$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e10cf5a4-7375-37db-a812-6bb3cbe9c9af.roa File: e10cf5a4-7375-37db-a812-6bb3cbe9c9af.roa (raw, json) Hash identifier: 8ObplN3PyhkPJmOq1BArU/IHS0QWkGYe6rCfItjH4w4= Subject key identifier: 67:C0:67:DC:03:A1:2E:C7:FF:05:9E:E8:F5:F7:43:03:3F:95:35:09 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8791DD11B79D3FE2A3FDF540 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e10cf5a4-7375-37db-a812-6bb3cbe9c9af.roa Signing time: Tue 15 Jul 2025 19:08:47 +0000 ROA not before: Tue 15 Jul 2025 19:08:47 +0000 ROA not after: Mon 13 Oct 2025 19:08:47 +0000 asID: 0 IP address blocks: 207.29.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:87:91:dd:11:b7:9d:3f:e2:a3:fd:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 15 19:08:47 2025 GMT Not After : Oct 13 19:08:47 2025 GMT Subject: CN=4c1ca3d1-751a-44a6-8f86-67f846e54530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d9:3d:69:7f:85:0b:39:68:4a:8a:75:42:8d: 7a:f3:21:5a:b1:a8:bc:3c:9a:c4:13:61:3c:53:c2: da:47:07:be:36:56:51:6d:fc:5a:ec:23:7d:73:ed: 20:75:8d:b7:d3:de:e4:98:33:a7:aa:76:e6:98:79: bc:31:f7:df:5b:b3:1d:78:f2:aa:01:84:22:ab:b6: 05:1d:24:93:82:6b:4c:8d:53:d1:c3:b2:cb:41:fa: df:2f:94:7c:25:f4:d5:8f:5a:76:94:e7:4c:5b:01: 5d:18:13:37:34:39:ea:ed:b3:34:dc:1d:a1:96:55: 84:0e:80:ed:c8:23:4d:d4:0a:a1:ad:ba:ff:b5:25: 98:c9:5f:f1:b4:b1:b6:23:16:4e:37:52:32:64:4c: af:a9:32:25:f4:75:f8:7a:0f:71:4f:84:7b:24:54: f7:27:4c:24:09:79:87:50:36:8c:b0:21:91:18:01: 46:ed:66:21:52:78:49:9d:35:e9:a6:7d:10:f0:bd: f2:b7:9a:05:35:de:d3:02:d5:14:ea:0b:23:8b:d9: 1e:da:c0:db:2f:48:48:15:de:df:d1:0b:7b:56:22: 4b:2d:6f:77:eb:ea:30:cf:a2:8b:8e:f9:97:79:00: c7:99:84:90:4a:23:06:20:ee:ff:ec:2c:0e:c0:32: f1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C0:67:DC:03:A1:2E:C7:FF:05:9E:E8:F5:F7:43:03:3F:95:35:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e10cf5a4-7375-37db-a812-6bb3cbe9c9af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.29.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:a9:f5:20:a7:bf:07:8b:28:1a:00:56:bc:49:dd:d2:80:46: ea:42:36:14:d4:ea:04:f7:41:95:9a:cd:2e:d7:8f:0f:6a:ff: 1f:50:77:56:65:26:72:b7:b4:21:31:93:c9:7f:13:37:4b:73: 18:c2:93:b9:c7:25:c8:35:5c:87:a1:87:db:1d:c8:64:c3:35: b1:da:dd:e8:57:06:ed:43:40:45:ed:c2:f7:fc:56:04:8e:ad: 14:75:f6:73:d8:ac:e0:2c:6f:d4:e8:33:ff:f5:b4:0f:b3:89: db:1e:23:97:12:7c:a6:c9:61:94:0e:ca:c3:88:55:90:e4:15: 08:53:6b:69:a1:70:fe:89:14:75:39:d9:34:c8:19:a0:ec:fb: 9f:4e:ff:01:e9:19:ab:77:1d:c7:17:b8:f4:e5:0d:2a:57:e4: 40:86:1f:d7:4a:fa:6f:2f:92:02:da:23:ba:22:40:27:d6:ce: 73:80:83:fa:f1:7b:57:a4:4a:1f:d7:69:e8:14:32:d8:dc:dd: 3d:84:cf:55:d3:a1:58:cb:d4:1e:5c:6a:79:1b:b1:e7:9f:35: d2:ec:15:80:7b:a4:d7:05:a9:c4:8c:09:a0:37:65:b0:aa:48: 0e:50:6e:66:dd:ab:d7:4b:24:ef:2f:0a:17:8a:27:e9:aa:a5: a4:e4:30:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqHkd0Rt50/4qP99UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNTE5MDg0N1oXDTI1MTAxMzE5MDg0N1owLzEtMCsGA1UEAxMk NGMxY2EzZDEtNzUxYS00NGE2LThmODYtNjdmODQ2ZTU0NTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdk9aX+FCzloSop1Qo168yFasai8PJrEE2E8 U8LaRwe+NlZRbfxa7CN9c+0gdY23097kmDOnqnbmmHm8MfffW7MdePKqAYQiq7YF HSSTgmtMjVPRw7LLQfrfL5R8JfTVj1p2lOdMWwFdGBM3NDnq7bM03B2hllWEDoDt yCNN1Aqhrbr/tSWYyV/xtLG2IxZON1IyZEyvqTIl9HX4eg9xT4R7JFT3J0wkCXmH UDaMsCGRGAFG7WYhUnhJnTXppn0Q8L3yt5oFNd7TAtUU6gsji9ke2sDbL0hIFd7f 0Qt7ViJLLW936+owz6KLjvmXeQDHmYSQSiMGIO7/7CwOwDLxtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfAZ9wDoS7H/wWe6PX3QwM/lTUJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTEwY2Y1YTQtNzM3NS0z N2RiLWE4MTItNmJiM2NiZTljOWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzx3IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJap9SCnvweLKBoAVrxJ3dKARupCNhTU6gT3QZWazS7Xjw9q/x9Qd1Zl JnK3tCExk8l/EzdLcxjCk7nHJcg1XIehh9sdyGTDNbHa3ehXBu1DQEXtwvf8VgSO rRR19nPYrOAsb9ToM//1tA+zidseI5cSfKbJYZQOysOIVZDkFQhTa2mhcP6JFHU5 2TTIGaDs+59O/wHpGat3HccXuPTlDSpX5ECGH9dK+m8vkgLaI7oiQCfWznOAg/rx e1ekSh/XaegUMtjc3T2Ez1XToVjL1B5cankbseefNdLsFYB7pNcFqcSMCaA3ZbCq SA5Qbmbdq9dLJO8vCheKJ+mqpaTkMIg= -----END CERTIFICATE-----Generated at Mon Aug 4 14:57:59 2025 by rpki-client