$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dabf323e-14a0-380c-b75c-2b2dd35b54f3.roa File: dabf323e-14a0-380c-b75c-2b2dd35b54f3.roa (raw, json) Hash identifier: 6DbxHrhUYaTgYaqAvWtLUMe/MPUr2/qdMNSmIEMGJRc= Subject key identifier: BD:5A:FF:CE:24:DC:1B:79:47:0B:96:28:33:F1:3D:7F:33:C6:03:E5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0FEDF81F2D23671973A40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dabf323e-14a0-380c-b75c-2b2dd35b54f3.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 205.232.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:fe:df:81:f2:d2:36:71:97:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=f70db33a-89eb-4a04-be09-7ebfefc2c147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:63:c9:84:5a:2d:d6:fc:ea:49:aa:89:f2:33: 10:cf:38:38:f1:d2:fb:74:41:30:03:50:0c:57:14: a4:f3:64:ad:44:8e:43:db:0b:49:42:e3:70:10:df: bb:ae:d0:54:29:54:3a:bc:9c:b6:a7:a2:ac:fd:72: 59:a4:92:f8:4b:d7:da:0c:a3:a3:0e:d6:5e:d6:43: 4b:76:d6:50:ec:53:3d:0e:45:4b:a3:b4:54:db:bb: 5f:e7:10:6d:a7:b9:a5:7a:78:a7:ec:7a:fc:af:90: 3c:77:3a:7d:35:e8:62:c1:9b:2c:2b:ca:b9:69:a5: c9:39:5e:d9:ae:e6:8c:84:77:9b:25:0c:89:18:f2: c1:8c:43:e2:f8:a2:f8:df:0c:76:ad:97:f7:9b:ff: 9c:28:a7:59:b9:8b:17:75:b9:9b:8b:be:c7:a4:19: 70:bf:6b:30:ec:7b:83:8c:a8:39:ff:d0:59:0d:07: 6a:d3:f7:66:a6:9c:2c:4d:17:4e:d6:d2:12:fb:48: ca:43:3d:b8:b3:25:d5:1b:df:3b:cd:3e:8f:36:e1: f1:97:44:ce:9a:9d:21:e8:99:eb:c3:35:d4:60:c7: e3:14:1f:75:89:43:06:0d:05:cb:0f:9a:49:53:6a: 7b:94:f2:da:61:47:72:d2:30:7c:9c:c2:f1:c1:01: 69:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:5A:FF:CE:24:DC:1B:79:47:0B:96:28:33:F1:3D:7F:33:C6:03:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dabf323e-14a0-380c-b75c-2b2dd35b54f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 205.232.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:7f:ce:eb:a8:63:f3:6e:2c:46:fa:ad:83:9b:c6:a3:68:c3: 6b:01:7d:d2:b2:e1:ce:82:d5:d8:33:e6:d7:c1:6f:ec:36:38: 62:5f:7b:13:ea:d3:5f:71:99:d4:2a:f8:59:94:99:ae:39:fc: 5a:41:28:bd:16:65:94:fa:78:c9:52:63:35:d0:fb:92:90:48: 24:e7:67:d0:5a:2b:eb:a7:65:51:63:4d:a1:ab:a1:95:eb:d2: 19:32:24:12:8a:68:3e:3c:54:24:75:d8:c0:c1:90:b1:8e:bd: 34:55:a0:4b:db:30:5a:56:30:7a:e3:e8:bc:91:7d:14:d4:75: f0:93:fb:ec:d4:b7:76:90:64:04:9b:d7:72:b3:30:3b:8e:0a: a3:2f:1a:bc:e4:c3:b3:6a:64:cd:8f:0c:3e:b6:08:69:de:9d: 34:ec:0b:44:8a:48:da:f4:30:80:e6:ed:8a:97:79:22:9e:3a: 79:bf:ef:62:5c:61:d9:c5:c7:12:9c:ee:30:f5:17:54:57:35: ee:d9:5c:08:df:16:98:73:8e:18:bc:83:84:dc:86:0c:3a:40: c9:be:8e:d2:86:04:17:72:91:74:20:51:36:69:2f:47:79:e1: 7d:a0:fa:0e:48:d0:9f:2b:dc:b7:7d:84:67:5f:2a:ef:c3:41: 87:0a:79:4a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqQoP7fgfLSNnGXOkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZjcwZGIzM2EtODllYi00YTA0LWJlMDktN2ViZmVmYzJjMTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWPJhFot1vzqSaqJ8jMQzzg48dL7dEEwA1AM VxSk82StRI5D2wtJQuNwEN+7rtBUKVQ6vJy2p6Ks/XJZpJL4S9faDKOjDtZe1kNL dtZQ7FM9DkVLo7RU27tf5xBtp7mlenin7Hr8r5A8dzp9NehiwZssK8q5aaXJOV7Z ruaMhHebJQyJGPLBjEPi+KL43wx2rZf3m/+cKKdZuYsXdbmbi77HpBlwv2sw7HuD jKg5/9BZDQdq0/dmppwsTRdO1tIS+0jKQz24syXVG987zT6PNuHxl0TOmp0h6Jnr wzXUYMfjFB91iUMGDQXLD5pJU2p7lPLaYUdy0jB8nMLxwQFpEwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFL1a/84k3Bt5RwuWKDPxPX8zxgPlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGFiZjMyM2UtMTRhMC0z ODBjLWI3NWMtMmIyZGQzNWI1NGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzegwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAhn/O66hj824sRvqtg5vGo2jDawF90rLhzoLV2DPm18Fv7DY4Yl97E+rT X3GZ1Cr4WZSZrjn8WkEovRZllPp4yVJjNdD7kpBIJOdn0For66dlUWNNoauhlevS GTIkEopoPjxUJHXYwMGQsY69NFWgS9swWlYweuPovJF9FNR18JP77NS3dpBkBJvX crMwO44Koy8avOTDs2pkzY8MPrYIad6dNOwLRIpI2vQwgObtipd5Ip46eb/vYlxh 2cXHEpzuMPUXVFc17tlcCN8WmHOOGLyDhNyGDDpAyb6O0oYEF3KRdCBRNmkvR3nh faD6DkjQnyvct32EZ18q78NBhwp5Sg== -----END CERTIFICATE-----Generated at Tue Aug 5 17:22:56 2025 by rpki-client