$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c5c6fc8d-0631-3362-814c-d43baf1c89a0.roa File: c5c6fc8d-0631-3362-814c-d43baf1c89a0.roa (raw, json) Hash identifier: NX2CNmXJ3xyqOqJcNTWajyRGNQLgKWNQOM0Z/GHT+2o= Subject key identifier: 74:E3:69:D7:8D:F0:27:F3:85:47:47:A5:EF:5F:96:39:1E:F5:FC:72 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ABD4BB55CA16CFCFF9FCF2980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c5c6fc8d-0631-3362-814c-d43baf1c89a0.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 7029 IP address blocks: 67.219.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:b5:5c:a1:6c:fc:ff:9f:cf:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=dc904af3-2a72-4156-9f57-5eba195d3b0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:73:ee:5c:7f:d9:6a:9e:8a:18:f3:ff:05:a4: 63:36:14:6c:f1:35:5d:f7:53:de:21:cd:4f:67:82: 9a:35:9e:cb:30:0d:83:9d:6f:72:67:ee:39:c8:86: ea:e1:45:32:47:f3:0b:a5:f4:5d:6c:1f:47:1c:49: f1:96:3c:f3:27:0a:d8:17:37:a4:0a:2f:27:b1:88: a9:28:3c:bb:c4:e3:80:92:33:6d:be:5b:ad:e4:1c: 3c:17:86:e5:30:93:ed:c7:82:a8:b9:a1:bc:2f:2f: 36:15:70:60:4a:15:3f:b0:53:02:08:e8:12:a9:c2: da:e4:32:3f:3c:c3:3d:91:88:08:19:eb:19:02:80: ca:88:86:b7:bb:1d:c0:83:8a:57:61:5d:d9:0e:ac: fa:60:c3:3b:4a:bd:13:f5:7f:5f:eb:84:9e:7b:e6: 18:13:34:60:91:d1:2a:a6:e5:7d:32:c6:06:67:31: ea:ce:e3:48:69:c6:ad:f0:22:42:15:5b:b0:e1:5a: 18:09:45:56:75:fa:5f:af:1e:28:07:a1:4a:c8:c8: 29:97:4a:fb:c2:5f:d6:da:f5:2f:31:29:68:4c:7c: d4:1c:93:2b:76:6d:5b:e4:dd:c0:2b:d1:43:38:33: ce:89:c3:6f:f7:05:39:eb:01:8f:04:8c:d6:99:a6: 76:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E3:69:D7:8D:F0:27:F3:85:47:47:A5:EF:5F:96:39:1E:F5:FC:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c5c6fc8d-0631-3362-814c-d43baf1c89a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.219.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:11:66:b3:52:70:46:3b:72:ad:44:36:84:e0:63:19:b1:29: 53:30:58:5c:57:b6:b5:a7:ce:47:e0:fd:42:70:3d:63:46:60: 9c:3d:3a:32:40:9a:0f:d2:46:10:c1:01:19:b5:b3:c0:5f:fc: 9c:f0:f0:21:21:70:d6:80:19:2f:12:c7:2a:f5:77:ff:b4:ed: 23:d0:7f:91:86:3b:15:d8:ed:af:51:f7:39:dd:45:d7:9c:e2: 7b:aa:51:a0:d2:b4:f9:5b:a0:77:15:b0:2b:27:a5:d5:fa:d2: 49:dd:a4:07:fc:0e:13:82:44:cb:56:d5:66:c0:75:1a:d9:9a: bf:11:bc:71:62:87:d3:b0:76:92:b4:44:5e:b8:3d:9c:76:74: b2:16:60:99:88:fe:5f:b4:bc:d1:86:52:bd:84:0d:3c:35:ad: 95:74:28:57:f0:e4:11:5f:a9:4b:96:11:08:4f:8c:c9:f6:53: 31:b9:a8:b8:1f:32:3c:36:51:ca:19:a7:72:07:66:e8:fc:ac: fa:4c:fc:34:1d:82:97:40:f5:ba:2d:43:a0:a6:af:c0:c1:65: ac:eb:6a:c6:b8:8e:64:be:34:bd:f5:4f:6a:81:ac:88:83:07: 06:9f:87:c1:37:33:6f:a7:91:96:17:b5:57:a1:38:35:46:19: 93:c9:ae:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S7VcoWz8/5/PKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZGM5MDRhZjMtMmE3Mi00MTU2LTlmNTctNWViYTE5NWQzYjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXPuXH/Zap6KGPP/BaRjNhRs8TVd91PeIc1P Z4KaNZ7LMA2DnW9yZ+45yIbq4UUyR/MLpfRdbB9HHEnxljzzJwrYFzekCi8nsYip KDy7xOOAkjNtvlut5Bw8F4blMJPtx4KouaG8Ly82FXBgShU/sFMCCOgSqcLa5DI/ PMM9kYgIGesZAoDKiIa3ux3Ag4pXYV3ZDqz6YMM7Sr0T9X9f64See+YYEzRgkdEq puV9MsYGZzHqzuNIacat8CJCFVuw4VoYCUVWdfpfrx4oB6FKyMgpl0r7wl/W2vUv MSloTHzUHJMrdm1b5N3AK9FDODPOicNv9wU56wGPBIzWmaZ2qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTjadeN8CfzhUdHpe9fljke9fxyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzVjNmZjOGQtMDYzMS0z MzYyLTgxNGMtZDQzYmFmMWM4OWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQ9sgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwRZrNScEY7cq1ENoTgYxmxKVMwWFxXtrWnzkfg/UJwPWNGYJw9OjJA mg/SRhDBARm1s8Bf/Jzw8CEhcNaAGS8Sxyr1d/+07SPQf5GGOxXY7a9R9zndRdec 4nuqUaDStPlboHcVsCsnpdX60kndpAf8DhOCRMtW1WbAdRrZmr8RvHFih9OwdpK0 RF64PZx2dLIWYJmI/l+0vNGGUr2EDTw1rZV0KFfw5BFfqUuWEQhPjMn2UzG5qLgf Mjw2UcoZp3IHZuj8rPpM/DQdgpdA9botQ6Cmr8DBZazrasa4jmS+NL31T2qBrIiD Bwafh8E3M2+nkZYXtVehODVGGZPJrnE= -----END CERTIFICATE-----Generated at Tue Aug 5 16:43:39 2025 by rpki-client