$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21e30966-1560-3fc3-86b8-d02897b182db.roa File: 21e30966-1560-3fc3-86b8-d02897b182db.roa (raw, json) Hash identifier: dywnmlAtNA+ZYauUp6fo95DU1xXa57al09K/BkV9m38= Subject key identifier: FE:DF:EE:C2:2F:91:49:EB:CB:29:B3:44:77:B8:01:55:59:31:FB:DE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD669183D6C7AB3CC72B9860 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21e30966-1560-3fc3-86b8-d02897b182db.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 69.40.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:91:83:d6:c7:ab:3c:c7:2b:98:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=291ab853-0010-47b0-baf6-9716e3b747ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5d:31:cd:97:7e:ba:5a:d1:64:99:ba:97:61: 4f:01:17:7a:42:e7:01:4b:1e:15:bf:aa:0d:4f:24: 08:9e:7d:2d:fc:e3:87:bb:ae:23:7e:51:6e:5f:5e: 9f:b6:e2:bf:ff:ce:0d:8c:ee:d0:43:da:1e:26:38: 84:24:af:bc:46:11:64:d1:4c:b7:51:bd:44:77:fe: 9a:00:79:a3:16:d3:ed:1c:e7:49:11:8b:85:f3:85: 17:d4:00:86:67:88:e0:86:c3:cc:b5:c6:eb:62:28: f7:6f:dd:b0:3b:a3:50:7a:64:73:a9:d6:62:27:06: cc:dc:9c:bc:22:3c:c8:7e:b2:73:cf:b4:03:9e:ac: 59:12:c3:3b:b1:bf:21:73:d7:c8:6b:d7:37:c6:cc: 6b:37:b7:16:c8:40:74:8b:0a:2f:f6:5b:15:50:5c: 1e:63:5b:82:ee:66:6e:b6:74:2e:50:c6:bd:a0:43: 02:bd:32:21:d1:c3:67:c6:4a:9b:7b:ea:9c:a3:9e: 61:09:8f:0d:45:4f:92:39:9b:ea:cd:d9:f2:ae:1e: 85:05:32:cd:05:5e:30:d0:43:9e:f4:9c:25:cf:e5: f4:ae:d7:ef:d3:ed:29:95:8c:1c:e1:74:1a:7b:56: a3:05:5c:7c:61:4e:45:ee:8a:0e:1a:d0:78:42:13: 8b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DF:EE:C2:2F:91:49:EB:CB:29:B3:44:77:B8:01:55:59:31:FB:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21e30966-1560-3fc3-86b8-d02897b182db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:6c:9b:ed:6e:17:ea:6d:47:14:6f:53:9d:e6:51:9a:20:1d: 32:d2:af:82:72:19:06:1c:1b:89:8f:d9:9c:89:ec:f7:7f:b4: fc:e0:d3:6a:8a:7d:7d:db:66:0b:3b:73:37:51:a9:0f:21:2e: 53:f3:52:f4:a1:f2:cb:a0:cc:c2:48:3c:74:ae:81:86:8b:3a: 85:6d:b4:19:e2:bb:af:67:61:89:48:c3:4e:7b:1f:aa:ed:fe: cb:31:93:4a:d4:f5:b8:c1:2d:c0:e3:df:3a:a6:7c:b0:df:90: e4:0a:82:f3:b5:43:ce:e6:cc:69:90:7c:b3:0b:8d:7b:6a:e7: 68:3d:c7:bb:4f:33:eb:e0:1a:c6:45:86:ff:7e:3c:42:2d:73: 49:89:a9:68:c6:2c:fd:d6:20:3d:8e:d9:e5:02:68:fd:8d:2b: 20:ad:f7:96:d6:e1:cc:e6:9c:48:ff:4b:69:61:b5:20:39:29: 0e:3c:c4:75:d2:6f:31:b5:d2:0c:fa:c7:67:2c:e5:19:25:0b: 79:d9:05:38:2f:24:db:51:59:46:4c:70:03:f9:98:7e:f3:67: a8:11:7e:66:c3:f1:48:e7:1f:7c:df:50:f4:a2:5e:d0:8a:0e: a9:2f:0f:6c:2b:8d:21:19:b9:1e:00:2f:f3:b4:95:68:c1:77: 98:3e:44:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZpGD1serPMcrmGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk MjkxYWI4NTMtMDAxMC00N2IwLWJhZjYtOTcxNmUzYjc0N2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF0xzZd+ulrRZJm6l2FPARd6QucBSx4Vv6oN TyQInn0t/OOHu64jflFuX16ftuK//84NjO7QQ9oeJjiEJK+8RhFk0Uy3Ub1Ed/6a AHmjFtPtHOdJEYuF84UX1ACGZ4jghsPMtcbrYij3b92wO6NQemRzqdZiJwbM3Jy8 IjzIfrJzz7QDnqxZEsM7sb8hc9fIa9c3xsxrN7cWyEB0iwov9lsVUFweY1uC7mZu tnQuUMa9oEMCvTIh0cNnxkqbe+qco55hCY8NRU+SOZvqzdnyrh6FBTLNBV4w0EOe 9Jwlz+X0rtfv0+0plYwc4XQae1ajBVx8YU5F7ooOGtB4QhOLQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7f7sIvkUnryymzRHe4AVVZMfveMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjFlMzA5NjYtMTU2MC0z ZmMzLTg2YjgtZDAyODk3YjE4MmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRSg4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdsm+1uF+ptRxRvU53mUZogHTLSr4JyGQYcG4mP2ZyJ7Pd/tPzg02qK fX3bZgs7czdRqQ8hLlPzUvSh8sugzMJIPHSugYaLOoVttBniu69nYYlIw057H6rt /ssxk0rU9bjBLcDj3zqmfLDfkOQKgvO1Q87mzGmQfLMLjXtq52g9x7tPM+vgGsZF hv9+PEItc0mJqWjGLP3WID2O2eUCaP2NKyCt95bW4czmnEj/S2lhtSA5KQ48xHXS bzG10gz6x2cs5RklC3nZBTgvJNtRWUZMcAP5mH7zZ6gRfmbD8UjnH3zfUPSiXtCK DqkvD2wrjSEZuR4AL/O0lWjBd5g+RPA= -----END CERTIFICATE-----Generated at Sat Aug 23 14:23:41 2025 by rpki-client