$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dab53c89-6c1e-3b4d-8d1c-41ca2b54bd3e.roa File: dab53c89-6c1e-3b4d-8d1c-41ca2b54bd3e.roa (raw, json) Hash identifier: 2obimvCa7ywgFd/fbrmHI99gba2xCIdbi/u7CPyVh/w= Subject key identifier: C4:CB:45:8E:0B:4D:65:29:F1:58:E9:27:26:5C:CA:B8:A7:21:6D:9C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0FF8E967B3ED2CFFB0D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dab53c89-6c1e-3b4d-8d1c-41ca2b54bd3e.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 207.59.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ff:8e:96:7b:3e:d2:cf:fb:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=728d2c54-1cd7-428e-865a-562a76e45aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:63:6e:41:10:27:2c:9e:76:1e:dd:59:89:4a: 29:a0:29:b1:1e:4d:85:e8:33:12:a3:47:0f:7b:42: 86:7a:89:f5:e6:30:43:4c:f9:7c:db:5e:76:60:19: ad:67:b3:f5:21:21:66:20:c5:ce:2a:b6:af:da:b2: 87:35:97:58:d9:00:63:4e:a0:b8:f4:a2:ea:db:75: ba:76:fe:5c:88:a7:61:97:56:4f:fe:33:fd:45:d2: 47:ed:6b:ac:c7:f8:a9:64:4b:78:58:e5:07:b7:23: 01:b8:a6:27:af:3a:aa:ef:7d:8c:e4:b9:c9:34:3f: 7f:d7:be:4f:dd:f6:d0:43:f1:dc:62:75:84:1f:af: 26:7f:ff:1b:88:f5:4d:b0:34:f9:3a:78:fb:ae:be: c4:9a:96:44:f7:01:c2:93:9a:71:52:2b:3a:70:0d: 03:c0:6d:e2:f5:fd:0b:03:30:26:fd:ac:1e:03:0b: db:b5:98:43:39:f5:96:30:dd:e9:2d:2a:25:ee:7d: c5:5b:d1:60:5f:a5:18:20:a4:55:75:c7:10:de:a4: a0:8c:12:ef:d5:a3:77:22:0c:b6:b7:26:29:20:48: 86:5b:d9:b9:80:28:b0:4e:93:16:45:b5:c8:ac:2e: 68:52:a8:8d:9e:8d:53:31:11:d1:3f:fd:2a:bc:11: c8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CB:45:8E:0B:4D:65:29:F1:58:E9:27:26:5C:CA:B8:A7:21:6D:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dab53c89-6c1e-3b4d-8d1c-41ca2b54bd3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.59.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:e4:75:eb:37:b5:35:59:50:b4:38:32:92:b5:9a:0c:b6:ce: 4d:aa:ef:35:d0:66:ad:ae:14:34:ee:6f:f1:0b:a3:d2:50:55: 84:b5:14:54:e9:9b:49:18:bd:22:ec:b7:53:af:4a:4e:6e:c8: 26:66:9f:c7:77:f3:70:29:40:b4:e2:fd:02:f3:df:58:d5:a1: 72:52:b3:6b:97:79:e5:60:30:65:d0:b7:17:96:04:48:ed:72: 75:37:02:19:22:ce:b6:31:61:58:bf:a2:7a:a0:2a:09:76:b3: f5:cb:95:2d:32:31:74:b7:ab:d4:f4:e8:08:e9:00:01:6b:c4: a3:87:79:60:e5:42:3b:3e:8c:e4:87:80:5d:ef:ca:a9:fc:c2: 12:21:e8:f9:ed:04:86:90:d0:db:b4:0a:8f:73:93:96:52:83: 60:d5:aa:cc:c7:b9:b6:c5:6a:a6:f4:a1:20:61:2d:9f:99:d4: ab:f4:74:4d:53:f8:18:f6:6d:65:de:46:32:93:94:d5:8c:94: e2:2f:3b:e5:38:3b:f7:23:f8:a1:da:cf:7b:0b:1b:62:fa:ea: db:1c:18:6a:15:46:42:1e:17:b1:75:b7:5f:49:4e:c6:51:c4: d5:02:92:22:0e:ed:d7:91:4a:30:fd:2b:6f:1f:a7:43:ff:7d: 99:69:b3:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoP+Olns+0s/7DYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NzI4ZDJjNTQtMWNkNy00MjhlLTg2NWEtNTYyYTc2ZTQ1YWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWNuQRAnLJ52Ht1ZiUopoCmxHk2F6DMSo0cP e0KGeon15jBDTPl82152YBmtZ7P1ISFmIMXOKrav2rKHNZdY2QBjTqC49KLq23W6 dv5ciKdhl1ZP/jP9RdJH7Wusx/ipZEt4WOUHtyMBuKYnrzqq732M5LnJND9/175P 3fbQQ/HcYnWEH68mf/8biPVNsDT5Onj7rr7EmpZE9wHCk5pxUis6cA0DwG3i9f0L AzAm/aweAwvbtZhDOfWWMN3pLSol7n3FW9FgX6UYIKRVdccQ3qSgjBLv1aN3Igy2 tyYpIEiGW9m5gCiwTpMWRbXIrC5oUqiNno1TMRHRP/0qvBHIbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTLRY4LTWUp8VjpJyZcyrinIW2cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGFiNTNjODktNmMxZS0z YjRkLThkMWMtNDFjYTJiNTRiZDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzuvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTkdes3tTVZULQ4MpK1mgy2zk2q7zXQZq2uFDTub/ELo9JQVYS1FFTp m0kYvSLst1OvSk5uyCZmn8d383ApQLTi/QLz31jVoXJSs2uXeeVgMGXQtxeWBEjt cnU3AhkizrYxYVi/onqgKgl2s/XLlS0yMXS3q9T06AjpAAFrxKOHeWDlQjs+jOSH gF3vyqn8whIh6PntBIaQ0Nu0Co9zk5ZSg2DVqszHubbFaqb0oSBhLZ+Z1Kv0dE1T +Bj2bWXeRjKTlNWMlOIvO+U4O/cj+KHaz3sLG2L66tscGGoVRkIeF7F1t19JTsZR xNUCkiIO7deRSjD9K28fp0P/fZlps/E= -----END CERTIFICATE-----Generated at Tue Aug 5 17:09:05 2025 by rpki-client