$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c459f915-3c82-3272-9093-be4a7995fca4.roa File: c459f915-3c82-3272-9093-be4a7995fca4.roa (raw, json) Hash identifier: nRq5HjPIEJPRw0t8qW2jl5gOntH/lhvNMJfg7PXgaRQ= Subject key identifier: 85:03:85:22:62:17:31:CC:CC:AB:51:C3:C9:7A:C5:21:E2:22:5B:F5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0DD5A9705247794B9AC00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c459f915-3c82-3272-9093-be4a7995fca4.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 71.7.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:dd:5a:97:05:24:77:94:b9:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=bf88e333-bc5f-42c3-9faa-8cfeeeb5fe77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ef:76:9a:4d:7e:33:3a:35:6f:5d:97:a2:94: 4e:86:1b:97:33:ad:7f:41:33:20:fc:09:a9:ae:24: e2:8e:06:1b:3f:51:75:14:4c:bc:af:9f:b7:6a:2a: 35:5f:f4:6c:6d:cf:86:12:37:70:a2:b9:d8:fd:56: 45:68:4c:23:a2:52:d8:c7:3f:aa:62:01:b6:a8:19: fe:4d:85:ba:8f:b0:10:1e:77:b3:d8:4f:3c:41:d8: 08:8e:31:cf:12:d7:ad:b2:28:7e:d8:b5:e6:5e:a0: 7e:52:10:ea:6a:60:1e:9a:e2:77:e5:e7:95:a9:a6: 0c:0f:de:e2:e2:2a:5d:38:d8:ef:b9:25:0e:21:24: 36:52:8f:b3:74:1d:44:e6:80:3f:27:e4:f5:ac:5a: c5:b9:2b:9d:84:79:72:42:9e:c7:d5:ba:ad:80:79: 46:d9:f3:cc:bb:33:63:55:ed:fa:46:08:71:be:48: a9:5c:07:2c:d0:ba:b2:c1:46:a9:f3:d7:9d:a1:b2: 71:7c:ee:9f:13:07:0a:87:ef:0a:ec:c4:84:9c:66: ec:48:5f:c6:ad:85:1b:f5:dc:07:ec:14:8f:bd:0f: 6b:1d:b2:7b:0d:bb:90:4f:ad:71:4b:30:07:c7:ca: 27:28:67:a7:80:13:1c:2f:53:1a:be:d6:82:76:16: 72:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:03:85:22:62:17:31:CC:CC:AB:51:C3:C9:7A:C5:21:E2:22:5B:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c459f915-3c82-3272-9093-be4a7995fca4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.7.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:4f:69:12:70:6e:55:41:f6:da:f3:06:cf:31:b1:5c:1a:6e: 3e:ec:ad:eb:14:37:cf:e7:b8:0e:89:70:09:40:43:0a:74:a2: 53:f7:55:5c:99:cb:e8:f9:8b:b4:96:69:fc:4e:27:e9:4d:01: 57:80:af:ef:da:51:94:39:83:b0:56:91:6f:77:8f:05:fc:bf: 1c:b3:7f:5b:74:8f:19:12:50:ee:76:a2:25:48:30:57:85:dc: 18:59:31:5c:53:e8:18:e8:44:fd:6b:3a:63:84:8d:2b:94:59: f4:89:bb:bd:e1:3c:a2:9a:91:16:80:b5:91:31:ce:e4:21:11: c9:fd:db:ac:40:97:8a:d5:10:38:e2:4a:d2:79:11:4a:ea:c7: 70:56:29:21:d9:4e:fc:75:a9:ff:7b:ee:e8:e7:e4:b0:af:11: 9d:f4:64:74:f2:9f:60:be:29:4e:73:30:c1:eb:99:6b:3e:38: 06:66:5d:e5:27:4f:cf:5b:37:9f:32:dc:09:cb:91:48:20:6e: 43:65:be:dd:5e:ed:8c:8d:6d:84:5e:e4:43:9c:67:7e:54:0a: 75:2b:a2:a5:8e:b2:0c:30:e8:38:a2:86:00:ed:58:b7:6b:86: 55:1c:ce:99:34:b0:7d:53:b9:94:b2:38:c4:fb:4a:94:2c:9a: cd:ce:99:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoN1alwUkd5S5rAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YmY4OGUzMzMtYmM1Zi00MmMzLTlmYWEtOGNmZWVlYjVmZTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiO92mk1+Mzo1b12XopROhhuXM61/QTMg/Amp riTijgYbP1F1FEy8r5+3aio1X/Rsbc+GEjdwornY/VZFaEwjolLYxz+qYgG2qBn+ TYW6j7AQHnez2E88QdgIjjHPEtetsih+2LXmXqB+UhDqamAemuJ35eeVqaYMD97i 4ipdONjvuSUOISQ2Uo+zdB1E5oA/J+T1rFrFuSudhHlyQp7H1bqtgHlG2fPMuzNj Ve36RghxvkipXAcs0LqywUap89edobJxfO6fEwcKh+8K7MSEnGbsSF/GrYUb9dwH 7BSPvQ9rHbJ7DbuQT61xSzAHx8onKGengBMcL1MavtaCdhZyvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUDhSJiFzHMzKtRw8l6xSHiIlv1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzQ1OWY5MTUtM2M4Mi0z MjcyLTkwOTMtYmU0YTc5OTVmY2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERwdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxPaRJwblVB9trzBs8xsVwabj7sresUN8/nuA6JcAlAQwp0olP3VVyZ y+j5i7SWafxOJ+lNAVeAr+/aUZQ5g7BWkW93jwX8vxyzf1t0jxkSUO52oiVIMFeF 3BhZMVxT6BjoRP1rOmOEjSuUWfSJu73hPKKakRaAtZExzuQhEcn926xAl4rVEDji StJ5EUrqx3BWKSHZTvx1qf977ujn5LCvEZ30ZHTyn2C+KU5zMMHrmWs+OAZmXeUn T89bN58y3AnLkUggbkNlvt1e7YyNbYRe5EOcZ35UCnUroqWOsgww6DiihgDtWLdr hlUczpk0sH1TuZSyOMT7SpQsms3Omak= -----END CERTIFICATE-----Generated at Fri Aug 8 10:13:06 2025 by rpki-client