$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/677bf449-16a3-35f8-b3cb-cacac6c0b5c2.roa File: 677bf449-16a3-35f8-b3cb-cacac6c0b5c2.roa (raw, json) Hash identifier: FYwF6vd1P0GEJs79LXNalQ7qYT77nOFm7DQr1uqU9tQ= Subject key identifier: 1E:5E:7D:AC:71:38:C1:60:4A:56:44:89:9D:E0:4E:E4:C4:EC:F5:B3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A6C55EDFA1C802D1F156D1000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/677bf449-16a3-35f8-b3cb-cacac6c0b5c2.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 72.16.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:ed:fa:1c:80:2d:1f:15:6d:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=07818692-8c02-4a04-9137-88f6fd12201f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4d:7e:5c:fa:8a:d2:28:1a:f5:51:1c:f7:92: 2e:cc:c3:a3:6f:2a:29:be:12:1a:8e:58:34:17:ad: 0e:e7:ae:a2:1c:27:c8:10:7e:3e:83:fe:bf:66:bc: a5:cf:d7:9f:36:fc:99:fe:79:19:9c:91:f3:96:4a: fd:c7:0a:27:63:d8:bc:4f:88:9c:38:c1:0d:67:49: 9f:68:92:36:94:a0:ef:47:9c:84:7a:ff:8a:4d:b1: c1:34:67:2d:e5:50:6f:99:1a:20:bf:a1:6a:6f:8b: bd:df:65:92:cc:64:87:b4:df:7a:b6:45:3c:de:5a: 7c:02:cf:35:7d:2e:d9:58:be:8d:36:31:7b:c9:61: 4b:27:ba:a9:5f:e2:44:35:c4:13:7c:9e:8f:ba:d3: fd:5d:79:d4:d4:3d:ba:ba:ca:38:f8:a6:87:29:0f: 9e:df:8f:a6:03:cb:3f:78:00:68:49:8c:25:98:44: 0e:87:bd:c6:ee:81:02:ad:c2:98:0c:e0:c3:0a:97: 73:f8:5a:d8:e7:77:db:0f:40:94:00:f3:bd:1a:9e: c0:d7:92:ab:c6:30:36:d4:41:d2:71:54:4a:e4:74: c1:5b:25:01:11:52:66:24:b0:52:36:44:77:5d:11: 87:24:af:a8:92:07:fb:7a:9b:29:a0:85:54:3a:ea: 19:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5E:7D:AC:71:38:C1:60:4A:56:44:89:9D:E0:4E:E4:C4:EC:F5:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/677bf449-16a3-35f8-b3cb-cacac6c0b5c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:53:37:c6:63:80:16:41:f0:f4:ff:e0:85:3e:f6:39:9b:14: 38:3c:96:25:94:d8:5b:db:fa:23:ef:fb:07:7f:8d:6f:ff:2f: f2:94:39:cf:0a:36:6e:fb:e0:be:3a:eb:f4:45:41:95:ad:b3: 58:17:b6:1d:b3:6e:57:f6:62:17:0e:87:f4:79:8a:e4:30:3c: 1e:0b:ad:10:8d:f7:8d:95:a5:91:bd:f3:20:9e:c3:bd:f3:52: 77:67:4a:d6:0d:0b:82:40:4a:75:7b:a5:98:1b:cd:a8:d2:7e: 13:83:35:4d:e0:6a:64:ef:b2:63:35:3a:f3:75:e9:c8:a9:52: 29:ad:ce:a1:90:4d:f0:80:3e:2c:b7:94:6b:11:e1:62:b6:89: 09:d9:63:2e:12:bd:89:68:da:63:41:d2:24:89:2e:5f:9f:2a: 95:8d:99:df:2a:ec:da:72:c4:29:88:b6:ac:c7:f2:c0:29:10: 8d:41:55:a7:42:64:8b:4c:e4:19:2d:31:65:a5:46:c2:b9:e5: a8:6b:8c:bc:b8:5e:c0:67:96:df:65:ef:6a:46:29:b5:40:ba: 0f:ee:e2:66:90:39:ad:a8:ce:47:95:fc:9c:14:ca:6e:36:f5: 85:e8:02:3a:2b:5b:f5:c5:0e:ca:be:ff:a6:1c:90:da:4f:ca: df:84:6f:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVe36HIAtHxVtEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk MDc4MTg2OTItOGMwMi00YTA0LTkxMzctODhmNmZkMTIyMDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3U1+XPqK0iga9VEc95IuzMOjbyopvhIajlg0 F60O566iHCfIEH4+g/6/Zrylz9efNvyZ/nkZnJHzlkr9xwonY9i8T4icOMENZ0mf aJI2lKDvR5yEev+KTbHBNGct5VBvmRogv6Fqb4u932WSzGSHtN96tkU83lp8As81 fS7ZWL6NNjF7yWFLJ7qpX+JENcQTfJ6PutP9XXnU1D26uso4+KaHKQ+e34+mA8s/ eABoSYwlmEQOh73G7oECrcKYDODDCpdz+FrY53fbD0CUAPO9Gp7A15KrxjA21EHS cVRK5HTBWyUBEVJmJLBSNkR3XRGHJK+okgf7epspoIVUOuoZ4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5efaxxOMFgSlZEiZ3gTuTE7PWzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjc3YmY0NDktMTZhMy0z NWY4LWIzY2ItY2FjYWM2YzBiNWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBAKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJTN8ZjgBZB8PT/4IU+9jmbFDg8liWU2Fvb+iPv+wd/jW//L/KUOc8K Nm774L466/RFQZWts1gXth2zblf2YhcOh/R5iuQwPB4LrRCN942VpZG98yCew73z UndnStYNC4JASnV7pZgbzajSfhODNU3gamTvsmM1OvN16cipUimtzqGQTfCAPiy3 lGsR4WK2iQnZYy4SvYlo2mNB0iSJLl+fKpWNmd8q7NpyxCmItqzH8sApEI1BVadC ZItM5BktMWWlRsK55ahrjLy4XsBnlt9l72pGKbVAug/u4maQOa2ozkeV/JwUym42 9YXoAjorW/XFDsq+/6YckNpPyt+EbwQ= -----END CERTIFICATE-----Generated at Wed Jul 9 12:50:38 2025 by rpki-client