$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f55e1060-926f-39d6-aa63-6a7305a6f1aa.roa File: f55e1060-926f-39d6-aa63-6a7305a6f1aa.roa (raw, json) Hash identifier: g7gV4eJyhYbvHq5sztkiyQ0eyfkBcgoQfsszcJQ+9BY= Subject key identifier: E4:2F:03:F7:62:E6:FB:E4:2C:7E:BC:CB:F7:EB:F2:44:3B:3D:06:BD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8C70DC1CDAD05E22B6968B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f55e1060-926f-39d6-aa63-6a7305a6f1aa.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 71.7.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:dc:1c:da:d0:5e:22:b6:96:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=15f45982-fc15-4184-822f-913b9771d458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bf:49:66:79:2b:ac:ca:cf:5f:97:82:5b:78: 22:dd:1e:19:7a:0e:67:a3:54:fa:39:7b:13:d0:6b: b9:00:2b:c9:13:c6:74:13:ff:c2:93:31:31:9d:6c: 51:b8:d9:45:b6:5e:8a:55:aa:c7:ab:a3:72:16:3b: 38:18:82:dc:8b:7c:e5:d2:ba:86:6e:1d:6f:15:f1: b6:ef:04:dd:25:2f:75:31:c8:a7:dd:54:05:72:7f: 21:3b:1c:16:c6:87:db:81:b9:ad:c0:bc:bc:dc:aa: cd:b6:1d:f4:f7:3a:bd:a8:bf:f0:e8:51:7f:dc:a4: dd:01:7f:ee:b7:f5:4f:3d:21:c8:14:7c:7b:94:1d: 51:f5:a4:50:9f:ec:b6:fe:96:7f:57:dc:1c:34:23: 26:24:08:d3:57:a3:f0:3c:70:76:d6:60:dc:dd:e4: f1:e8:00:17:ca:2d:5f:b0:08:dc:a2:85:48:da:20: 87:ca:a5:8a:63:19:b8:8e:b6:e0:8f:7a:58:61:b1: 7f:7a:85:15:3b:37:f0:0b:83:92:14:4f:d6:d8:de: e9:55:a2:be:18:c1:fd:74:35:9c:13:b1:70:bc:ce: cd:98:5f:76:7f:b2:58:d9:da:e3:7b:bb:05:51:b1: 70:d1:10:d0:77:ba:0b:f5:1e:65:11:96:77:1b:e7: d0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2F:03:F7:62:E6:FB:E4:2C:7E:BC:CB:F7:EB:F2:44:3B:3D:06:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f55e1060-926f-39d6-aa63-6a7305a6f1aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.7.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:a3:51:0b:05:e9:c7:5a:a2:4f:26:b5:8f:e2:c2:dd:79:80: fd:c6:60:7b:5a:e3:18:3d:70:69:60:e0:5f:a2:2a:a7:15:d3: c9:2b:ef:8c:2d:4f:d3:2f:55:ff:2d:e5:a8:1c:87:12:3c:c9: f8:92:0b:b4:f9:d4:78:aa:13:ec:4e:09:88:7a:cc:83:03:77: 29:ce:0d:e6:56:df:05:5f:69:5e:10:77:44:f2:77:fd:28:be: 82:eb:4f:42:55:49:f9:62:99:b1:d6:d1:ef:b1:71:24:92:ec: c6:f9:de:0d:d6:d6:45:bb:7e:6d:f5:93:e6:44:93:99:cd:cf: d4:74:16:8f:3a:aa:ff:ac:13:35:9d:ed:47:5b:c8:3d:32:9c: 02:0f:79:c6:f8:3f:89:8a:97:c2:c3:0e:f3:dd:76:7b:ad:50: 9b:db:14:be:05:7c:82:39:88:b6:af:c5:41:0a:4e:2d:9c:33: da:ed:d5:d6:53:4e:d3:5c:ba:17:44:0f:fa:2a:18:74:61:7f: b4:b8:a2:77:31:b4:90:ed:c6:d2:5e:e0:7b:0c:7d:9e:cd:ed: 35:10:7c:b9:6b:fb:ff:86:9e:0e:bf:ca:8f:3a:98:1d:a2:08: 77:1c:f9:ed:35:43:32:80:12:d2:fe:08:19:72:1c:52:9f:2c: b3:23:94:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcNwc2tBeIraWiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk MTVmNDU5ODItZmMxNS00MTg0LTgyMmYtOTEzYjk3NzFkNDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr9JZnkrrMrPX5eCW3gi3R4Zeg5no1T6OXsT 0Gu5ACvJE8Z0E//CkzExnWxRuNlFtl6KVarHq6NyFjs4GILci3zl0rqGbh1vFfG2 7wTdJS91Mcin3VQFcn8hOxwWxofbgbmtwLy83KrNth309zq9qL/w6FF/3KTdAX/u t/VPPSHIFHx7lB1R9aRQn+y2/pZ/V9wcNCMmJAjTV6PwPHB21mDc3eTx6AAXyi1f sAjcooVI2iCHyqWKYxm4jrbgj3pYYbF/eoUVOzfwC4OSFE/W2N7pVaK+GMH9dDWc E7FwvM7NmF92f7JY2drje7sFUbFw0RDQd7oL9R5lEZZ3G+fQeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQvA/di5vvkLH68y/fr8kQ7PQa9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjU1ZTEwNjAtOTI2Zi0z OWQ2LWFhNjMtNmE3MzA1YTZmMWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARwd1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKjUQsF6cdaok8mtY/iwt15gP3GYHta4xg9cGlg4F+iKqcV08kr74wt T9MvVf8t5agchxI8yfiSC7T51HiqE+xOCYh6zIMDdynODeZW3wVfaV4Qd0Tyd/0o voLrT0JVSflimbHW0e+xcSSS7Mb53g3W1kW7fm31k+ZEk5nNz9R0Fo86qv+sEzWd 7UdbyD0ynAIPecb4P4mKl8LDDvPddnutUJvbFL4FfII5iLavxUEKTi2cM9rt1dZT TtNcuhdED/oqGHRhf7S4oncxtJDtxtJe4HsMfZ7N7TUQfLlr+/+Gng6/yo86mB2i CHcc+e01QzKAEtL+CBlyHFKfLLMjlOg= -----END CERTIFICATE-----Generated at Wed Aug 6 11:01:30 2025 by rpki-client