$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf79479d-0990-3363-b8f2-7fae6b057a0c.roa File: cf79479d-0990-3363-b8f2-7fae6b057a0c.roa (raw, json) Hash identifier: a/31qjMyRAdtOxxGQcoFWi5ExX0VuLjSQ7+Bh4NmEps= Subject key identifier: 6A:4A:EF:A2:65:A0:D2:B6:42:36:37:07:59:51:69:F7:21:B1:33:75 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0CAB93313A2B6E30A3300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf79479d-0990-3363-b8f2-7fae6b057a0c.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 67.217.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ca:b9:33:13:a2:b6:e3:0a:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=0c827332-9e94-4df6-8dab-c91dca84a819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3e:4e:31:64:c7:18:4a:ef:cf:ab:0d:39:96: 1f:b7:1f:b4:10:2e:17:c2:91:bd:e3:0f:74:83:49: 9c:db:1a:33:ee:4d:1e:dc:9f:91:cb:34:82:85:e5: da:40:c1:f1:54:4e:0e:b8:67:ed:63:51:48:71:1c: 2a:bd:40:53:9b:99:17:37:9c:23:b1:2f:76:01:2a: 0f:cc:6e:a8:47:4d:88:e3:48:c0:11:a9:ad:98:d0: 21:18:d9:9d:2d:67:f8:fc:aa:19:cc:8e:52:79:26: cb:03:a0:ef:4a:f1:37:61:32:5d:dc:79:b9:8a:3a: a2:a1:9b:e3:b3:21:2c:5e:e2:c0:d2:ac:5e:fe:30: cd:43:50:6f:e5:90:8c:b5:f2:df:92:8f:4a:98:57: 16:c5:63:08:21:cd:5a:11:bc:bb:e6:84:75:ac:f4: d9:b2:ae:12:cc:be:e2:a2:71:76:79:a6:65:8c:b7: 36:86:db:86:7a:e9:5e:f4:c3:e6:7c:af:1f:a5:71: 25:f3:d6:24:e6:20:90:5e:4c:c7:07:3c:0d:aa:21: e2:c7:52:d9:ad:d6:54:17:36:d4:c9:16:f9:6c:7d: c2:9e:c1:52:11:ce:a4:55:5f:6c:7a:ba:50:eb:19: 81:2c:db:bd:1b:55:ef:dd:5d:16:99:cd:d1:f1:86: da:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4A:EF:A2:65:A0:D2:B6:42:36:37:07:59:51:69:F7:21:B1:33:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf79479d-0990-3363-b8f2-7fae6b057a0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.217.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:79:81:49:02:52:15:0b:1a:0c:be:aa:f9:a9:da:93:62:32: d7:6c:7e:4e:fb:b9:88:a8:4b:ba:d0:49:c2:11:6a:00:a8:7a: 00:18:92:65:77:51:ba:19:85:f7:08:a1:87:d3:1f:14:f1:0a: 11:0e:cd:7d:17:4b:50:81:d3:8c:63:4c:7f:65:42:d8:a6:d4: e8:44:07:ca:0d:85:db:7c:8a:f0:5d:38:a4:d5:0f:82:39:35: d6:20:bd:00:bc:d2:b2:23:cd:88:24:ab:68:37:21:c3:41:0a: 08:23:fd:8b:01:77:3c:3a:d1:bb:dc:e9:a4:3e:d6:29:62:21: 9e:26:cd:68:9d:78:dd:bf:e6:76:50:e0:57:31:48:3d:0b:0b: fe:5d:81:a0:56:ac:69:04:0f:da:85:8c:a4:ad:50:5f:05:f7: 2b:a8:0c:0a:0a:89:f3:64:05:43:34:46:85:87:1f:3d:7f:f3: e1:4b:03:72:1e:17:c5:a6:28:9e:b2:e1:2e:36:b6:a3:59:f4: 80:85:52:7a:0f:3e:8a:a9:d2:6c:6d:ef:16:fd:7d:1d:74:5d: ff:65:5d:01:5f:33:b2:97:46:73:47:63:10:19:da:b7:8a:69: 66:1a:7d:fe:46:b9:9d:ab:12:25:3a:91:1b:2c:cc:77:64:01: d5:85:83:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoMq5MxOituMKMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MGM4MjczMzItOWU5NC00ZGY2LThkYWItYzkxZGNhODRhODE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD5OMWTHGErvz6sNOZYftx+0EC4XwpG94w90 g0mc2xoz7k0e3J+RyzSCheXaQMHxVE4OuGftY1FIcRwqvUBTm5kXN5wjsS92ASoP zG6oR02I40jAEamtmNAhGNmdLWf4/KoZzI5SeSbLA6DvSvE3YTJd3Hm5ijqioZvj syEsXuLA0qxe/jDNQ1Bv5ZCMtfLfko9KmFcWxWMIIc1aEby75oR1rPTZsq4SzL7i onF2eaZljLc2htuGeule9MPmfK8fpXEl89Yk5iCQXkzHBzwNqiHix1LZrdZUFzbU yRb5bH3CnsFSEc6kVV9serpQ6xmBLNu9G1Xv3V0Wmc3R8YbaKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpK76JloNK2QjY3B1lRafchsTN1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2Y3OTQ3OWQtMDk5MC0z MzYzLWI4ZjItN2ZhZTZiMDU3YTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9mBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEV5gUkCUhULGgy+qvmp2pNiMtdsfk77uYioS7rQScIRagCoegAYkmV3 UboZhfcIoYfTHxTxChEOzX0XS1CB04xjTH9lQtim1OhEB8oNhdt8ivBdOKTVD4I5 NdYgvQC80rIjzYgkq2g3IcNBCggj/YsBdzw60bvc6aQ+1iliIZ4mzWideN2/5nZQ 4FcxSD0LC/5dgaBWrGkED9qFjKStUF8F9yuoDAoKifNkBUM0RoWHHz1/8+FLA3Ie F8WmKJ6y4S42tqNZ9ICFUnoPPoqp0mxt7xb9fR10Xf9lXQFfM7KXRnNHYxAZ2reK aWYaff5GuZ2rEiU6kRsszHdkAdWFg6I= -----END CERTIFICATE-----Generated at Wed Aug 6 16:24:43 2025 by rpki-client