$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7df65b7-c153-31da-af31-3497511aec93.roa File: c7df65b7-c153-31da-af31-3497511aec93.roa (raw, json) Hash identifier: vTOX6eVFZdhVHH0Oo9XbAO/0Bvz8QSwe6w8lAUJwFz8= Subject key identifier: E9:E2:75:A3:08:A9:43:F7:7D:C0:57:1C:4B:AD:64:23:30:4C:5A:8D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB3862A058753AA92BB0C64E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7df65b7-c153-31da-af31-3497511aec93.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 7029 IP address blocks: 67.140.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:2a:05:87:53:aa:92:bb:0c:64:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=bc8ed3d5-b75b-4f7e-a847-758c0951b0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:84:0d:6b:a0:35:c5:24:9c:05:51:cb:92:46: 9c:50:6f:96:e2:d8:4c:14:e1:35:d0:d6:2e:b3:d5: 3c:d7:2a:2f:53:41:27:18:9e:dd:66:67:c1:a9:79: d9:3e:44:2b:1a:21:57:88:60:5b:63:04:be:35:34: 33:36:f9:0b:0e:c4:55:e4:d8:89:00:f7:b4:8f:b1: 67:7d:fc:31:cc:e5:26:ca:c1:71:ca:4e:60:5d:01: d7:01:82:19:98:31:8b:4f:72:3d:5c:a8:07:f5:9e: 32:ea:bc:04:f5:85:61:19:d4:ae:b9:c8:c8:fe:d8: 70:61:d6:f4:87:2b:0b:07:82:25:09:54:6c:b3:1a: a7:57:66:fe:54:ff:c2:6b:c2:fd:cd:d1:ab:24:65: ae:a5:db:12:00:7f:d8:41:ee:b0:63:44:d4:83:7b: e9:c1:48:31:84:b1:bd:af:ed:5b:ff:b7:e6:8a:ea: ad:9d:3a:20:6d:5b:d0:01:03:f7:80:a9:1a:d1:97: 16:83:d5:66:06:4e:6a:17:42:71:0d:37:ba:de:6c: 54:56:2f:8e:e4:e3:19:5b:10:c1:ec:78:76:b4:47: 27:89:bd:6b:cd:d3:09:b6:48:1b:26:7c:95:86:20: 6d:87:e6:09:2d:b4:43:39:52:91:ed:a9:1b:66:5b: 35:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E2:75:A3:08:A9:43:F7:7D:C0:57:1C:4B:AD:64:23:30:4C:5A:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7df65b7-c153-31da-af31-3497511aec93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:47:06:3a:59:de:f6:33:00:cd:c0:a0:6b:37:09:30:fe:cf: 3f:a6:fc:10:48:5a:ee:47:7d:16:47:72:aa:25:c5:c3:28:32: fb:bc:ef:b0:90:d3:2a:3d:6d:83:4a:d3:c5:76:cf:7e:8a:1c: 2c:31:5f:8d:6d:99:83:4f:36:ca:28:ca:77:83:ef:be:f8:37: f3:fa:d7:d0:31:2d:60:46:9f:ad:55:da:e5:9a:42:fa:c1:44: 62:16:9c:78:ad:b0:88:3d:a0:7a:d6:28:b8:f3:86:8e:a8:26: 79:a3:69:58:b9:7f:12:45:11:c9:f9:3d:af:aa:84:3f:18:03: 36:45:96:1d:28:d6:9b:c8:d9:57:8b:17:ea:f6:3a:f4:b4:4d: 95:f1:a4:15:b2:e0:a1:37:dc:3e:01:dd:7d:6c:ad:77:de:87: 7b:5f:39:04:17:95:d8:6e:7d:ea:1d:fc:bc:69:16:ae:b8:fc: 7a:f8:7c:c6:f4:6e:f7:19:d6:1e:71:bf:58:23:9a:33:f0:c2: 1a:75:e6:27:94:84:7b:db:83:53:92:3c:2e:db:13:d6:0c:59: 0a:3b:ab:61:5e:68:82:44:45:1f:b6:98:78:b6:62:62:fc:dc: dc:96:8a:bb:fb:4e:14:e1:88:1c:5f:5d:b2:d3:fc:30:1c:48: 01:b4:db:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhioFh1OqkrsMZOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk YmM4ZWQzZDUtYjc1Yi00ZjdlLWE4NDctNzU4YzA5NTFiMGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoQNa6A1xSScBVHLkkacUG+W4thMFOE10NYu s9U81yovU0EnGJ7dZmfBqXnZPkQrGiFXiGBbYwS+NTQzNvkLDsRV5NiJAPe0j7Fn ffwxzOUmysFxyk5gXQHXAYIZmDGLT3I9XKgH9Z4y6rwE9YVhGdSuucjI/thwYdb0 hysLB4IlCVRssxqnV2b+VP/Ca8L9zdGrJGWupdsSAH/YQe6wY0TUg3vpwUgxhLG9 r+1b/7fmiuqtnTogbVvQAQP3gKka0ZcWg9VmBk5qF0JxDTe63mxUVi+O5OMZWxDB 7Hh2tEcnib1rzdMJtkgbJnyVhiBth+YJLbRDOVKR7akbZls1LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnidaMIqUP3fcBXHEutZCMwTFqNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzdkZjY1YjctYzE1My0z MWRhLWFmMzEtMzQ5NzUxMWFlYzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ4zYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpHBjpZ3vYzAM3AoGs3CTD+zz+m/BBIWu5HfRZHcqolxcMoMvu877CQ 0yo9bYNK08V2z36KHCwxX41tmYNPNsooyneD7774N/P619AxLWBGn61V2uWaQvrB RGIWnHitsIg9oHrWKLjzho6oJnmjaVi5fxJFEcn5Pa+qhD8YAzZFlh0o1pvI2VeL F+r2OvS0TZXxpBWy4KE33D4B3X1srXfeh3tfOQQXldhufeod/LxpFq64/Hr4fMb0 bvcZ1h5xv1gjmjPwwhp15ieUhHvbg1OSPC7bE9YMWQo7q2FeaIJERR+2mHi2YmL8 3NyWirv7ThThiBxfXbLT/DAcSAG02w4= -----END CERTIFICATE-----Generated at Wed Aug 6 10:21:33 2025 by rpki-client