$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/49491938-1a07-3c4b-b6d2-9420d5d5d089.roa File: 49491938-1a07-3c4b-b6d2-9420d5d5d089.roa (raw, json) Hash identifier: GlUgcrfqdlQzRGBiujC+ZiK6dCf4PWveqog+QyC//2w= Subject key identifier: FF:24:54:BD:7E:7F:DF:53:24:FC:9D:EC:71:8C:FF:00:9B:1C:AD:42 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584A9E9637859BA73E4764249740 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/49491938-1a07-3c4b-b6d2-9420d5d5d089.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 33588 IP address blocks: 172.221.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:37:85:9b:a7:3e:47:64:24:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=1f4584e2-8b14-424a-af9c-2f6e75583119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:11:ac:ed:e2:b1:58:37:ec:4b:01:e6:c8:d3: 3b:06:b4:2a:41:6b:c8:62:54:cd:e3:37:cd:fa:fa: 0e:99:68:c2:06:ea:6a:cc:ad:a3:40:dd:30:c8:df: c5:e2:98:8f:1a:90:15:82:bd:4c:32:fa:d2:44:77: 3e:58:67:5f:47:bb:8b:1f:cc:68:27:76:08:1d:eb: 10:9c:40:40:5a:4e:8a:28:d2:3f:bd:4d:3e:9a:78: ef:4b:e0:1c:5f:a9:a7:ec:2f:49:c7:7d:46:c8:df: 38:22:cb:c3:cd:0a:52:d6:53:0e:1c:1d:69:e8:3c: 1e:e6:0e:de:0a:74:94:fa:7e:d8:55:6a:17:c9:6f: 2f:e1:6b:e5:7d:c6:d2:3e:9b:5d:00:e5:15:e5:e7: 4e:8b:63:39:25:10:e7:38:d0:29:81:a6:e0:4a:78: c9:78:c4:3c:f5:0e:65:02:5d:38:ce:86:54:7e:96: 4b:0a:60:97:5a:f6:79:51:75:6d:f9:fd:ec:06:90: 73:ce:90:59:8c:2e:52:1b:b4:ec:3c:5c:12:7e:ff: a2:54:bd:c2:f6:1d:5a:86:19:60:f1:ae:a9:8e:6c: d7:4d:05:9c:61:79:0e:f6:bf:2b:16:cd:1f:e7:40: 45:43:43:16:ee:5d:63:bf:0f:fd:e3:45:99:21:d8: 80:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:24:54:BD:7E:7F:DF:53:24:FC:9D:EC:71:8C:FF:00:9B:1C:AD:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/49491938-1a07-3c4b-b6d2-9420d5d5d089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.221.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:13:c0:d3:f1:8c:92:11:12:6f:16:b5:24:fd:81:84:3f:c1: 98:c0:c9:94:05:f1:bb:b8:0b:ea:bc:00:4b:66:17:41:1c:b7: 2f:04:59:61:87:11:5c:ac:32:34:53:4a:23:78:79:44:8f:8f: 54:64:3e:7c:3f:db:e7:e1:2c:cb:9e:b9:a4:f6:e8:75:29:fd: 22:34:f0:d4:8f:19:87:37:78:7e:b5:36:97:5c:a6:11:a1:b4: 7f:3c:3c:c8:b9:05:3e:45:40:d4:4d:3a:4e:f4:22:f6:61:e9: 4d:59:9b:a5:c7:b6:e2:52:c2:7f:18:21:5b:b7:1c:83:fe:88: 10:76:63:f3:fe:56:09:a0:91:6d:f1:f7:44:d6:f6:3b:ab:1d: 47:8f:7f:00:30:df:78:74:3d:46:79:04:b5:f7:6e:a0:8e:82: 4c:49:f4:d7:c9:06:fa:36:bd:91:c2:af:85:a9:7d:59:ec:c7: 89:ae:3e:a2:16:6f:7b:f7:2c:2a:04:6d:42:49:86:a9:9c:81: 41:f1:81:b1:06:02:65:63:e4:06:81:51:e1:9b:21:97:87:18: 05:96:98:4a:22:79:1a:90:e5:61:3b:75:53:29:78:69:97:0b: 47:75:40:2c:ad:97:5b:24:7f:d3:91:87:24:44:7d:1f:44:dc: 20:bc:51:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqeljeFm6c+R2Qkl0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MWY0NTg0ZTItOGIxNC00MjRhLWFmOWMtMmY2ZTc1NTgzMTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RGs7eKxWDfsSwHmyNM7BrQqQWvIYlTN4zfN +voOmWjCBupqzK2jQN0wyN/F4piPGpAVgr1MMvrSRHc+WGdfR7uLH8xoJ3YIHesQ nEBAWk6KKNI/vU0+mnjvS+AcX6mn7C9Jx31GyN84IsvDzQpS1lMOHB1p6Dwe5g7e CnSU+n7YVWoXyW8v4WvlfcbSPptdAOUV5edOi2M5JRDnONApgabgSnjJeMQ89Q5l Al04zoZUfpZLCmCXWvZ5UXVt+f3sBpBzzpBZjC5SG7TsPFwSfv+iVL3C9h1ahhlg 8a6pjmzXTQWcYXkO9r8rFs0f50BFQ0MW7l1jvw/940WZIdiAWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8kVL1+f99TJPyd7HGM/wCbHK1CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNDk0OTE5MzgtMWEwNy0z YzRiLWI2ZDItOTQyMGQ1ZDVkMDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrN1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFITwNPxjJIREm8WtST9gYQ/wZjAyZQF8bu4C+q8AEtmF0Ecty8EWWGH EVysMjRTSiN4eUSPj1RkPnw/2+fhLMueuaT26HUp/SI08NSPGYc3eH61NpdcphGh tH88PMi5BT5FQNRNOk70IvZh6U1Zm6XHtuJSwn8YIVu3HIP+iBB2Y/P+VgmgkW3x 90TW9jurHUePfwAw33h0PUZ5BLX3bqCOgkxJ9NfJBvo2vZHCr4WpfVnsx4muPqIW b3v3LCoEbUJJhqmcgUHxgbEGAmVj5AaBUeGbIZeHGAWWmEoieRqQ5WE7dVMpeGmX C0d1QCytl1skf9ORhyREfR9E3CC8UQk= -----END CERTIFICATE-----Generated at Tue Aug 5 20:14:37 2025 by rpki-client