$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1e641cd-09c8-3f01-b009-ac2cb59dff8d.roa File: f1e641cd-09c8-3f01-b009-ac2cb59dff8d.roa (raw, json) Hash identifier: 6yDRBK1Bz3xdrayFlpOc+iobwnr88PnQl+T7bn5RinA= Subject key identifier: D1:B3:9E:EB:31:0F:F9:C5:CC:72:D4:FA:E4:33:F1:88:7F:1E:83:A9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A10218101A727B40A37E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1e641cd-09c8-3f01-b009-ac2cb59dff8d.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 216.236.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:02:18:10:1a:72:7b:40:a3:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=6ffdd78b-3d32-4370-a5dc-9ad0a5b445ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d5:f6:61:05:c7:ba:ba:80:9e:64:c6:e5:89: 92:40:1f:db:e4:7d:3f:a4:ab:ef:a2:55:f3:8b:c4: 69:e2:38:46:db:2b:d9:51:c5:74:e7:5c:1c:26:00: b3:ab:f1:4e:8d:3d:5e:a9:4d:24:1a:b3:e9:7c:cf: a2:39:a6:31:66:87:34:35:10:2e:6c:0e:6b:3e:86: 80:1f:4f:8f:48:cc:43:e4:a3:4b:66:cb:80:ba:3b: a9:03:d5:5e:12:c6:74:d9:95:15:1b:ed:5f:33:53: ba:ff:24:7d:80:88:6f:ba:3c:28:24:7e:12:5d:83: 81:ea:7e:f6:fe:30:e0:56:cb:32:c8:ae:9a:55:1d: 2a:e1:23:a9:f2:2d:35:7c:a5:42:43:d7:ad:a5:f7: e5:83:e9:50:36:5b:27:a4:fd:e1:df:57:46:97:3d: 4e:77:66:8e:ae:9b:4e:00:20:05:dd:b1:d3:4a:b1: dc:03:2a:f0:b1:03:44:c0:ce:fa:1d:fc:6e:b3:d1: 4d:fd:d8:c7:bd:b3:a7:b5:16:03:cb:23:97:69:6e: 65:19:ad:62:3f:83:e8:c0:33:b1:86:dc:f6:9a:fa: f5:ef:5e:46:d6:f1:74:79:fa:3d:d3:a8:5d:d8:8d: 6f:1d:dd:8d:1e:13:4b:72:9d:61:05:6a:0f:47:d3: c8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B3:9E:EB:31:0F:F9:C5:CC:72:D4:FA:E4:33:F1:88:7F:1E:83:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1e641cd-09c8-3f01-b009-ac2cb59dff8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.236.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:87:7e:3b:ec:c9:e4:55:f8:54:43:e3:45:7f:85:ed:d5:16: 45:d5:fc:30:a3:6b:ff:c8:47:11:60:f9:15:22:ea:ee:8b:ae: cc:9d:29:eb:cb:6d:cb:7b:0a:86:61:98:8c:3b:21:4d:63:02: 23:e6:d6:5e:e8:bb:f7:f4:ba:a5:84:ae:35:f2:7a:f7:d1:44: 84:32:fb:1e:c4:82:cc:5c:ac:70:cc:ba:f4:a0:ae:45:75:75: 4e:d8:85:cf:e3:48:c4:52:e5:f7:ec:e1:f3:56:bb:7b:ea:09: fd:e3:a2:ed:0f:50:2d:4b:cf:ef:fc:e4:32:6e:cf:c1:cb:1a: 2d:f8:95:17:b7:a2:6e:ad:05:aa:9a:14:4e:e5:2f:3a:05:29: 58:68:7b:2a:76:17:56:a8:5d:9a:9f:a6:35:44:27:9d:db:08: a8:ec:34:7e:ac:a3:9e:b5:ad:59:22:f2:68:e6:6f:c4:cd:5e: 2f:ed:a8:0b:45:76:ce:76:08:30:e5:99:8a:f4:3e:b5:25:f2: 98:27:ed:b0:8f:2c:f5:46:be:2c:fb:e1:9b:c5:8c:aa:c4:b3: 2d:4f:3a:a6:b1:ea:f4:5b:10:15:56:a4:f2:a2:5d:7a:85:7a: 08:e0:69:3f:3f:8e:bc:85:b3:7d:34:17:36:46:73:68:b4:6d: e2:76:84:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoQIYEBpye0CjfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NmZmZGQ3OGItM2QzMi00MzcwLWE1ZGMtOWFkMGE1YjQ0NWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNX2YQXHurqAnmTG5YmSQB/b5H0/pKvvolXz i8Rp4jhG2yvZUcV051wcJgCzq/FOjT1eqU0kGrPpfM+iOaYxZoc0NRAubA5rPoaA H0+PSMxD5KNLZsuAujupA9VeEsZ02ZUVG+1fM1O6/yR9gIhvujwoJH4SXYOB6n72 /jDgVssyyK6aVR0q4SOp8i01fKVCQ9etpfflg+lQNlsnpP3h31dGlz1Od2aOrptO ACAF3bHTSrHcAyrwsQNEwM76Hfxus9FN/djHvbOntRYDyyOXaW5lGa1iP4PowDOx htz2mvr1715G1vF0efo906hd2I1vHd2NHhNLcp1hBWoPR9PIvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGznusxD/nFzHLU+uQz8Yh/HoOpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjFlNjQxY2QtMDljOC0z ZjAxLWIwMDktYWMyY2I1OWRmZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2OxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKHfjvsyeRV+FRD40V/he3VFkXV/DCja//IRxFg+RUi6u6LrsydKevL bct7CoZhmIw7IU1jAiPm1l7ou/f0uqWErjXyevfRRIQy+x7EgsxcrHDMuvSgrkV1 dU7Yhc/jSMRS5ffs4fNWu3vqCf3jou0PUC1Lz+/85DJuz8HLGi34lRe3om6tBaqa FE7lLzoFKVhoeyp2F1aoXZqfpjVEJ53bCKjsNH6so561rVki8mjmb8TNXi/tqAtF ds52CDDlmYr0PrUl8pgn7bCPLPVGviz74ZvFjKrEsy1POqax6vRbEBVWpPKiXXqF egjgaT8/jryFs300FzZGc2i0beJ2hNk= -----END CERTIFICATE-----Generated at Mon Aug 4 16:02:50 2025 by rpki-client