$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9771780-1f74-3dc7-89c8-b8e9fa3b7c22.roa File: c9771780-1f74-3dc7-89c8-b8e9fa3b7c22.roa (raw, json) Hash identifier: /Kd3dv6DsN9EaZwqLYZ1ofEQo9ZXoMi4LonKmy4w4p4= Subject key identifier: C8:8E:16:92:71:CF:14:4D:AB:B9:63:89:8F:1B:41:C5:9E:5E:7D:64 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0F947D5CFDBB4B755C100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9771780-1f74-3dc7-89c8-b8e9fa3b7c22.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 69.40.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:f9:47:d5:cf:db:b4:b7:55:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=9b335381-e9b5-48e2-beed-82de5b6ab6e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5c:d8:7a:60:7c:a6:ed:d3:df:a4:e6:3e:55: 98:ed:a3:84:ae:be:01:8a:28:e6:40:c4:14:c5:7e: 53:e0:e6:28:c8:02:b8:97:a1:5e:35:44:95:bd:11: e8:72:ef:f0:79:b3:c9:14:44:3e:71:80:98:2f:11: ba:5e:7d:74:23:45:e6:eb:2e:b3:c1:97:5d:77:7c: b0:0e:3c:7f:5a:ae:83:9d:c2:82:b8:c8:ff:e6:9d: b4:ee:c1:71:51:4d:03:07:03:a5:22:45:a7:6f:b2: c6:52:9a:97:b7:e7:05:b7:ec:3c:f1:d6:f7:b0:7d: 97:23:3e:98:93:76:d2:42:d0:fb:98:f0:b4:20:20: 8b:35:ab:fc:8b:33:64:1f:4e:e2:a0:ea:cf:99:38: 27:0a:55:45:ef:45:84:2a:10:88:2b:f8:09:7b:f9: d2:18:f4:4d:37:b4:81:07:90:0b:c7:52:5e:27:c1: e1:41:77:ee:9a:93:6d:4c:ae:94:35:ab:ac:a0:88: 58:4e:5b:82:9b:ee:cf:9c:69:3d:73:77:a7:0f:7d: c1:a2:9e:67:4b:64:d0:dc:d8:ea:94:9f:0b:0f:94: 6e:20:45:52:ee:39:07:21:57:ac:6f:d0:70:5a:9d: b4:f8:34:48:2c:8d:9c:f1:f0:37:86:b5:88:76:f8: 02:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8E:16:92:71:CF:14:4D:AB:B9:63:89:8F:1B:41:C5:9E:5E:7D:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9771780-1f74-3dc7-89c8-b8e9fa3b7c22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:6e:c0:1e:94:51:6d:28:64:a6:d2:c8:46:9d:d7:b7:0a:97: 02:4f:c6:b1:6e:7b:32:c9:7a:42:0b:b2:ec:d4:e8:d1:5e:81: 1b:bd:19:27:6c:00:61:b2:3f:9d:7d:b0:a6:a3:6c:e2:bf:b7: c5:77:7e:bd:4f:45:a6:3b:a3:a8:da:04:fd:45:f6:fe:4f:a0: fc:02:8d:76:d6:e4:5d:29:fa:4c:3a:b7:fa:dc:d9:1d:d7:15: 9a:c7:d1:41:2e:04:b8:f3:8d:b5:97:30:4b:01:37:a4:ab:0f: 03:76:98:ad:5d:cb:ec:79:b9:05:45:b5:c6:78:0b:d0:5d:5e: 64:05:30:05:f8:76:7d:1c:07:0b:17:eb:43:34:7e:d4:cc:0c: c4:7c:a1:17:fd:c0:ec:a5:0b:52:78:4d:b1:24:f3:20:61:1c: 6f:0f:6d:02:79:b0:88:6b:5e:d1:72:e7:db:53:5b:30:dd:a8: 2a:4a:a4:f0:b1:4d:f8:fa:b3:4d:67:7b:9a:fa:d0:15:3d:65: e0:15:36:53:76:95:ec:57:b6:e1:12:e8:ea:06:2e:f4:6c:81: 92:84:ae:29:3a:d7:0f:56:69:ab:26:93:c5:e2:bb:4b:de:17: 5a:e0:6c:61:9f:fd:81:db:ab:b2:12:89:61:aa:20:d5:8d:56: e7:0c:21:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoPlH1c/btLdVwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk OWIzMzUzODEtZTliNS00OGUyLWJlZWQtODJkZTViNmFiNmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglzYemB8pu3T36TmPlWY7aOErr4BiijmQMQU xX5T4OYoyAK4l6FeNUSVvRHocu/webPJFEQ+cYCYLxG6Xn10I0Xm6y6zwZddd3yw Djx/Wq6DncKCuMj/5p207sFxUU0DBwOlIkWnb7LGUpqXt+cFt+w88db3sH2XIz6Y k3bSQtD7mPC0ICCLNav8izNkH07ioOrPmTgnClVF70WEKhCIK/gJe/nSGPRNN7SB B5ALx1JeJ8HhQXfumpNtTK6UNausoIhYTluCm+7PnGk9c3enD33Bop5nS2TQ3Njq lJ8LD5RuIEVS7jkHIVesb9BwWp20+DRILI2c8fA3hrWIdvgC3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiOFpJxzxRNq7ljiY8bQcWeXn1kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzk3NzE3ODAtMWY3NC0z ZGM3LTg5YzgtYjhlOWZhM2I3YzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRSjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9uwB6UUW0oZKbSyEad17cKlwJPxrFuezLJekILsuzU6NFegRu9GSds AGGyP519sKajbOK/t8V3fr1PRaY7o6jaBP1F9v5PoPwCjXbW5F0p+kw6t/rc2R3X FZrH0UEuBLjzjbWXMEsBN6SrDwN2mK1dy+x5uQVFtcZ4C9BdXmQFMAX4dn0cBwsX 60M0ftTMDMR8oRf9wOylC1J4TbEk8yBhHG8PbQJ5sIhrXtFy59tTWzDdqCpKpPCx Tfj6s01ne5r60BU9ZeAVNlN2lexXtuES6OoGLvRsgZKErik61w9Waasmk8Xiu0ve F1rgbGGf/YHbq7ISiWGqINWNVucMIV8= -----END CERTIFICATE-----Generated at Mon Aug 4 16:02:48 2025 by rpki-client