$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e4911fe-8ac0-3d0e-b1c1-48e6adbce856.roa File: 7e4911fe-8ac0-3d0e-b1c1-48e6adbce856.roa (raw, json) Hash identifier: 5QpquQlgeLURBJOPlNbzVc+27CJECcX50omNOHYlGjI= Subject key identifier: 3B:5C:AA:AF:4F:C5:68:A4:9B:2B:9D:39:83:25:00:CD:EE:C4:CF:40 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5765D91D74449EF75285E320 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e4911fe-8ac0-3d0e-b1c1-48e6adbce856.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 7029 IP address blocks: 139.55.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:d9:1d:74:44:9e:f7:52:85:e3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=32db5f4d-fa3f-4a38-b613-20623e427fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:59:b7:ab:4e:6e:78:91:df:18:c4:b8:ff:4a: 87:a1:3d:c6:ee:23:e1:50:af:d8:cf:6e:d0:0d:f2: 82:41:37:4f:8a:d3:b8:23:72:5e:fe:dc:25:c0:a6: 26:f5:11:f9:d5:09:1b:af:15:c2:d3:ea:a5:79:a3: 4c:8d:61:6f:ea:29:7b:2e:2a:97:6a:da:50:f0:33: d0:7e:6a:9b:66:38:a1:1d:5e:c9:f5:6c:4a:f7:28: b1:0d:06:30:29:9b:ee:fa:86:a1:d9:2e:68:21:f2: ed:4f:71:40:04:9c:1b:d2:36:f8:08:8d:b3:06:2c: 43:04:11:f8:9f:db:e0:00:25:16:1e:7b:2f:c6:04: f8:9c:83:cc:44:9e:d7:48:a3:fa:8c:a1:af:75:f6: 35:02:37:be:83:24:b7:9d:79:03:54:a7:3b:a7:ba: d0:49:90:1a:41:48:53:c8:9c:54:5b:73:67:2b:e5: 7e:9b:aa:1c:bc:1d:2e:e3:16:7b:b9:b6:53:a7:3f: f5:b8:95:6b:db:18:7c:23:e0:85:23:d8:2c:b9:4d: 26:89:99:eb:5f:21:ad:88:9f:1f:57:75:b6:9e:a9: 67:fb:d0:aa:ce:64:12:f2:21:0a:bb:76:96:55:c2: aa:2b:fe:32:ae:aa:56:d9:c5:1b:03:ba:41:31:37: c9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5C:AA:AF:4F:C5:68:A4:9B:2B:9D:39:83:25:00:CD:EE:C4:CF:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e4911fe-8ac0-3d0e-b1c1-48e6adbce856.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 139.55.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:11:f4:52:88:38:d0:07:09:f9:d0:f2:4e:09:40:60:5d:af: b3:23:58:1f:70:7b:ab:4a:4b:f7:ff:cd:5c:8e:a0:dc:04:1f: 43:0a:42:40:92:7f:6c:cb:b8:3a:86:af:9a:d8:ce:2f:fb:21: 8e:b9:16:d3:4e:9f:4f:36:56:59:86:37:55:88:32:28:d4:28: 88:84:85:d0:9e:07:2f:17:15:71:8b:dc:8c:88:cc:07:4d:b1: 91:76:42:4a:46:d8:14:ef:d5:7f:f1:ea:7d:d9:a8:5c:90:0c: fa:0b:b2:49:f5:a9:17:36:4d:f0:7b:02:54:d2:70:11:e6:90: d5:20:98:03:25:18:46:d1:1e:50:40:7e:31:5d:6b:09:a6:79: 20:4c:8e:08:98:c4:b7:e4:d6:6c:22:ba:0c:41:37:6f:a7:52: 2d:42:f7:c1:69:35:f4:bd:a3:3d:a6:d1:eb:77:15:5b:a9:28: 7e:90:9a:9a:7a:7b:f8:36:0f:ad:48:01:f0:d9:bc:bd:4d:b7: d4:37:5c:16:25:86:03:72:12:fd:59:8f:65:19:b6:8b:54:01: ff:6a:00:48:80:90:e8:dc:d2:7a:79:b8:04:41:49:6d:65:6e: 5d:4d:b5:ac:bc:30:12:7d:da:25:51:25:27:bf:e2:76:a0:af: 48:cb:37:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZdkddESe91KF4yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk MzJkYjVmNGQtZmEzZi00YTM4LWI2MTMtMjA2MjNlNDI3ZmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlm3q05ueJHfGMS4/0qHoT3G7iPhUK/Yz27Q DfKCQTdPitO4I3Je/twlwKYm9RH51QkbrxXC0+qleaNMjWFv6il7LiqXatpQ8DPQ fmqbZjihHV7J9WxK9yixDQYwKZvu+oah2S5oIfLtT3FABJwb0jb4CI2zBixDBBH4 n9vgACUWHnsvxgT4nIPMRJ7XSKP6jKGvdfY1Aje+gyS3nXkDVKc7p7rQSZAaQUhT yJxUW3NnK+V+m6ocvB0u4xZ7ubZTpz/1uJVr2xh8I+CFI9gsuU0miZnrXyGtiJ8f V3W2nqln+9CqzmQS8iEKu3aWVcKqK/4yrqpW2cUbA7pBMTfJOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtcqq9PxWikmyudOYMlAM3uxM9AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2U0OTExZmUtOGFjMC0z ZDBlLWIxYzEtNDhlNmFkYmNlODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEizcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQR9FKIONAHCfnQ8k4JQGBdr7MjWB9we6tKS/f/zVyOoNwEH0MKQkCS f2zLuDqGr5rYzi/7IY65FtNOn082VlmGN1WIMijUKIiEhdCeBy8XFXGL3IyIzAdN sZF2QkpG2BTv1X/x6n3ZqFyQDPoLskn1qRc2TfB7AlTScBHmkNUgmAMlGEbRHlBA fjFdawmmeSBMjgiYxLfk1mwiugxBN2+nUi1C98FpNfS9oz2m0et3FVupKH6Qmpp6 e/g2D61IAfDZvL1Nt9Q3XBYlhgNyEv1Zj2UZtotUAf9qAEiAkOjc0np5uARBSW1l bl1Ntay8MBJ92iVRJSe/4nagr0jLN+M= -----END CERTIFICATE-----Generated at Sun Jun 29 06:34:57 2025 by rpki-client