$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5514b8f-46aa-3af8-998f-2a0964724887.roa File: b5514b8f-46aa-3af8-998f-2a0964724887.roa (raw, json) Hash identifier: 9v5RrHTRX+J6nA/C0Z5MpFjXV7D2QdnqgWbP0mGAz+8= Subject key identifier: BB:1D:80:D5:F0:32:3A:E0:E8:B3:65:BB:76:8C:A6:C7:C4:EA:8C:01 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D061AD0FF5BA2749D3C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5514b8f-46aa-3af8-998f-2a0964724887.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 207.222.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d0:61:ad:0f:f5:ba:27:49:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=627445cc-6ba9-4bf1-8c71-f14358fcadc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7e:26:c3:48:ae:46:ef:3d:64:8d:0c:93:51: fb:18:1f:b9:31:51:a5:ae:94:de:86:4a:e1:50:1b: 71:1b:fd:a5:60:fa:9f:f4:99:32:31:70:a4:4d:da: f7:29:8c:37:17:0d:38:86:4e:74:29:db:6b:0b:2d: 71:75:8a:88:05:a5:db:97:9b:3b:f4:64:a5:8a:80: ec:23:a0:ef:60:50:64:cf:56:aa:cb:f0:af:fb:01: e4:69:92:37:19:3a:26:66:44:fc:0c:ac:ed:dc:12: cf:9f:d9:ce:33:c0:35:77:25:76:c5:a5:67:71:90: 1e:0d:ca:e1:ef:1b:aa:c2:45:db:50:86:b7:32:27: 53:40:83:85:11:7b:56:68:4c:67:66:02:50:93:fb: 17:12:46:1f:cb:00:61:c9:9e:44:d5:51:8f:c4:de: ac:70:c2:fb:a1:0b:7d:45:c6:cc:21:88:3c:ac:5c: 7b:fe:03:c5:7c:ea:16:aa:68:17:33:d8:34:ff:76: 71:c7:8a:9a:66:8a:49:02:01:83:02:fe:7f:d1:11: d9:f1:94:9d:26:4f:f9:c9:44:b2:59:a7:5a:8a:f8: b4:43:17:99:1f:e7:df:85:f4:71:4e:ae:16:2c:d1: e6:d1:c2:22:ca:c1:56:07:58:68:99:48:dc:27:2f: 7c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1D:80:D5:F0:32:3A:E0:E8:B3:65:BB:76:8C:A6:C7:C4:EA:8C:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5514b8f-46aa-3af8-998f-2a0964724887.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.222.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c4:fd:12:5d:b4:70:92:fe:95:b4:f3:66:ea:38:33:9f:bf: b4:86:2b:c0:02:ba:85:71:74:16:dc:6b:11:3c:4d:01:87:71: 24:86:1f:86:65:35:35:e2:60:ce:de:c6:cb:98:f0:06:4b:76: e4:e1:7b:84:5f:91:e6:bf:62:ad:c2:54:81:ad:bb:cb:45:99: d0:45:b6:a9:19:8c:5a:17:5f:68:8a:a9:b6:f0:0a:58:a9:85: bf:78:e0:21:4a:b0:57:04:1f:34:f7:7d:6d:21:2b:82:6d:4b: 35:f7:79:f4:71:74:65:3f:05:83:fb:33:a9:af:f1:93:d4:4f: dd:25:97:66:92:e9:5d:a9:05:0e:60:ec:51:98:27:be:ab:a0: b0:62:f0:b9:27:02:c1:04:95:c7:92:14:db:7d:af:55:cd:04: d1:07:f3:15:12:de:cb:8d:0c:58:1b:1f:16:5a:73:22:66:73: 81:4b:4f:1d:aa:22:64:5e:65:79:41:8f:78:b8:84:d1:11:54: 86:29:c4:f5:71:e8:23:d8:05:a3:62:82:7f:5f:b0:26:72:33: 16:5f:5a:80:96:e5:8d:f3:c7:41:a2:93:28:c6:0a:97:52:f0: 3e:ef:fe:fb:15:31:02:99:ea:b2:17:4f:61:e1:6c:40:b0:b7: b8:0b:bb:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNBhrQ/1uidJ08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NjI3NDQ1Y2MtNmJhOS00YmYxLThjNzEtZjE0MzU4ZmNhZGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn34mw0iuRu89ZI0Mk1H7GB+5MVGlrpTehkrh UBtxG/2lYPqf9JkyMXCkTdr3KYw3Fw04hk50KdtrCy1xdYqIBaXbl5s79GSlioDs I6DvYFBkz1aqy/Cv+wHkaZI3GTomZkT8DKzt3BLPn9nOM8A1dyV2xaVncZAeDcrh 7xuqwkXbUIa3MidTQIOFEXtWaExnZgJQk/sXEkYfywBhyZ5E1VGPxN6scML7oQt9 RcbMIYg8rFx7/gPFfOoWqmgXM9g0/3Zxx4qaZopJAgGDAv5/0RHZ8ZSdJk/5yUSy Wadaivi0QxeZH+ffhfRxTq4WLNHm0cIiysFWB1homUjcJy98GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsdgNXwMjrg6LNlu3aMpsfE6owBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjU1MTRiOGYtNDZhYS0z YWY4LTk5OGYtMmEwOTY0NzI0ODg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz96gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnE/RJdtHCS/pW082bqODOfv7SGK8ACuoVxdBbcaxE8TQGHcSSGH4Zl NTXiYM7exsuY8AZLduThe4Rfkea/Yq3CVIGtu8tFmdBFtqkZjFoXX2iKqbbwClip hb944CFKsFcEHzT3fW0hK4JtSzX3efRxdGU/BYP7M6mv8ZPUT90ll2aS6V2pBQ5g 7FGYJ76roLBi8LknAsEElceSFNt9r1XNBNEH8xUS3suNDFgbHxZacyJmc4FLTx2q ImReZXlBj3i4hNERVIYpxPVx6CPYBaNign9fsCZyMxZfWoCW5Y3zx0GikyjGCpdS 8D7v/vsVMQKZ6rIXT2HhbECwt7gLu5M= -----END CERTIFICATE-----Generated at Wed Aug 6 10:18:45 2025 by rpki-client