$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a677863b-73f8-3ff1-aac2-8aed56a3754b.roa File: a677863b-73f8-3ff1-aac2-8aed56a3754b.roa (raw, json) Hash identifier: YJV1as96aFiB1sOhSB8GxtlCTBR+yTpS4Y9chSHUt6U= Subject key identifier: B3:02:08:E7:2E:D3:27:A7:68:39:17:B1:AE:DD:3A:80:0C:60:14:DB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0CA18BBF06A30A83D5980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a677863b-73f8-3ff1-aac2-8aed56a3754b.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 66.217.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ca:18:bb:f0:6a:30:a8:3d:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=40df3ec9-c4e7-425a-b0a9-e2ea279d26bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2b:59:50:8a:8e:27:cf:76:3e:3a:7d:74:69: 94:28:08:28:74:69:5c:2e:f2:ba:c2:32:09:42:ce: ae:ed:8a:78:fb:29:85:bc:2b:8a:37:0c:26:b9:a4: 1b:ca:d5:30:8c:c0:68:27:1f:24:a1:44:af:ee:5c: 07:c7:ab:32:db:a0:fd:a3:43:8f:6e:a9:c7:09:7f: aa:42:5b:98:e0:04:53:d7:1e:bf:a2:f0:f3:1a:60: ac:19:04:a3:14:ae:14:29:3e:36:5d:e0:b6:92:b4: 89:15:ae:9f:96:0f:ef:53:06:dd:bf:a6:21:45:bf: 47:d2:0e:dc:f1:96:4b:b8:c6:45:56:e1:f9:dc:5e: cd:08:fd:f2:73:b5:8f:60:dd:ff:71:6c:89:64:97: 47:0b:65:b1:b2:0f:20:ab:09:4b:fb:6b:b0:3f:31: 9f:fa:ef:4c:80:f8:51:9d:7e:a7:a9:c0:16:e0:ae: 4d:60:3a:8e:f2:fe:14:9c:29:bf:b0:03:db:36:fe: 8d:e8:f3:0a:d3:8c:54:e3:6b:57:67:c3:82:58:0b: 1f:e2:d7:be:e5:f6:f5:15:9b:fc:24:73:9c:86:60: 8a:85:a0:c0:e4:49:1e:c9:67:45:88:f6:66:ca:d7: e0:34:10:97:78:bc:39:6f:78:21:11:b0:2b:f7:ee: 23:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:02:08:E7:2E:D3:27:A7:68:39:17:B1:AE:DD:3A:80:0C:60:14:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a677863b-73f8-3ff1-aac2-8aed56a3754b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.217.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:fe:b6:bb:bd:cc:28:e9:49:94:15:b7:10:57:26:49:11:6f: d6:62:33:36:bb:16:78:82:41:57:94:db:9d:aa:89:15:b3:78: ed:91:91:98:2e:4a:a8:d9:2d:35:a8:84:e7:33:be:a6:7a:c0: 27:b9:71:84:a4:5d:26:c6:91:a2:b1:24:19:5e:8e:97:de:6a: 7a:b9:e6:f7:76:8e:97:a4:22:73:51:c1:fa:83:0c:21:54:e0: 1c:c4:2d:50:43:ea:be:67:6f:c4:26:81:16:07:a0:8d:df:91: 19:45:12:7f:ab:a3:e7:fd:95:01:22:6f:87:4b:8b:5c:af:05: 71:6b:14:87:fd:b3:ce:96:78:3e:2b:54:e8:b7:1c:33:67:ba: 52:68:68:26:c4:4f:64:4a:d2:1c:b8:59:16:8b:a1:08:06:8b: 64:64:d0:19:87:88:83:9d:1e:e1:5c:6c:7a:59:55:88:01:91: 13:00:00:c8:8d:4f:e0:9d:05:2d:e4:ca:06:b5:37:5e:47:08: 71:a0:c3:8a:53:8d:49:cb:1c:48:85:e3:3a:2f:20:bf:d6:9b: 6d:2b:88:8c:f5:a4:21:ec:f0:05:fb:1f:49:05:87:e0:53:1e: 7f:70:c2:15:c1:cd:8f:e3:01:f4:70:0c:19:dc:9e:71:91:07: 09:58:08:6e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqQoMoYu/BqMKg9WYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NDBkZjNlYzktYzRlNy00MjVhLWIwYTktZTJlYTI3OWQyNmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApitZUIqOJ892Pjp9dGmUKAgodGlcLvK6wjIJ Qs6u7Yp4+ymFvCuKNwwmuaQbytUwjMBoJx8koUSv7lwHx6sy26D9o0OPbqnHCX+q QluY4ART1x6/ovDzGmCsGQSjFK4UKT42XeC2krSJFa6flg/vUwbdv6YhRb9H0g7c 8ZZLuMZFVuH53F7NCP3yc7WPYN3/cWyJZJdHC2Wxsg8gqwlL+2uwPzGf+u9MgPhR nX6nqcAW4K5NYDqO8v4UnCm/sAPbNv6N6PMK04xU42tXZ8OCWAsf4te+5fb1FZv8 JHOchmCKhaDA5EkeyWdFiPZmytfgNBCXeLw5b3ghEbAr9+4j3wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLMCCOcu0yenaDkXsa7dOoAMYBTbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTY3Nzg2M2ItNzNmOC0z ZmYxLWFhYzItOGFlZDU2YTM3NTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQtkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAdf62u73MKOlJlBW3EFcmSRFv1mIzNrsWeIJBV5TbnaqJFbN47ZGRmC5K qNktNaiE5zO+pnrAJ7lxhKRdJsaRorEkGV6Ol95qernm93aOl6Qic1HB+oMMIVTg HMQtUEPqvmdvxCaBFgegjd+RGUUSf6uj5/2VASJvh0uLXK8FcWsUh/2zzpZ4PitU 6LccM2e6UmhoJsRPZErSHLhZFouhCAaLZGTQGYeIg50e4VxsellViAGREwAAyI1P 4J0FLeTKBrU3XkcIcaDDilONScscSIXjOi8gv9abbSuIjPWkIezwBfsfSQWH4FMe f3DCFcHNj+MB9HAMGdyecZEHCVgIbg== -----END CERTIFICATE-----Generated at Wed Aug 6 00:55:54 2025 by rpki-client