$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ae4279a-c4bd-324e-a66f-630dd143537c.roa File: 8ae4279a-c4bd-324e-a66f-630dd143537c.roa (raw, json) Hash identifier: YhJ+MBakriVXxcGluTf2WgnYGeSSJm+7W2+CStG8oy4= Subject key identifier: 3E:3C:A3:4D:A6:BA:8A:D0:5A:A8:01:A9:45:E7:0C:3A:8F:B1:A2:D5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8B0B56C8684B19CE7FFAAE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ae4279a-c4bd-324e-a66f-630dd143537c.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 7029 IP address blocks: 67.224.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:56:c8:68:4b:19:ce:7f:fa:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=e0d98f0d-7997-4a59-bb3b-f1058e655b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:94:63:39:b6:87:b4:f1:d0:f5:42:b6:a0:ee: 22:6d:f8:e3:28:bf:12:e0:7e:fd:a3:95:92:42:6e: 65:fa:ad:6c:b8:c5:ff:60:ac:b5:83:68:28:ee:3e: 6b:59:b0:e8:07:9a:21:44:e4:14:74:82:a1:1a:8c: 66:7e:e1:4a:09:3d:aa:f8:d0:62:f9:71:1e:58:a2: 12:bc:94:c9:1d:17:f1:e2:f6:e9:3a:d2:a9:ae:06: cf:88:98:1b:40:34:34:91:29:61:38:cb:c1:ad:a6: 47:b1:13:8d:c7:74:a5:f9:45:82:34:f2:fb:c7:0c: 00:ad:67:7a:92:e6:30:fb:b4:12:a5:aa:51:29:ad: 73:33:18:8e:ae:2e:cd:a6:53:d6:37:8c:1b:f6:2d: d7:dc:00:3a:0c:94:0a:ed:5b:ab:e6:1c:ed:72:77: ad:97:46:ec:bc:04:85:3a:47:b0:1b:ba:e7:61:af: c8:eb:7f:37:6b:c6:1d:df:7f:28:72:ff:78:e4:2c: 21:f7:07:82:dd:71:20:18:b6:cc:c9:f5:62:48:19: 47:14:3c:df:f1:82:80:ee:54:73:02:34:c8:a1:ff: bb:8c:ba:29:9c:cf:b3:17:b5:d6:51:45:35:3c:5e: d7:84:85:fb:a8:0c:bc:90:74:02:f1:fd:76:09:ec: 47:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3C:A3:4D:A6:BA:8A:D0:5A:A8:01:A9:45:E7:0C:3A:8F:B1:A2:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ae4279a-c4bd-324e-a66f-630dd143537c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.224.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:ff:fc:76:0e:06:25:3d:0d:5c:af:0b:e4:f7:fc:66:8b:ba: b6:bd:2c:0e:53:0d:ee:cd:83:6f:aa:79:aa:29:83:47:af:00: ef:c3:3c:67:b2:a3:a8:a7:f1:c2:48:f4:f4:89:a2:bf:a7:f4: 03:84:cd:bb:48:ef:df:12:0d:85:27:50:51:94:94:4b:27:32: 65:4e:12:12:9c:c7:9a:85:01:9d:ad:71:22:95:47:fe:e0:28: e9:7b:13:fd:06:80:1b:c7:e2:f3:6b:d2:0d:37:10:2d:66:b7: 41:5b:15:98:95:de:d4:97:4a:9c:0d:1a:08:95:83:aa:48:0a: 0c:9c:ca:73:0e:4d:61:51:74:b9:9d:f6:ac:e3:ed:76:c4:9c: 10:86:1f:1e:37:e6:a9:d0:27:28:d2:a3:f2:03:6c:5d:50:41: 2e:ad:b4:a1:ef:ed:e3:b5:51:2e:66:c7:7f:ca:04:e5:a5:30: e7:19:3d:ed:c0:f0:60:bf:33:fe:58:78:ef:97:a9:e8:85:9d: c3:65:1e:aa:4a:d2:e6:21:d7:79:5a:6a:96:ca:6e:3b:b3:45: 61:76:ce:a3:41:65:38:b5:a1:59:3a:22:e1:1b:7a:40:42:33: 63:13:b0:8c:f4:3f:6e:cb:99:7b:9e:dd:b9:95:74:22:2e:01: 85:34:ff:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC1bIaEsZzn/6roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk ZTBkOThmMGQtNzk5Ny00YTU5LWJiM2ItZjEwNThlNjU1YjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5RjObaHtPHQ9UK2oO4ibfjjKL8S4H79o5WS Qm5l+q1suMX/YKy1g2go7j5rWbDoB5ohROQUdIKhGoxmfuFKCT2q+NBi+XEeWKIS vJTJHRfx4vbpOtKprgbPiJgbQDQ0kSlhOMvBraZHsRONx3Sl+UWCNPL7xwwArWd6 kuYw+7QSpapRKa1zMxiOri7NplPWN4wb9i3X3AA6DJQK7Vur5hztcnetl0bsvASF OkewG7rnYa/I6383a8Yd338ocv945Cwh9weC3XEgGLbMyfViSBlHFDzf8YKA7lRz AjTIof+7jLopnM+zF7XWUUU1PF7XhIX7qAy8kHQC8f12CexHvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD48o02muorQWqgBqUXnDDqPsaLVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGFlNDI3OWEtYzRiZC0z MjRlLWE2NmYtNjMwZGQxNDM1MzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ+A4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIn//HYOBiU9DVyvC+T3/GaLura9LA5TDe7Ng2+qeaopg0evAO/DPGey o6in8cJI9PSJor+n9AOEzbtI798SDYUnUFGUlEsnMmVOEhKcx5qFAZ2tcSKVR/7g KOl7E/0GgBvH4vNr0g03EC1mt0FbFZiV3tSXSpwNGgiVg6pICgycynMOTWFRdLmd 9qzj7XbEnBCGHx435qnQJyjSo/IDbF1QQS6ttKHv7eO1US5mx3/KBOWlMOcZPe3A 8GC/M/5YeO+XqeiFncNlHqpK0uYh13laapbKbjuzRWF2zqNBZTi1oVk6IuEbekBC M2MTsIz0P27LmXue3bmVdCIuAYU0/2g= -----END CERTIFICATE-----Generated at Wed Aug 6 04:08:41 2025 by rpki-client