$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e3ffde9c-4570-3ebe-add8-18dc54f63ea9.roa File: e3ffde9c-4570-3ebe-add8-18dc54f63ea9.roa (raw, json) Hash identifier: g/bMrvRmBsGgOfxpWh7CSDpSeQUSPKcw3RmkbOQqo9U= Subject key identifier: 55:31:12:D8:BD:FD:4B:EB:7A:77:EF:81:68:09:32:F7:73:03:78:CF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0F6E10E5A8A7043F58A70 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e3ffde9c-4570-3ebe-add8-18dc54f63ea9.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 64.90.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:f6:e1:0e:5a:8a:70:43:f5:8a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=d4a410c9-8f85-42c5-9634-7dc08a8b89c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:28:f7:8d:16:5b:ff:75:01:86:4a:b3:a1:3e: a8:56:33:13:a3:1b:2f:36:57:76:a7:8b:bd:f6:b3: af:d1:97:07:5a:84:9a:e9:0f:c7:a6:e2:da:e9:c4: f4:45:35:0a:36:33:b1:d1:3f:aa:a7:7f:22:38:76: db:be:ec:e9:06:ce:04:28:8f:5f:e6:24:a9:c1:80: d8:be:c4:02:ba:7f:92:93:a7:eb:28:91:9c:61:2c: ad:78:cb:fe:ea:e6:73:0b:a7:31:28:24:97:9e:33: 82:7a:e1:eb:77:0d:f1:34:ba:97:4b:fc:d0:fb:22: 5d:f5:4a:c9:8a:76:bd:91:8a:e2:47:4a:0d:d8:b3: 4d:d5:d5:c5:43:a5:4b:49:0b:7b:13:60:e5:7d:cc: f2:55:40:8c:03:1b:3d:92:59:ea:64:55:b1:69:8f: c5:35:a6:37:89:20:c7:4e:14:6f:8f:54:30:bb:44: f1:4b:84:a0:14:d4:fa:0e:0f:3f:52:b7:3a:2d:f7: f1:7f:4c:63:1b:ab:26:88:d3:f8:79:58:8f:6c:55: 27:e0:30:7c:3d:c4:08:6c:f6:d0:49:0b:86:0d:63: 3b:b4:62:67:b8:04:66:34:c3:cd:e0:58:f4:00:39: 2d:28:78:48:7d:1e:b0:84:ae:ea:80:c6:e8:1a:94: a5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:31:12:D8:BD:FD:4B:EB:7A:77:EF:81:68:09:32:F7:73:03:78:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e3ffde9c-4570-3ebe-add8-18dc54f63ea9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.90.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:09:6a:d5:d1:df:c7:65:7c:6e:00:6f:79:08:99:f2:b8:8b: 0e:a6:82:b5:0b:9c:a0:ed:96:a2:a3:28:66:a3:13:76:ef:62: c3:a6:47:b2:0e:3a:6e:34:db:85:3e:a1:cd:93:81:f8:9f:17: d1:ed:c7:8a:b7:73:48:c5:2d:4d:1f:30:6d:4d:7c:34:82:31: 79:ed:f7:7a:af:91:9d:98:50:07:6e:27:3c:93:b6:0c:57:2e: 07:23:03:24:58:21:4e:9e:21:64:8a:bc:71:93:2d:56:e5:a3: ef:dc:a0:6f:31:89:74:f0:4c:16:f7:d6:c1:64:60:63:b0:62: f0:93:32:fa:87:74:2a:86:f8:09:ec:32:61:df:07:7f:97:b6: 16:6c:6f:6f:52:2c:fa:b3:4e:f0:4d:ba:96:eb:f8:56:38:4a: 51:dc:e5:98:32:06:d3:1a:21:36:19:b8:65:4d:14:a8:a0:63: 46:b5:9a:87:fa:b1:c0:68:e2:b5:9a:34:29:f2:e5:58:fd:d6: c2:94:76:2a:01:16:ee:4a:b5:77:02:28:16:01:70:b4:cd:74: e9:09:15:80:59:d7:bd:e2:00:b0:92:01:90:72:4a:e9:07:5c: 46:1a:2c:3a:9e:02:17:3a:8f:db:59:70:c1:9e:3b:67:65:e1: 35:04:cd:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoPbhDlqKcEP1inAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZDRhNDEwYzktOGY4NS00MmM1LTk2MzQtN2RjMDhhOGI4OWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyj3jRZb/3UBhkqzoT6oVjMToxsvNld2p4u9 9rOv0ZcHWoSa6Q/HpuLa6cT0RTUKNjOx0T+qp38iOHbbvuzpBs4EKI9f5iSpwYDY vsQCun+Sk6frKJGcYSyteMv+6uZzC6cxKCSXnjOCeuHrdw3xNLqXS/zQ+yJd9UrJ ina9kYriR0oN2LNN1dXFQ6VLSQt7E2DlfczyVUCMAxs9klnqZFWxaY/FNaY3iSDH ThRvj1Qwu0TxS4SgFNT6Dg8/Urc6Lffxf0xjG6smiNP4eViPbFUn4DB8PcQIbPbQ SQuGDWM7tGJnuARmNMPN4Fj0ADktKHhIfR6whK7qgMboGpSl4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUxEti9/UvrenfvgWgJMvdzA3jPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTNmZmRlOWMtNDU3MC0z ZWJlLWFkZDgtMThkYzU0ZjYzZWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQFoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgJatXR38dlfG4Ab3kImfK4iw6mgrULnKDtlqKjKGajE3bvYsOmR7IO Om4024U+oc2TgfifF9Htx4q3c0jFLU0fMG1NfDSCMXnt93qvkZ2YUAduJzyTtgxX LgcjAyRYIU6eIWSKvHGTLVblo+/coG8xiXTwTBb31sFkYGOwYvCTMvqHdCqG+Ans MmHfB3+XthZsb29SLPqzTvBNupbr+FY4SlHc5ZgyBtMaITYZuGVNFKigY0a1mof6 scBo4rWaNCny5Vj91sKUdioBFu5KtXcCKBYBcLTNdOkJFYBZ173iALCSAZBySukH XEYaLDqeAhc6j9tZcMGeO2dl4TUEzZs= -----END CERTIFICATE-----Generated at Mon Aug 4 19:17:17 2025 by rpki-client