:7f:68:b4:22:c7:7a:74:ec:a8:f1:25:39:d1:3e:f0: ed:2f:9b:97:55:56:f6:a5:83:84:4e:cc:93:a7:64:64:c3:9c: 11:ce:61:96:4b:6e:ca:e7:22:e9:8c:dd:82:d0:f1:d9:76:ff: 04:86:23:9d:83:5d:9a:97:09:e7:6a:a3:d1:87:ac:df:af:10: d6:68:97:35:2a:b2:37:28:20:7c:1f:8a:bd:67:41:6d:ab:82: e8:82:0d:b7:41:8d:63:68:dc:5d:c6:97:c4:39:84:7a:66:f2: ef:85:61:93:33:ee:5c:bf:7a:d7:10:6c:3e:7b:d8:01:7a:77: 10:39:d0:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNgzqcrIVqRfBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YzIzOTIwMDItNWE5Yi00YzU3LThlZWQtNGEwNzRiYzQ5MmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+LJGURBOkTSk1yu2uiy02SpGN55mo3Iy8NrU QF5195PK6CCc8saYR4XomPRlSXvGrB9GPNYdhWsxieHblQ/93govZmV9cX/IBF2t pfdPlutGl+052/l7OJUyPB5B0Y/CMUd3uVUKsz8v7X+Ec81274Z5Wza0d+h4hS3O wfdd3YFVdwvfzOhBWJCy//BgA3KQqmMyuTPDkAIH83WU0vPwpe3Rm8OZ1QxQktcx 6cPEvqx1TxY0Tj5bjG89cyk5lT5EgXGcoaneQbKyMC3LSqK5lm4eIqkkZeNstF7Z 5QdyM6ge3B0ZiIqc8bChGb4ZKJMpayAWoiGgoHwNJndQYPz9EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4ofD4iE1YnPFKbZEZOuCOT/00OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODgwZjM3MzUtZjczZC0z ZGFiLThiYTMtM2RjNTdkYTdlNDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9mNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfMpwQ2J9r1SoXD+qt9yZfXXXL7sXoPGKwevOXqqhzfVYw2qZ0NSZeT a6NaRdntMmYOFzaQSHAMuZ4s9IzQECTT/TNmYm83DlX8clumdu31TCXQ8HaTC5Vy 8DfZA7vhdJpdfCG9QCQK79OAXLU+aqEpn4rNLA9hZ52wTadsdQnUHX9otCLHenTs qPElOdE+8O0vm5dVVvalg4ROzJOnZGTDnBHOYZZLbsrnIumM3YLQ8dl2/wSGI52D XZqXCedqo9GHrN+vENZolzUqsjcoIHwfir1nQW2rguiCDbdBjWNo3F3Gl8Q5hHpm 8u+FYZMz7ly/etcQbD572AF6dxA50Eg= -----END CERTIFICATE-----Generated at Thu Aug 7 02:00:56 2025 by rpki-client