$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0cf861e2-8e53-3780-9bf9-e068445ce518.roa File: 0cf861e2-8e53-3780-9bf9-e068445ce518.roa (raw, json) Hash identifier: FbJerYKnkuTuOB8jAbC5yf861C6s9oUAwETSkglkgSg= Subject key identifier: 18:A5:08:9B:AB:4C:F3:9C:82:E7:79:B4:77:A3:13:51:35:D3:40:9D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ACE0BAF30B47E3ABF105B1100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0cf861e2-8e53-3780-9bf9-e068445ce518.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 7029 IP address blocks: 216.96.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:af:30:b4:7e:3a:bf:10:5b:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=6e95b043-b2e2-4df1-912a-12ec12252543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:62:58:77:4a:ea:87:f6:b7:41:4c:c6:af:98: 58:b7:d3:96:53:80:4c:42:06:a2:e4:c8:4d:5e:e6: c1:64:ab:ff:6d:d5:f2:2a:2c:84:3a:a0:94:e0:77: d3:09:37:ae:6c:bb:c3:4e:57:a8:04:dd:55:8f:57: 62:6f:9c:3e:12:f3:3e:a2:17:28:5a:f7:33:76:f3: 96:03:ff:27:5b:fb:f3:e2:99:40:f2:d9:89:3a:0a: 8f:96:4b:98:86:cf:d6:8c:6b:1f:65:e1:0b:dc:87: b3:cf:45:af:bc:75:b6:5e:67:2a:1c:46:3b:fb:0b: d6:cc:5b:21:4f:a8:e3:b6:ad:bf:b1:8a:32:99:92: 7d:47:ae:89:ab:f4:c9:b0:50:3f:7d:d9:00:a2:2f: 90:fa:04:5c:cf:57:19:8d:fa:af:9a:2b:35:ab:ba: 40:5b:87:6b:05:c0:26:4e:f4:ee:89:cd:fb:05:a3: d0:88:3d:1e:6e:45:05:ba:8b:5d:1f:73:fb:02:cc: fd:50:cb:56:02:fc:63:cc:7c:85:32:57:dd:aa:d9: 51:57:88:ad:af:10:4d:86:f8:8f:c4:cd:b1:90:9b: 14:ea:96:5b:a0:da:da:f7:7b:c9:64:0b:19:00:d6: 59:4e:2e:35:a5:49:64:ca:68:c5:a8:0a:b2:a0:75: 89:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A5:08:9B:AB:4C:F3:9C:82:E7:79:B4:77:A3:13:51:35:D3:40:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0cf861e2-8e53-3780-9bf9-e068445ce518.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.74.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:4e:36:25:a9:73:8a:7c:36:d8:83:be:ff:d7:e8:9d:11:f5: fd:54:ba:0a:b9:cd:f4:2d:25:f2:4a:54:3e:1e:83:82:29:72: c2:b1:05:fb:91:b5:55:b9:43:58:5b:51:19:57:93:51:ca:e0: 4b:4f:32:46:97:65:2d:8e:2a:d9:91:d9:32:4f:56:b8:57:f6: 42:9d:45:43:31:a2:f0:91:ff:7b:dd:0f:17:a6:b6:63:a1:a0: 0e:21:f1:91:0c:4d:b8:ba:2d:b8:07:03:ed:ee:c3:04:8f:85: 63:84:77:15:09:65:c0:79:ba:8c:48:1c:c8:83:8f:a2:d4:f0: 76:6c:39:98:90:07:8b:f6:22:1a:6a:67:d0:4f:6f:57:57:d3: 9b:a4:7f:d0:ef:99:66:62:ce:55:08:f2:80:9d:d7:12:7e:1b: 65:6e:c6:0d:9f:70:38:4f:f6:5e:35:69:e4:dc:0e:25:57:68: cb:61:5f:97:0d:e9:90:7d:f9:07:9a:fa:5e:c9:c5:23:91:d3: 88:b1:a1:f4:25:8a:de:07:eb:b2:11:e6:ca:63:40:26:1a:ea: e4:17:b3:b9:c0:e6:fa:60:cc:16:3c:55:a4:d4:16:b6:84:42: 24:a9:14:14:a4:60:9a:c1:6f:73:c5:b1:46:bd:6c:9a:b3:20: 5b:51:de:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC68wtH46vxBbEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk NmU5NWIwNDMtYjJlMi00ZGYxLTkxMmEtMTJlYzEyMjUyNTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWJYd0rqh/a3QUzGr5hYt9OWU4BMQgai5MhN XubBZKv/bdXyKiyEOqCU4HfTCTeubLvDTleoBN1Vj1dib5w+EvM+ohcoWvczdvOW A/8nW/vz4plA8tmJOgqPlkuYhs/WjGsfZeEL3Iezz0WvvHW2XmcqHEY7+wvWzFsh T6jjtq2/sYoymZJ9R66Jq/TJsFA/fdkAoi+Q+gRcz1cZjfqvmis1q7pAW4drBcAm TvTuic37BaPQiD0ebkUFuotdH3P7Asz9UMtWAvxjzHyFMlfdqtlRV4itrxBNhviP xM2xkJsU6pZboNra93vJZAsZANZZTi41pUlkymjFqAqyoHWJ3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBilCJurTPOcgud5tHejE1E100CdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGNmODYxZTItOGU1My0z NzgwLTliZjktZTA2ODQ0NWNlNTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2GBKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFONiWpc4p8NtiDvv/X6J0R9f1Uugq5zfQtJfJKVD4eg4IpcsKxBfuR tVW5Q1hbURlXk1HK4EtPMkaXZS2OKtmR2TJPVrhX9kKdRUMxovCR/3vdDxemtmOh oA4h8ZEMTbi6LbgHA+3uwwSPhWOEdxUJZcB5uoxIHMiDj6LU8HZsOZiQB4v2Ihpq Z9BPb1dX05ukf9DvmWZizlUI8oCd1xJ+G2Vuxg2fcDhP9l41aeTcDiVXaMthX5cN 6ZB9+Qea+l7JxSOR04ixofQlit4H67IR5spjQCYa6uQXs7nA5vpgzBY8VaTUFraE QiSpFBSkYJrBb3PFsUa9bJqzIFtR3kM= -----END CERTIFICATE-----Generated at Sat Aug 23 17:15:42 2025 by rpki-client