$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/601631aa-1788-3e00-8366-1ab7d8df59e3.roa File: 601631aa-1788-3e00-8366-1ab7d8df59e3.roa (raw, json) Hash identifier: P85u+LzVfGHqtB2tVOh8eUQT8uWQK1Teq8CCb4FZdJU= Subject key identifier: AA:41:76:3C:A8:98:8B:FF:A9:C0:62:F5:E2:A2:D7:90:6C:A2:76:3E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0F80B3E0802C45BAA7C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/601631aa-1788-3e00-8366-1ab7d8df59e3.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 66.32.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:f8:0b:3e:08:02:c4:5b:aa:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=b740d884-011c-4f6c-b7a6-ed566efec393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:65:18:cb:da:f4:93:e4:22:34:29:c7:b8:47: 28:48:fc:e8:4c:8c:af:e9:ae:09:47:00:c0:b6:40: 10:09:66:3a:1f:d4:c2:fe:6d:68:09:8b:23:74:e9: e6:e3:fa:71:98:80:15:c9:09:40:a3:ca:b5:9a:9c: 22:d6:d0:ab:7a:80:99:06:cf:9c:bd:3f:46:8e:b1: 7e:bd:b9:d9:b5:e5:03:07:ea:a2:a2:c6:46:af:63: fd:c2:10:86:1d:18:d2:f4:95:09:cf:7c:54:ed:e0: 6e:14:9a:42:5d:ec:83:f2:f0:05:0b:de:06:85:71: 6c:6c:f9:0e:47:d3:f7:96:24:d5:95:43:43:8f:b6: 13:3d:a4:da:db:0a:7f:46:14:78:53:95:9e:da:db: df:dc:5a:87:22:29:2c:1a:37:83:db:28:c6:dc:26: f2:09:28:6c:79:0b:e8:f8:a8:32:cc:c2:6c:1f:ea: 48:11:c2:24:d7:f9:69:aa:f9:bf:fd:19:58:11:eb: 98:da:f2:aa:be:bf:c8:f4:9d:f4:4e:49:44:5d:5a: f9:9e:29:6a:42:70:c7:25:11:40:2c:5a:28:d7:eb: 37:4a:48:88:9e:e3:bf:e4:e0:3d:9b:c3:bf:44:e6: 18:24:86:e8:7c:64:80:69:4e:74:ed:1b:1d:40:24: bf:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:41:76:3C:A8:98:8B:FF:A9:C0:62:F5:E2:A2:D7:90:6C:A2:76:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/601631aa-1788-3e00-8366-1ab7d8df59e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.32.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:ef:60:9d:f5:e9:ee:27:2c:42:1b:12:10:78:33:e1:8c:46: 52:e1:53:79:4e:0f:1a:d8:86:19:c5:88:a4:7e:75:f9:9f:c4: 88:25:cf:6b:2d:c1:37:f1:3a:8a:72:f4:86:5c:9e:a0:be:a7: df:31:d9:8a:bf:1f:88:e7:44:11:78:fd:5e:37:7b:80:e9:ed: 72:86:dc:7e:23:9d:2b:88:70:6c:cc:61:2e:55:5d:5d:5c:13: 0b:13:97:42:32:3b:cf:89:19:8f:88:08:dd:d0:06:cb:a0:cd: 19:63:c7:38:0c:81:e3:f3:e1:a5:3f:31:e0:98:3a:b6:f1:ae: 62:ca:8e:6c:0c:c4:cb:e6:83:e8:d2:90:c2:9b:c6:27:93:01: ae:2e:34:49:b7:1f:cb:1e:49:7c:12:68:ea:ad:50:82:c9:8d: 1e:74:e5:6d:1f:d5:14:95:a0:6a:78:86:4e:d7:e1:1a:e8:1e: ab:16:c9:a9:8b:68:e0:71:97:17:8f:01:c6:8b:4c:cc:2b:16: e0:b2:01:d3:ec:c1:58:25:aa:d8:49:02:16:28:49:d4:8a:77: 11:2b:0b:f5:c9:2c:5f:d5:50:51:c8:af:74:df:3d:b6:a4:97: 4c:a3:1f:10:f3:0f:bc:43:69:19:4a:e3:f4:a8:a4:3a:52:51: 16:22:d1:84 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqQoPgLPggCxFuqfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk Yjc0MGQ4ODQtMDExYy00ZjZjLWI3YTYtZWQ1NjZlZmVjMzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWUYy9r0k+QiNCnHuEcoSPzoTIyv6a4JRwDA tkAQCWY6H9TC/m1oCYsjdOnm4/pxmIAVyQlAo8q1mpwi1tCreoCZBs+cvT9GjrF+ vbnZteUDB+qiosZGr2P9whCGHRjS9JUJz3xU7eBuFJpCXeyD8vAFC94GhXFsbPkO R9P3liTVlUNDj7YTPaTa2wp/RhR4U5We2tvf3FqHIiksGjeD2yjG3CbyCShseQvo +KgyzMJsH+pIEcIk1/lpqvm//RlYEeuY2vKqvr/I9J30TklEXVr5nilqQnDHJRFA LFoo1+s3SkiInuO/5OA9m8O/ROYYJIbofGSAaU507RsdQCS/OwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKpBdjyomIv/qcBi9eKi15BsonY+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjAxNjMxYWEtMTc4OC0z ZTAwLTgzNjYtMWFiN2Q4ZGY1OWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQiAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAMe9gnfXp7icsQhsSEHgz4YxGUuFTeU4PGtiGGcWIpH51+Z/EiCXPay3B N/E6inL0hlyeoL6n3zHZir8fiOdEEXj9Xjd7gOntcobcfiOdK4hwbMxhLlVdXVwT CxOXQjI7z4kZj4gI3dAGy6DNGWPHOAyB4/PhpT8x4Jg6tvGuYsqObAzEy+aD6NKQ wpvGJ5MBri40Sbcfyx5JfBJo6q1QgsmNHnTlbR/VFJWganiGTtfhGugeqxbJqYto 4HGXF48BxotMzCsW4LIB0+zBWCWq2EkCFihJ1Ip3ESsL9cksX9VQUcivdN89tqSX TKMfEPMPvENpGUrj9KikOlJRFiLRhA== -----END CERTIFICATE-----Generated at Sat Aug 23 15:19:07 2025 by rpki-client