$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20455f62-3832-3132-8950-2d4d84f4cf4f.roa File: 20455f62-3832-3132-8950-2d4d84f4cf4f.roa (raw, json) Hash identifier: OqghPjnhQhoXcE32Mxn+mHhmgnAnO1RxDKyq8SyAlHI= Subject key identifier: F2:43:CA:FB:16:16:AD:D3:2E:3C:87:E6:59:92:75:D9:81:3F:2B:02 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E605C9856ACCA1186F4A080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20455f62-3832-3132-8950-2d4d84f4cf4f.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 216.96.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:5c:98:56:ac:ca:11:86:f4:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=d78ce536-34b3-4cd5-9777-daa0fb656d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b2:1d:29:27:c0:24:e5:7a:c2:b2:98:7b:10: 9f:e8:49:68:69:2b:09:7b:23:e0:73:d0:a9:c0:11: d3:4e:56:32:42:ae:bf:0b:ae:9c:ee:53:79:37:a0: 92:23:9c:07:d2:65:40:29:fe:83:74:74:28:46:06: 0a:b5:87:57:f1:66:83:15:7a:59:a3:7f:01:59:99: 7c:e2:03:8f:6b:e8:5f:48:4f:70:46:02:29:fa:82: 74:26:64:a6:f8:25:91:d9:1b:bd:ca:51:cf:d5:64: 34:51:bb:99:0d:56:6f:97:b0:39:53:56:1e:e5:58: 13:bc:6a:92:c1:24:11:aa:ea:f8:8d:e6:87:83:a4: 9a:ff:e6:79:7a:0c:75:81:29:8b:89:9f:73:d9:8f: 32:e5:5e:1e:32:0d:8c:c3:a2:eb:1b:90:80:83:8d: 51:c8:28:81:2d:54:94:ab:56:44:23:34:a9:c1:bd: ba:97:08:68:b5:68:f0:5f:a7:86:2e:06:8d:5c:02: 34:8a:6e:19:d4:68:9c:14:04:e1:9c:fa:0d:c3:cc: 5b:89:82:43:b5:71:7e:de:22:e9:9c:65:be:0b:82: d4:9b:ba:1a:cf:00:7b:8f:62:3f:c0:05:96:42:d6: 51:09:8b:cc:a3:e0:da:1d:4c:e1:6b:c6:06:7b:7d: ff:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:43:CA:FB:16:16:AD:D3:2E:3C:87:E6:59:92:75:D9:81:3F:2B:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20455f62-3832-3132-8950-2d4d84f4cf4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:65:0a:25:86:7b:f3:39:84:03:d9:8e:b7:3e:39:0a:2e:2b: d4:48:2d:db:7b:80:8e:d8:69:ff:02:e8:0d:e6:87:1e:a9:28: 01:c6:13:6d:ff:fe:7c:41:b4:fd:50:80:85:47:a5:28:5b:ed: b0:03:8e:cc:46:47:fd:16:68:11:db:f5:4f:46:e8:99:3e:7a: f4:52:3d:1b:bd:9f:a6:b3:02:52:f5:13:58:84:a7:32:66:22: 6b:68:7e:0f:1d:a8:9b:41:27:f3:e0:c0:59:46:6b:e7:fd:4a: cf:46:dd:58:cb:40:e1:59:aa:2d:f1:e6:0d:82:32:d0:48:64: 20:8c:85:08:de:44:d3:e2:0d:76:d2:67:e2:17:28:89:2a:b3: bc:37:41:49:63:dc:65:2d:3a:53:0d:1a:5c:c0:a5:73:3a:4e: ef:f2:1c:a3:37:e9:a6:c5:4c:22:97:87:59:77:60:df:c4:03: 9f:51:9b:1e:d3:6a:0a:b1:72:51:51:1a:98:71:57:8e:bb:bb: 12:42:80:5c:e9:f0:b2:ea:23:d6:e6:4d:51:d4:88:31:84:00: 79:23:52:73:0b:82:98:ce:73:30:98:9c:e6:5c:d9:97:9c:d7: 57:e9:c8:dd:38:43:48:67:a2:34:a6:05:51:2a:68:44:cc:ad: dd:1a:ea:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYFyYVqzKEYb0oIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk ZDc4Y2U1MzYtMzRiMy00Y2Q1LTk3NzctZGFhMGZiNjU2ZDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLIdKSfAJOV6wrKYexCf6EloaSsJeyPgc9Cp wBHTTlYyQq6/C66c7lN5N6CSI5wH0mVAKf6DdHQoRgYKtYdX8WaDFXpZo38BWZl8 4gOPa+hfSE9wRgIp+oJ0JmSm+CWR2Ru9ylHP1WQ0UbuZDVZvl7A5U1Ye5VgTvGqS wSQRqur4jeaHg6Sa/+Z5egx1gSmLiZ9z2Y8y5V4eMg2Mw6LrG5CAg41RyCiBLVSU q1ZEIzSpwb26lwhotWjwX6eGLgaNXAI0im4Z1GicFAThnPoNw8xbiYJDtXF+3iLp nGW+C4LUm7oazwB7j2I/wAWWQtZRCYvMo+DaHUzha8YGe33/dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJDyvsWFq3TLjyH5lmSddmBPysCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjA0NTVmNjItMzgzMi0z MTMyLTg5NTAtMmQ0ZDg0ZjRjZjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GAdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdlCiWGe/M5hAPZjrc+OQouK9RILdt7gI7Yaf8C6A3mhx6pKAHGE23/ /nxBtP1QgIVHpShb7bADjsxGR/0WaBHb9U9G6Jk+evRSPRu9n6azAlL1E1iEpzJm Imtofg8dqJtBJ/PgwFlGa+f9Ss9G3VjLQOFZqi3x5g2CMtBIZCCMhQjeRNPiDXbS Z+IXKIkqs7w3QUlj3GUtOlMNGlzApXM6Tu/yHKM36abFTCKXh1l3YN/EA59Rmx7T agqxclFRGphxV467uxJCgFzp8LLqI9bmTVHUiDGEAHkjUnMLgpjOczCYnOZc2Zec 11fpyN04Q0hnojSmBVEqaETMrd0a6ic= -----END CERTIFICATE-----Generated at Tue Jul 1 15:03:11 2025 by rpki-client