$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfdea3f9-0bd9-3f41-8ecb-bd4f501f9860.roa File: dfdea3f9-0bd9-3f41-8ecb-bd4f501f9860.roa (raw, json) Hash identifier: ggluuYK84szq4x969TQ+jLcDTtyk3ivGaMl2HTJh7Oc= Subject key identifier: 6E:EB:8A:FB:6E:91:B0:D3:4A:4D:34:F4:7F:7B:D1:4D:94:95:9D:F8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0F7CC55675AF006C4FFC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfdea3f9-0bd9-3f41-8ecb-bd4f501f9860.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 66.6.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:f7:cc:55:67:5a:f0:06:c4:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=eb15b871-10b5-4bbf-af0d-ab98290600c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:65:a5:02:af:dd:c3:7d:6f:d8:ca:a0:4f:4a: 84:ef:5f:e1:39:0f:47:6b:81:59:0c:15:2e:a9:a3: e0:cc:c6:b6:70:95:0b:1d:10:6d:d2:36:1f:ca:69: 4a:c1:bf:08:93:ba:7b:d4:fe:b8:07:76:6e:ac:92: 95:55:76:62:c5:4e:9f:55:a1:3b:dd:1a:07:bc:21: 7c:11:4a:23:6b:73:d0:7e:ac:d0:f7:bc:7b:ff:5e: 66:40:d0:2a:6b:d4:de:fa:cf:22:77:1f:6e:bf:9c: 84:16:bd:a9:6d:60:3f:e0:51:a1:48:f1:76:a8:4e: 95:c9:1d:ad:f6:41:7d:04:82:79:23:60:e2:ce:f9: bb:c0:19:ff:59:8c:24:f9:e2:3c:e7:37:9a:d6:1a: f2:46:42:01:df:f2:6a:ee:15:dd:5e:8d:99:54:9c: c7:97:c3:f3:7e:fb:59:4b:f5:4c:73:5e:38:d4:54: 8a:f1:51:c0:b8:7e:a7:7f:30:0e:fd:1f:5a:f0:98: 5d:4b:1e:cf:01:f8:d1:52:5b:0a:e1:c3:a9:4d:16: dd:c4:17:3d:4c:e8:e5:dd:d3:20:b5:d6:d7:1c:58: 46:ed:8f:6e:7b:8b:33:44:1c:3c:a0:26:79:2f:0c: c9:e6:31:24:3d:3e:fe:5a:c9:9e:c0:3e:7a:3c:a2: 0a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:EB:8A:FB:6E:91:B0:D3:4A:4D:34:F4:7F:7B:D1:4D:94:95:9D:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfdea3f9-0bd9-3f41-8ecb-bd4f501f9860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.6.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:ae:2f:d2:de:7b:53:89:1c:ad:dc:4f:ea:ce:5c:59:26:89: 21:74:6c:d0:8a:3a:dc:04:e5:c7:be:94:d3:4b:48:f3:a8:99: 83:47:45:c7:80:77:92:21:b2:7a:c3:ba:f4:51:07:d5:44:fb: f2:b8:34:8d:c3:6c:62:c2:41:3f:e5:9c:f3:2a:c2:a9:cf:4a: fa:e5:98:cc:64:86:a4:a5:5e:bd:5e:1a:f4:8f:06:93:a1:da: b7:dc:a7:6f:f3:69:c6:5c:69:26:9b:3d:f7:6c:de:43:4d:db: 24:5a:06:ff:98:0e:36:62:f0:aa:1e:c2:98:ea:ae:8c:7d:e5: 04:c9:69:e3:fc:1d:98:bd:2e:28:bf:d1:2b:a2:6c:2a:97:8f: 30:bf:e4:26:23:cd:1c:16:4d:d2:8f:f2:f0:5f:db:e5:3d:7c: 18:4c:3b:c5:c2:0d:bb:47:bc:2a:fb:b1:2a:0f:03:70:d8:df: d5:92:17:c3:a1:da:bb:a7:74:30:25:3f:71:5c:22:68:d7:d3: 46:97:65:57:e9:29:f4:da:aa:6a:e3:57:9f:8a:8b:fa:a7:99: 07:77:f8:75:a5:1d:49:5b:16:8e:11:93:bf:86:61:15:c1:93: 47:3c:7f:bc:b7:9d:dc:e0:94:82:88:69:76:78:1e:eb:ae:4d: 09:9e:3f:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoPfMVWda8AbE/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZWIxNWI4NzEtMTBiNS00YmJmLWFmMGQtYWI5ODI5MDYwMGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGWlAq/dw31v2MqgT0qE71/hOQ9Ha4FZDBUu qaPgzMa2cJULHRBt0jYfymlKwb8Ik7p71P64B3ZurJKVVXZixU6fVaE73RoHvCF8 EUoja3PQfqzQ97x7/15mQNAqa9Te+s8idx9uv5yEFr2pbWA/4FGhSPF2qE6VyR2t 9kF9BIJ5I2Dizvm7wBn/WYwk+eI85zea1hryRkIB3/Jq7hXdXo2ZVJzHl8PzfvtZ S/VMc1441FSK8VHAuH6nfzAO/R9a8JhdSx7PAfjRUlsK4cOpTRbdxBc9TOjl3dMg tdbXHFhG7Y9ue4szRBw8oCZ5LwzJ5jEkPT7+WsmewD56PKIK5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7rivtukbDTSk009H970U2UlZ34MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGZkZWEzZjktMGJkOS0z ZjQxLThlY2ItYmQ0ZjUwMWY5ODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQgZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCuL9Lee1OJHK3cT+rOXFkmiSF0bNCKOtwE5ce+lNNLSPOomYNHRceA d5IhsnrDuvRRB9VE+/K4NI3DbGLCQT/lnPMqwqnPSvrlmMxkhqSlXr1eGvSPBpOh 2rfcp2/zacZcaSabPfds3kNN2yRaBv+YDjZi8Koewpjqrox95QTJaeP8HZi9Lii/ 0SuibCqXjzC/5CYjzRwWTdKP8vBf2+U9fBhMO8XCDbtHvCr7sSoPA3DY39WSF8Oh 2rundDAlP3FcImjX00aXZVfpKfTaqmrjV5+Ki/qnmQd3+HWlHUlbFo4Rk7+GYRXB k0c8f7y3ndzglIKIaXZ4HuuuTQmeP3g= -----END CERTIFICATE-----Generated at Wed Aug 6 16:24:56 2025 by rpki-client