$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecfb9210-26d0-385b-979e-e9e75e5f5103.roa File: ecfb9210-26d0-385b-979e-e9e75e5f5103.roa (raw, json) Hash identifier: 35OHEZwwYKGUiowzCDVir1JvHQgdNGVWMHCA/Lphiuc= Subject key identifier: 87:FF:F9:E2:8A:F6:7D:DC:4C:E4:99:60:98:B4:4F:8E:28:79:BA:97 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A9E9646C90DDCC7DEEA158A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecfb9210-26d0-385b-979e-e9e75e5f5103.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 67.214.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:46:c9:0d:dc:c7:de:ea:15:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=33f74f4e-03ae-4409-879c-f7b2dd45f01b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c8:ff:b9:e8:60:7e:60:67:83:4f:88:c8:36: e6:ec:95:8e:8a:01:40:39:91:22:66:56:8d:05:98: ab:5f:c2:2c:6e:9a:80:1a:67:24:a8:6d:e7:12:07: c7:5e:4a:52:ff:c0:2d:40:98:24:87:d1:0e:ea:71: 89:40:8f:36:b2:ba:fe:08:5b:26:af:9d:9a:48:6c: 68:88:f8:b9:b0:f1:91:ed:db:5f:8d:90:00:0a:59: bc:4e:52:40:1b:c5:a7:dd:f7:d5:08:e8:b2:bb:39: 1c:58:8c:b3:11:2e:58:74:e7:88:94:5f:6b:3c:9b: f2:cf:12:41:56:df:76:d0:16:6f:2f:76:b1:ff:fe: aa:9d:cc:79:1e:04:67:d6:fb:70:9d:71:37:3d:8d: 7a:b9:27:66:b1:f1:8a:a9:2e:ea:7e:ad:bb:ca:7c: 54:ba:d1:0a:51:c8:eb:6a:93:46:a6:f1:e9:1d:62: 87:f4:1d:cc:1e:7f:14:98:89:70:0b:bf:8a:b6:06: e2:af:6f:3f:c4:30:bd:64:d4:96:a3:22:3a:91:17: 37:4e:d1:be:d4:69:19:1b:6f:10:b5:15:1a:7a:97: c5:e2:6c:37:99:10:1d:26:0f:89:6c:e8:e1:05:3c: 9e:97:02:65:79:74:65:6e:fe:17:81:f3:29:83:39: 6c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FF:F9:E2:8A:F6:7D:DC:4C:E4:99:60:98:B4:4F:8E:28:79:BA:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecfb9210-26d0-385b-979e-e9e75e5f5103.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.214.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:c2:9b:ee:91:5e:17:ae:63:01:43:b6:da:13:7c:08:e5:0a: 3a:c2:03:2e:5d:cd:a1:84:4b:96:67:b1:89:55:c3:43:d1:80: f5:0f:ab:eb:4f:c4:9f:a7:96:50:d8:89:aa:44:28:ab:41:e8: 22:73:99:d1:76:27:81:f9:74:c6:9b:17:34:0e:b5:ab:6e:61: 2c:c8:bf:83:a4:b3:57:c2:fa:23:1e:63:29:4a:20:2e:a4:b7: cc:b3:cb:b0:9b:98:ab:39:c7:0a:9b:b3:61:bb:92:0f:c4:ae: 3a:c3:2c:04:f7:d1:95:13:cf:bb:c3:0f:3c:90:28:1f:85:83: f9:fd:06:ce:be:88:35:69:0e:49:98:10:81:cc:de:b3:a2:e4: 77:2c:c2:2f:0d:b2:b8:1e:19:11:a2:ef:04:bf:7e:08:61:61: 7b:2d:0e:95:92:4a:46:f0:22:83:be:c0:3a:5d:de:85:83:be: 7b:f1:7b:d7:58:f2:b5:42:c1:40:b5:af:2e:c3:44:4b:6e:43: 22:d9:68:a5:c5:d0:35:7a:92:25:70:1f:8d:5f:36:d2:7e:d4: c7:c0:18:4b:03:85:2a:7f:24:e9:84:68:1e:d6:f6:36:4e:50: 71:a5:80:33:25:f4:f3:ee:4a:6b:ae:6e:48:f5:9e:3c:c5:22: 4e:83:d5:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelkbJDdzH3uoVioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MzNmNzRmNGUtMDNhZS00NDA5LTg3OWMtZjdiMmRkNDVmMDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsj/uehgfmBng0+IyDbm7JWOigFAOZEiZlaN BZirX8IsbpqAGmckqG3nEgfHXkpS/8AtQJgkh9EO6nGJQI82srr+CFsmr52aSGxo iPi5sPGR7dtfjZAAClm8TlJAG8Wn3ffVCOiyuzkcWIyzES5YdOeIlF9rPJvyzxJB Vt920BZvL3ax//6qncx5HgRn1vtwnXE3PY16uSdmsfGKqS7qfq27ynxUutEKUcjr apNGpvHpHWKH9B3MHn8UmIlwC7+Ktgbir28/xDC9ZNSWoyI6kRc3TtG+1GkZG28Q tRUaepfF4mw3mRAdJg+JbOjhBTyelwJleXRlbv4XgfMpgzlslwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIf/+eKK9n3cTOSZYJi0T44oebqXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWNmYjkyMTAtMjZkMC0z ODViLTk3OWUtZTllNzVlNWY1MTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9YAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbCm+6RXheuYwFDttoTfAjlCjrCAy5dzaGES5ZnsYlVw0PRgPUPq+tP xJ+nllDYiapEKKtB6CJzmdF2J4H5dMabFzQOtatuYSzIv4Oks1fC+iMeYylKIC6k t8yzy7CbmKs5xwqbs2G7kg/ErjrDLAT30ZUTz7vDDzyQKB+Fg/n9Bs6+iDVpDkmY EIHM3rOi5Hcswi8NsrgeGRGi7wS/fghhYXstDpWSSkbwIoO+wDpd3oWDvnvxe9dY 8rVCwUC1ry7DREtuQyLZaKXF0DV6kiVwH41fNtJ+1MfAGEsDhSp/JOmEaB7W9jZO UHGlgDMl9PPuSmuubkj1njzFIk6D1YQ= -----END CERTIFICATE-----Generated at Wed Aug 6 06:05:46 2025 by rpki-client