$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c37d95c-bf60-36d3-9840-811464402df8.roa File: 4c37d95c-bf60-36d3-9840-811464402df8.roa (raw, json) Hash identifier: DxXbNnk83DLURFdJcWAtF2rTlRi3Hhk3tczSExxEM1o= Subject key identifier: AC:3A:8E:4F:07:AA:3B:B1:F5:33:01:B4:BF:16:4D:BD:48:8E:D1:51 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD668B8303AFCC17205F0280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c37d95c-bf60-36d3-9840-811464402df8.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 72.16.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:8b:83:03:af:cc:17:20:5f:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=6acb936c-7e20-4e9b-bb26-f3885c09ce0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:90:21:3a:4f:c5:2a:4e:2f:48:9e:33:1a:eb: 08:a9:99:bc:f0:36:3b:7b:c7:bd:c4:e8:5c:1d:5c: 04:41:bd:c1:e6:3e:5b:db:55:20:33:0a:fa:ef:33: 30:e3:c6:b2:ca:36:b5:6b:46:5c:03:9d:7e:87:c8: b7:fb:d5:d7:bb:fc:a7:e8:08:9e:61:96:27:4b:40: b6:84:87:6e:a5:c7:53:20:02:10:b9:28:9d:f6:c6: fe:4b:cf:48:2e:ee:b0:73:a8:67:fc:b3:59:7f:dd: 8c:e6:45:8e:ca:59:5a:98:dd:11:34:18:dd:47:78: 93:fa:6b:94:78:49:c4:ca:8b:cb:5f:43:ed:29:b8: 46:7a:b7:8f:6a:5e:e6:57:5a:23:51:89:dc:97:c5: 6f:97:57:ba:55:29:ce:60:5e:6a:f3:b7:bc:4e:37: 7e:bc:43:c2:24:5e:ce:38:56:7b:f8:eb:d7:25:83: 56:e1:19:56:b2:d4:33:8e:f9:e0:65:40:3f:47:6f: 88:93:a7:a8:6b:8e:b3:f4:a2:10:84:d9:e8:f7:34: 52:c5:f6:2d:d9:c2:0f:38:68:5d:09:25:c5:ae:f5: 74:21:34:da:ba:75:d0:dc:a6:ae:f1:d0:bf:da:52: a2:a7:37:fe:0c:97:31:ef:b3:96:1c:cf:80:f8:8e: af:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3A:8E:4F:07:AA:3B:B1:F5:33:01:B4:BF:16:4D:BD:48:8E:D1:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c37d95c-bf60-36d3-9840-811464402df8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ba:e0:d7:d7:7d:32:be:1d:d2:e5:41:95:f8:3b:04:80:53: da:90:cb:2c:27:19:6b:e1:2a:37:67:f7:08:3c:42:ac:50:23: ae:00:da:d1:d5:d1:d7:a9:22:f9:4f:31:d5:53:a0:60:af:35: bd:5c:e9:19:a0:36:a7:70:d3:9f:2a:62:28:7f:f3:26:9a:ef: d4:3a:49:fc:f7:32:29:bb:ae:02:80:c1:13:83:1e:1e:e8:ab: 1a:6b:c2:18:f4:7e:ce:5a:6c:28:5a:9e:36:0c:bb:4b:c8:7e: 5a:37:91:d6:44:68:5c:1e:de:32:2f:8d:b4:f0:06:ab:bd:8c: 44:94:42:67:d5:ad:38:82:20:93:20:21:30:80:c2:23:72:26: 2d:73:1d:af:e7:74:6c:03:c9:a0:66:c9:0f:7e:5e:92:56:26: 62:b5:1f:b6:12:2b:dc:88:da:3d:e2:46:c5:52:85:3a:41:15: f9:e6:52:67:90:c7:13:a5:7f:26:c3:fc:fa:b6:f8:c2:17:98: 65:84:46:27:a5:57:a0:9a:17:7c:fe:16:24:77:3f:fa:35:fa: 65:93:43:ff:bf:fa:5f:90:fe:90:40:d2:59:4a:8d:17:aa:d8: b2:24:7e:fc:84:c5:92:d6:d2:a7:13:09:b3:4a:09:3c:bf:cb: a9:0d:6c:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZouDA6/MFyBfAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk NmFjYjkzNmMtN2UyMC00ZTliLWJiMjYtZjM4ODVjMDljZTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspAhOk/FKk4vSJ4zGusIqZm88DY7e8e9xOhc HVwEQb3B5j5b21UgMwr67zMw48ayyja1a0ZcA51+h8i3+9XXu/yn6AieYZYnS0C2 hIdupcdTIAIQuSid9sb+S89ILu6wc6hn/LNZf92M5kWOyllamN0RNBjdR3iT+muU eEnEyovLX0PtKbhGerePal7mV1ojUYncl8Vvl1e6VSnOYF5q87e8Tjd+vEPCJF7O OFZ7+OvXJYNW4RlWstQzjvngZUA/R2+Ik6eoa46z9KIQhNno9zRSxfYt2cIPOGhd CSXFrvV0ITTaunXQ3Kau8dC/2lKipzf+DJcx77OWHM+A+I6vHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKw6jk8Hqjux9TMBtL8WTb1IjtFRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGMzN2Q5NWMtYmY2MC0z NmQzLTk4NDAtODExNDY0NDAyZGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBAeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACi64NfXfTK+HdLlQZX4OwSAU9qQyywnGWvhKjdn9wg8QqxQI64A2tHV 0depIvlPMdVToGCvNb1c6RmgNqdw058qYih/8yaa79Q6Sfz3Mim7rgKAwRODHh7o qxprwhj0fs5abChanjYMu0vIflo3kdZEaFwe3jIvjbTwBqu9jESUQmfVrTiCIJMg ITCAwiNyJi1zHa/ndGwDyaBmyQ9+XpJWJmK1H7YSK9yI2j3iRsVShTpBFfnmUmeQ xxOlfybD/Pq2+MIXmGWERielV6CaF3z+FiR3P/o1+mWTQ/+/+l+Q/pBA0llKjReq 2LIkfvyExZLW0qcTCbNKCTy/y6kNbK4= -----END CERTIFICATE-----Generated at Sat Aug 23 14:33:03 2025 by rpki-client