$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/edf5e9f2-6c92-33b4-abff-a2fecb2ca306.roa File: edf5e9f2-6c92-33b4-abff-a2fecb2ca306.roa (raw, json) Hash identifier: d2+H5zONiFhdZph1eYKr56RI04Ri2loPyMa84PR6bTc= Subject key identifier: D8:88:38:AC:12:30:7C:AC:8B:A7:B8:78:F4:BF:DA:23:88:D0:F5:E8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0DDD74B7E9D6A366D8A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/edf5e9f2-6c92-33b4-abff-a2fecb2ca306.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 207.155.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:dd:d7:4b:7e:9d:6a:36:6d:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=f4d5dc45-9795-42d3-b6f8-ab6b3684b6c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:28:b6:a4:88:88:7e:44:1e:a1:a3:bd:44:f5: fc:0d:69:f4:ab:be:15:e5:66:78:ac:6f:76:db:56: 8e:9c:c5:ed:54:78:86:e1:a4:20:d7:fc:4f:9a:db: 27:99:0f:86:89:dc:cc:f0:36:e3:ee:4b:05:c1:cc: 86:42:a6:ed:81:07:ca:33:7e:4e:97:f0:7e:57:c8: 37:41:2a:5d:e1:0d:ec:b0:bc:d9:5f:3e:c5:6f:4f: 58:11:e6:a4:38:4d:31:d0:ef:e8:51:65:32:31:db: d1:29:50:df:dc:5e:ba:20:78:05:de:1e:b3:cb:6d: a6:6e:20:4d:b5:b3:90:77:d2:f8:1c:0a:a3:e2:21: 47:9f:a1:c5:5c:3f:45:96:af:94:b6:e5:c8:da:af: b8:1f:8e:cd:df:fd:fc:d4:09:63:bd:17:88:4d:ba: d2:ec:df:75:08:f7:5d:60:d7:2e:c0:bb:ab:84:ab: 6e:e2:29:3f:63:1b:20:c2:1b:c7:8e:1f:fa:d9:0b: 47:2b:c7:9b:3b:24:37:5d:4e:b2:93:b4:b2:59:fc: ff:66:66:1c:e2:15:e1:35:9f:8c:55:9a:4d:97:9a: fa:67:16:34:be:6f:6d:b8:99:8e:29:df:bc:88:aa: 79:bf:d9:c8:1f:e3:a5:d5:47:75:fa:88:86:c9:72: 34:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:88:38:AC:12:30:7C:AC:8B:A7:B8:78:F4:BF:DA:23:88:D0:F5:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/edf5e9f2-6c92-33b4-abff-a2fecb2ca306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.155.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:e1:31:cf:ea:29:b8:f0:31:8c:4d:14:05:09:a0:4b:8b:95: 32:e7:86:c0:72:2d:bf:b2:82:14:08:fb:df:81:4d:6c:9b:70: 85:80:28:60:f8:d9:22:b7:63:18:68:97:6f:e7:c2:8b:0b:96: 53:2f:4f:05:d4:c7:86:c3:c3:2d:80:e7:1a:26:36:b1:04:18: fb:0b:d2:3d:67:1d:6b:5d:46:d9:d5:18:cf:fa:bc:44:f1:64: 34:69:fb:75:15:3a:c4:11:a9:56:59:70:26:05:5a:e6:f0:92: 42:b6:8e:2d:7d:f3:4d:50:21:3f:22:00:97:3c:55:09:9b:1c: 1d:7f:ca:7e:c3:97:14:ac:a5:7b:b1:b7:d2:6d:f4:76:66:9a: 68:1b:66:fb:01:03:d7:c6:31:22:58:81:8a:d0:dc:12:16:0e: 4b:41:57:19:6c:ba:af:44:91:22:16:b5:0c:a3:61:c8:fa:3f: 4c:f5:45:40:a2:53:52:cc:d8:82:ec:d2:fd:5d:ba:7f:d7:2d: f8:dc:05:62:98:b6:51:7b:44:73:21:0e:3a:17:21:07:65:5e: 43:aa:9e:c3:da:8b:a6:4a:89:c6:b4:a4:d4:95:89:63:9b:c0: 2b:d6:01:04:46:1f:40:e4:45:da:0c:0d:c2:30:38:58:bc:4a: 2a:8e:c7:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoN3XS36dajZtioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZjRkNWRjNDUtOTc5NS00MmQzLWI2ZjgtYWI2YjM2ODRiNmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzii2pIiIfkQeoaO9RPX8DWn0q74V5WZ4rG92 21aOnMXtVHiG4aQg1/xPmtsnmQ+GidzM8Dbj7ksFwcyGQqbtgQfKM35Ol/B+V8g3 QSpd4Q3ssLzZXz7Fb09YEeakOE0x0O/oUWUyMdvRKVDf3F66IHgF3h6zy22mbiBN tbOQd9L4HAqj4iFHn6HFXD9Flq+UtuXI2q+4H47N3/381AljvReITbrS7N91CPdd YNcuwLurhKtu4ik/YxsgwhvHjh/62QtHK8ebOyQ3XU6yk7SyWfz/ZmYc4hXhNZ+M VZpNl5r6ZxY0vm9tuJmOKd+8iKp5v9nIH+Ol1Ud1+oiGyXI03wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiIOKwSMHysi6e4ePS/2iOI0PXoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWRmNWU5ZjItNmM5Mi0z M2I0LWFiZmYtYTJmZWNiMmNhMzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz5sIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPhMc/qKbjwMYxNFAUJoEuLlTLnhsByLb+yghQI+9+BTWybcIWAKGD4 2SK3Yxhol2/nwosLllMvTwXUx4bDwy2A5xomNrEEGPsL0j1nHWtdRtnVGM/6vETx ZDRp+3UVOsQRqVZZcCYFWubwkkK2ji19801QIT8iAJc8VQmbHB1/yn7DlxSspXux t9Jt9HZmmmgbZvsBA9fGMSJYgYrQ3BIWDktBVxlsuq9EkSIWtQyjYcj6P0z1RUCi U1LM2ILs0v1dun/XLfjcBWKYtlF7RHMhDjoXIQdlXkOqnsPai6ZKica0pNSViWOb wCvWAQRGH0DkRdoMDcIwOFi8SiqOxwY= -----END CERTIFICATE-----Generated at Wed Aug 6 04:17:13 2025 by rpki-client