$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/86daa0b9-a1af-3e9b-9277-1811ff6b1cf8.roa File: 86daa0b9-a1af-3e9b-9277-1811ff6b1cf8.roa (raw, json) Hash identifier: 7YJCkCiRXAZJa9yG7oB3wEcY/R7Wj5yOQ7ibVBHyR0A= Subject key identifier: 03:A7:37:DD:D5:13:C9:86:BC:DA:DC:33:AE:59:72:CC:7E:94:9A:E0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A497076364BAE05FF8FB0A9C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/86daa0b9-a1af-3e9b-9277-1811ff6b1cf8.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 69.40.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:76:36:4b:ae:05:ff:8f:b0:a9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=f7c50fa9-5afe-4f47-80e8-ca77bf025cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e6:b9:18:b5:41:54:f6:e5:85:5f:5b:62:11: 6e:2e:22:d8:90:75:3d:6f:86:41:4a:2b:1a:ca:4d: 0b:55:14:6c:d0:d1:23:82:b1:a2:74:7f:63:08:1b: 6c:a5:33:5b:ae:d2:ce:63:b0:a9:08:88:a6:95:1d: 04:b1:39:14:b3:3a:32:ce:88:ba:99:b0:99:2b:13: 8b:1c:94:71:17:ab:0e:30:2f:8c:94:99:b0:20:cc: 58:a5:86:0d:ad:56:89:d3:fe:da:f8:6d:0d:e6:ab: 4b:31:44:0d:10:4e:20:79:14:6a:e8:df:e3:28:62: 07:82:c1:b9:7a:47:40:88:94:fa:71:c4:b9:fa:a1: cc:59:68:ee:f6:91:ca:bf:87:a9:79:5e:b2:c4:62: 0d:e2:d9:80:b3:66:c9:b0:78:09:51:58:a3:cf:c4: 08:a4:34:80:22:e8:f3:d7:97:b5:46:15:3f:c8:35: df:54:93:96:a9:2b:45:ed:0b:83:ba:d9:f6:30:75: c0:59:f5:ac:fb:fc:ad:c4:7c:cc:84:de:db:61:b1: 68:9d:f0:11:4f:12:6c:1e:07:c6:63:a5:8c:e8:76: 99:1b:c3:cb:5f:a2:15:9d:13:6d:cd:c3:63:39:62: a2:11:c0:95:0f:68:a5:95:b1:66:10:80:14:c9:98: d6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A7:37:DD:D5:13:C9:86:BC:DA:DC:33:AE:59:72:CC:7E:94:9A:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/86daa0b9-a1af-3e9b-9277-1811ff6b1cf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:65:6b:52:a6:8e:98:aa:d2:74:d7:70:a8:76:52:54:d3:79: 43:50:68:48:c5:0d:fa:e6:2b:89:ba:c4:88:9a:09:1f:7c:99: 11:7e:d9:73:8e:cc:b3:38:05:c8:65:c5:99:4e:f7:7c:c3:bd: 2d:13:08:9b:5a:40:40:38:d5:2d:05:5c:a0:47:b9:9a:95:9d: d8:31:b1:73:0e:86:2e:99:7c:99:21:7f:45:cc:fa:fb:e7:e4: 40:46:e9:7f:a7:cb:db:2f:a8:c8:6c:85:db:bf:8c:9f:d5:1c: 43:3c:af:1f:bc:f7:db:cc:3d:67:31:c4:45:29:60:94:6c:e2: 8c:fe:2d:64:d4:bc:49:a1:c2:24:b7:fa:fe:d4:d5:70:f2:a5: 22:31:6d:1f:87:db:21:9a:49:fc:8d:38:65:72:13:d3:f6:a4: c1:c1:b3:a2:8c:f2:4a:1f:2d:cf:44:c6:50:c1:3e:d1:93:4f: b0:64:6e:d9:85:66:9a:0e:5e:06:e3:79:50:ba:4c:6c:86:ff: 30:36:68:f7:dd:7a:05:bb:45:dd:3a:70:56:91:0b:1f:cc:d0: 46:a0:b2:83:07:1f:51:f7:81:21:0e:fc:b8:93:15:05:77:4b: f1:81:36:6b:5d:60:25:dc:ad:ba:c5:65:f5:48:e5:85:7c:14: 08:0a:4d:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHY2S64F/4+wqcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk ZjdjNTBmYTktNWFmZS00ZjQ3LTgwZTgtY2E3N2JmMDI1Y2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkua5GLVBVPblhV9bYhFuLiLYkHU9b4ZBSisa yk0LVRRs0NEjgrGidH9jCBtspTNbrtLOY7CpCIimlR0EsTkUszoyzoi6mbCZKxOL HJRxF6sOMC+MlJmwIMxYpYYNrVaJ0/7a+G0N5qtLMUQNEE4geRRq6N/jKGIHgsG5 ekdAiJT6ccS5+qHMWWju9pHKv4epeV6yxGIN4tmAs2bJsHgJUVijz8QIpDSAIujz 15e1RhU/yDXfVJOWqStF7QuDutn2MHXAWfWs+/ytxHzMhN7bYbFonfARTxJsHgfG Y6WM6HaZG8PLX6IVnRNtzcNjOWKiEcCVD2illbFmEIAUyZjW2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOnN93VE8mGvNrcM65Zcsx+lJrgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODZkYWEwYjktYTFhZi0z ZTliLTkyNzctMTgxMWZmNmIxY2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERSjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtla1Kmjpiq0nTXcKh2UlTTeUNQaEjFDfrmK4m6xIiaCR98mRF+2XOO zLM4BchlxZlO93zDvS0TCJtaQEA41S0FXKBHuZqVndgxsXMOhi6ZfJkhf0XM+vvn 5EBG6X+ny9svqMhshdu/jJ/VHEM8rx+899vMPWcxxEUpYJRs4oz+LWTUvEmhwiS3 +v7U1XDypSIxbR+H2yGaSfyNOGVyE9P2pMHBs6KM8kofLc9ExlDBPtGTT7BkbtmF ZpoOXgbjeVC6TGyG/zA2aPfdegW7Rd06cFaRCx/M0EagsoMHH1H3gSEO/LiTFQV3 S/GBNmtdYCXcrbrFZfVI5YV8FAgKTf4= -----END CERTIFICATE-----Generated at Mon Jun 30 22:33:54 2025 by rpki-client