$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d6766d3-23af-3f54-8170-2c1bf3e0bf10.roa File: 5d6766d3-23af-3f54-8170-2c1bf3e0bf10.roa (raw, json) Hash identifier: iNeIRDoPk4u9rsW7LRK1K83df026mk7S7uFKDpSdrYk= Subject key identifier: 09:DA:26:50:22:66:B5:E2:12:52:AF:04:C0:F3:4D:9A:9E:89:27:18 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB38625D7FF12960839DA5000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d6766d3-23af-3f54-8170-2c1bf3e0bf10.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 7029 IP address blocks: 69.40.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:25:d7:ff:12:96:08:39:da:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=0f0dff7c-9536-40c0-86c2-a406f1c08a5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:aa:ca:50:d9:39:32:10:ca:56:c9:9e:45:58: 5a:d0:5f:f3:e2:d0:8d:a1:fc:65:1a:15:bd:e8:b7: 5d:90:53:c7:34:95:e8:17:13:54:b9:d4:11:ea:b5: 05:45:d3:47:b3:11:7d:cd:5d:cf:3b:bf:86:b2:b9: 14:7c:22:c8:d8:57:d8:cf:18:64:ee:fb:2e:d8:23: 43:5c:c5:f2:d1:42:21:41:be:90:1a:45:fd:5d:58: 01:f7:cb:47:63:ad:f4:17:f5:bd:1b:98:6d:3a:24: cc:01:6a:e4:c1:05:8d:ba:00:62:b2:fe:cc:06:21: 8f:f3:f7:c8:79:ea:0f:a0:69:dc:65:17:0a:7b:c4: bf:24:2a:ca:7d:a0:bc:4f:db:f0:a1:72:b0:c6:b3: 1a:cb:e6:e3:5d:cc:fd:94:ac:5b:8b:e2:3a:7b:60: f8:20:fc:de:b5:54:a1:da:1c:bf:5b:27:b1:58:c4: fb:31:dd:2b:20:4c:2f:21:48:c9:30:4c:56:ee:28: 28:d7:41:6f:95:32:4c:f9:ff:0a:25:54:57:ac:72: b9:cd:cf:42:cb:5f:56:fe:29:68:ed:34:21:a8:ac: c8:09:d4:2c:e2:59:49:3e:cd:14:36:a4:06:87:71: e6:71:e0:3f:d5:bc:14:ae:d3:11:98:a7:77:14:83: 86:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DA:26:50:22:66:B5:E2:12:52:AF:04:C0:F3:4D:9A:9E:89:27:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d6766d3-23af-3f54-8170-2c1bf3e0bf10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:45:32:f9:d1:75:0e:46:5e:4b:f3:4e:24:68:2e:6f:ce:78: e4:ae:7f:03:df:f3:a1:c9:13:eb:32:17:a2:ba:52:a2:4b:00: 64:a6:23:af:ef:04:01:a9:db:ee:fb:aa:e2:12:dd:63:0f:6b: 0d:2f:ee:c0:d6:d8:7a:1c:46:83:8c:3f:15:cd:f1:27:29:8b: 2e:a8:8c:24:de:92:d6:10:c0:ed:f1:04:21:9e:b0:85:8a:f2: c4:6c:8c:05:b1:1a:26:07:8b:ab:83:a2:30:1c:14:58:3f:20: 4e:65:38:33:e8:f2:5d:e6:04:52:1d:ac:77:aa:58:2d:b8:24: 3b:4f:2e:57:a6:19:f5:6a:18:3f:93:70:d6:a6:06:85:3b:38: 87:8c:29:c7:88:71:41:1f:cc:60:1a:b1:20:5c:3f:18:eb:e9: b3:0a:89:e4:94:6e:86:c1:b5:cf:95:81:44:a3:85:12:ec:7a: ac:df:9e:5a:a1:cd:76:71:4f:be:62:85:fc:79:c3:9a:dc:94: d9:7d:f5:5d:74:e6:b7:76:bd:ad:fc:12:2e:cf:0b:70:3a:0b: 0b:c4:1b:c9:dd:ea:1b:96:16:09:c8:d5:a5:4e:e9:f8:d0:4e: 14:22:28:44:79:f0:ac:bd:cd:b9:f5:0d:ff:38:7d:16:fa:f2: 29:a7:13:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhiXX/xKWCDnaUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk MGYwZGZmN2MtOTUzNi00MGMwLTg2YzItYTQwNmYxYzA4YTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6rKUNk5MhDKVsmeRVha0F/z4tCNofxlGhW9 6LddkFPHNJXoFxNUudQR6rUFRdNHsxF9zV3PO7+GsrkUfCLI2FfYzxhk7vsu2CND XMXy0UIhQb6QGkX9XVgB98tHY630F/W9G5htOiTMAWrkwQWNugBisv7MBiGP8/fI eeoPoGncZRcKe8S/JCrKfaC8T9vwoXKwxrMay+bjXcz9lKxbi+I6e2D4IPzetVSh 2hy/WyexWMT7Md0rIEwvIUjJMExW7igo10FvlTJM+f8KJVRXrHK5zc9Cy19W/ilo 7TQhqKzICdQs4llJPs0UNqQGh3HmceA/1bwUrtMRmKd3FIOGYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnaJlAiZrXiElKvBMDzTZqeiScYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWQ2NzY2ZDMtMjNhZi0z ZjU0LTgxNzAtMmMxYmYzZTBiZjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERSgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1FMvnRdQ5GXkvzTiRoLm/OeOSufwPf86HJE+syF6K6UqJLAGSmI6/v BAGp2+77quIS3WMPaw0v7sDW2HocRoOMPxXN8Scpiy6ojCTektYQwO3xBCGesIWK 8sRsjAWxGiYHi6uDojAcFFg/IE5lODPo8l3mBFIdrHeqWC24JDtPLlemGfVqGD+T cNamBoU7OIeMKceIcUEfzGAasSBcPxjr6bMKieSUbobBtc+VgUSjhRLseqzfnlqh zXZxT75ihfx5w5rclNl99V105rd2va38Ei7PC3A6CwvEG8nd6huWFgnI1aVO6fjQ ThQiKER58Ky9zbn1Df84fRb68imnE5M= -----END CERTIFICATE-----Generated at Sat Aug 23 20:19:25 2025 by rpki-client