$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a15dd1fc-a5e6-3111-ac70-b3161353326b.roa File: a15dd1fc-a5e6-3111-ac70-b3161353326b.roa (raw, json) Hash identifier: E9C7qv4xJ/xglWyMGmYRWsAZS9zTloeQ715zIcXLiKQ= Subject key identifier: 3B:DE:BA:A3:1C:0C:F2:C0:B0:A1:52:84:1E:DF:2D:01:C6:3F:CC:74 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A9E9646BC95CAF121DF978D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a15dd1fc-a5e6-3111-ac70-b3161353326b.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 67.141.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:46:bc:95:ca:f1:21:df:97:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=e00e4e5a-8cdb-44e5-a30e-6e8f7196a6fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b5:44:2d:b0:3b:4b:83:fd:8c:f1:b1:85:73: e2:a8:26:b8:e6:c5:4e:e3:bb:bc:6a:f7:bc:d0:ed: 87:ba:14:a7:9a:cc:62:2e:a0:e9:12:24:8c:60:cf: 1f:fa:e6:7c:c6:26:ba:24:3c:05:4c:de:4e:05:ee: 3d:ad:e0:8e:71:40:04:a5:12:a3:34:0d:78:f2:d6: 6c:df:84:15:38:57:84:c3:53:14:3d:0e:cf:f5:89: a3:0a:04:54:08:f0:67:d3:2d:8e:f4:ad:5e:ce:e4: d8:b2:07:98:79:eb:4e:01:39:1c:2c:20:3d:5e:90: bb:fd:ec:dd:02:bb:fa:ea:a3:74:3d:29:e7:8b:2d: 75:ac:3c:67:6b:f6:6f:b6:bc:fd:ab:af:44:7c:e8: 03:f7:cd:a8:0d:8c:ac:b8:8a:7b:a5:4d:eb:70:26: 0f:43:01:26:d2:b8:5d:da:4e:1e:49:07:f9:33:34: e9:39:89:54:f3:24:58:55:b9:bd:75:c9:a1:4f:cd: 30:ad:22:9f:13:07:f4:6a:ad:37:02:8e:e6:3d:b5: 58:58:5f:c7:92:7d:af:70:e9:02:90:d9:70:fb:1e: 1f:ca:f5:22:56:61:cd:58:5e:47:26:47:e7:96:fe: 51:50:5f:b4:d7:e3:61:97:cf:e7:d0:29:35:d8:1d: 28:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DE:BA:A3:1C:0C:F2:C0:B0:A1:52:84:1E:DF:2D:01:C6:3F:CC:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a15dd1fc-a5e6-3111-ac70-b3161353326b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:b7:7b:c8:62:24:fd:5d:44:43:38:bc:6e:68:63:68:d0:f4: d0:3d:12:13:fd:22:59:7b:55:7f:8e:e1:d5:cf:8f:b1:b8:48: b9:d9:06:10:fc:7e:ec:0a:f0:a9:33:3b:8b:93:6b:d4:f2:ea: 40:cd:78:a6:82:5e:54:c7:be:63:35:33:7c:ec:70:84:f7:d0: 0b:2c:f9:a2:2a:25:73:42:10:ce:6f:cc:ca:6d:43:7d:7f:f8: 50:61:63:1f:7c:3b:29:72:cc:1c:6d:80:10:29:d5:31:6f:6d: 9d:7c:12:10:ea:22:47:61:57:3d:75:7c:e5:09:c2:a1:49:b5: b3:d8:4d:03:eb:91:be:50:cf:81:1e:c5:80:48:4c:d1:8d:4b: 55:da:a0:37:7c:55:62:2a:b8:80:bd:f0:cc:2f:40:fe:60:cd: d5:51:32:7c:f4:74:20:e3:f4:63:a7:37:c6:24:1a:1c:75:e9: ec:9a:51:89:72:80:7c:05:57:06:d3:9d:06:c6:7b:b7:33:23: c5:90:ec:6a:ad:5b:f7:9f:49:75:d6:09:cc:61:cf:6a:49:ad: 67:7a:c4:b5:5e:65:48:96:a3:56:8f:b1:45:1e:2f:13:c7:0a: 5e:27:db:b0:97:69:6e:b9:ff:9d:b9:14:06:05:93:76:0d:99: 13:de:04:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelka8lcrxId+XjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk ZTAwZTRlNWEtOGNkYi00NGU1LWEzMGUtNmU4ZjcxOTZhNmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLVELbA7S4P9jPGxhXPiqCa45sVO47u8ave8 0O2HuhSnmsxiLqDpEiSMYM8f+uZ8xia6JDwFTN5OBe49reCOcUAEpRKjNA148tZs 34QVOFeEw1MUPQ7P9YmjCgRUCPBn0y2O9K1ezuTYsgeYeetOATkcLCA9XpC7/ezd Arv66qN0PSnniy11rDxna/Zvtrz9q69EfOgD982oDYysuIp7pU3rcCYPQwEm0rhd 2k4eSQf5MzTpOYlU8yRYVbm9dcmhT80wrSKfEwf0aq03Ao7mPbVYWF/Hkn2vcOkC kNlw+x4fyvUiVmHNWF5HJkfnlv5RUF+01+Nhl8/n0Ck12B0o8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDveuqMcDPLAsKFShB7fLQHGP8x0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTE1ZGQxZmMtYTVlNi0z MTExLWFjNzAtYjMxNjEzNTMzMjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ436MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJG3e8hiJP1dREM4vG5oY2jQ9NA9EhP9Ill7VX+O4dXPj7G4SLnZBhD8 fuwK8KkzO4uTa9Ty6kDNeKaCXlTHvmM1M3zscIT30Ass+aIqJXNCEM5vzMptQ31/ +FBhYx98OylyzBxtgBAp1TFvbZ18EhDqIkdhVz11fOUJwqFJtbPYTQPrkb5Qz4Ee xYBITNGNS1XaoDd8VWIquIC98MwvQP5gzdVRMnz0dCDj9GOnN8YkGhx16eyaUYly gHwFVwbTnQbGe7czI8WQ7GqtW/efSXXWCcxhz2pJrWd6xLVeZUiWo1aPsUUeLxPH Cl4n27CXaW65/525FAYFk3YNmRPeBLA= -----END CERTIFICATE-----Generated at Wed Aug 6 09:35:30 2025 by rpki-client