$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe189f68-b9fb-380f-9c0a-3fc3678c8744.roa File: fe189f68-b9fb-380f-9c0a-3fc3678c8744.roa (raw, json) Hash identifier: 0z7LEsJ5KOvbyAZZL/datkPuigSucRpC+ELN3fpIygA= Subject key identifier: 50:4C:AE:9F:51:7D:0C:35:A6:5C:66:EA:DE:24:47:77:D2:96:6E:6B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB4EC64F5A2E6812916E33EC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe189f68-b9fb-380f-9c0a-3fc3678c8744.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 7029 IP address blocks: 64.24.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:64:f5:a2:e6:81:29:16:e3:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=3d49139a-3057-4130-addd-fecb7543e683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:9a:6d:25:a5:4b:b7:7d:01:72:6b:1e:22:df: 7f:dd:99:cd:63:44:04:df:59:89:a5:3c:30:fc:a8: 01:9d:9b:9e:2a:f0:e9:bf:6c:fe:c7:ce:28:e0:0d: e3:9d:9a:cd:3f:21:7f:26:92:e7:4e:51:46:1e:76: 3a:49:6a:ba:4c:44:06:58:6e:20:e0:db:a7:e9:82: af:fc:0b:2f:8c:a8:b0:3f:ab:2c:59:06:09:89:ab: 42:9f:bf:67:29:be:36:37:ba:d6:c5:17:a1:20:c3: 7e:b0:72:f0:19:be:e5:1d:21:76:93:d2:aa:d2:f7: 3e:92:34:14:dc:ad:c8:81:70:57:78:96:2f:6f:e7: ff:a3:ce:44:3a:14:bc:af:c2:3f:95:c7:c7:1e:31: c5:93:2b:be:ed:1f:9b:8b:21:a5:33:e0:87:9e:a1: 07:92:f7:64:a1:c4:96:f7:6c:5c:31:b4:e3:f7:34: 1e:ee:3b:e0:b8:26:28:df:15:3a:e9:b9:17:08:2c: 20:2b:3c:92:86:ed:34:f3:a4:d3:3f:7d:d5:4e:26: 7f:57:3e:1c:47:2a:ef:7b:eb:22:11:7b:a6:09:b2: 98:ca:dc:50:45:10:62:15:e4:3a:26:3f:c2:f4:00: fe:6e:2e:f9:e1:94:9f:60:6b:9c:86:b8:14:7e:28: 72:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:4C:AE:9F:51:7D:0C:35:A6:5C:66:EA:DE:24:47:77:D2:96:6E:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe189f68-b9fb-380f-9c0a-3fc3678c8744.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.24.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ae:25:27:6f:41:44:68:28:63:0d:35:0e:52:c9:b4:1e:89: 04:47:6f:ae:46:97:86:3c:6d:db:7f:e5:c4:53:01:4d:8d:6a: 04:ac:97:83:7b:a5:3a:26:99:97:0c:a1:a2:12:72:0d:e5:52: 70:f5:1d:a7:53:66:20:2c:e5:67:a5:86:81:7e:8f:c9:77:cb: 33:18:9d:09:07:cb:e4:98:44:ce:a4:eb:e9:3e:0e:8c:0d:95: 8d:3d:e9:75:b7:40:61:a8:30:f8:6c:a0:38:d8:d7:d8:7c:f6: 5e:96:c7:55:40:96:6e:87:c4:27:27:32:0d:61:90:22:f1:03: 9b:a3:78:4e:a7:62:5a:48:8d:95:fd:21:06:4c:dc:e5:b2:cf: 60:bd:a5:59:5a:15:f9:95:7d:0e:4a:0e:a5:b2:ad:cf:9d:08: aa:96:ec:75:15:14:54:63:e2:13:65:db:d4:dd:24:4d:d1:31: 4c:75:18:13:6a:b3:c2:bc:a4:f3:0f:3e:28:b7:93:0c:79:a3: 55:95:c3:f2:16:69:0f:ef:bb:b5:10:e6:ad:6d:29:06:ae:04: cc:d4:6d:db:1c:2f:cd:4b:99:33:81:71:48:88:ce:bc:df:92: b6:63:55:e9:54:df:ef:a0:3c:99:85:08:bf:32:93:de:ba:19: 43:ec:bb:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07GT1ouaBKRbjPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk M2Q0OTEzOWEtMzA1Ny00MTMwLWFkZGQtZmVjYjc1NDNlNjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA95ptJaVLt30BcmseIt9/3ZnNY0QE31mJpTww /KgBnZueKvDpv2z+x84o4A3jnZrNPyF/JpLnTlFGHnY6SWq6TEQGWG4g4Nun6YKv /AsvjKiwP6ssWQYJiatCn79nKb42N7rWxRehIMN+sHLwGb7lHSF2k9Kq0vc+kjQU 3K3IgXBXeJYvb+f/o85EOhS8r8I/lcfHHjHFkyu+7R+biyGlM+CHnqEHkvdkocSW 92xcMbTj9zQe7jvguCYo3xU66bkXCCwgKzyShu0086TTP33VTiZ/Vz4cRyrve+si EXumCbKYytxQRRBiFeQ6Jj/C9AD+bi754ZSfYGuchrgUfihyTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBMrp9RfQw1plxm6t4kR3fSlm5rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmUxODlmNjgtYjlmYi0z ODBmLTljMGEtM2ZjMzY3OGM4NzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQBgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWuJSdvQURoKGMNNQ5SybQeiQRHb65Gl4Y8bdt/5cRTAU2NagSsl4N7 pTommZcMoaIScg3lUnD1HadTZiAs5WelhoF+j8l3yzMYnQkHy+SYRM6k6+k+DowN lY096XW3QGGoMPhsoDjY19h89l6Wx1VAlm6HxCcnMg1hkCLxA5ujeE6nYlpIjZX9 IQZM3OWyz2C9pVlaFfmVfQ5KDqWyrc+dCKqW7HUVFFRj4hNl29TdJE3RMUx1GBNq s8K8pPMPPii3kwx5o1WVw/IWaQ/vu7UQ5q1tKQauBMzUbdscL81LmTOBcUiIzrzf krZjVelU3++gPJmFCL8yk966GUPsu6M= -----END CERTIFICATE-----Generated at Mon Aug 4 16:02:48 2025 by rpki-client