$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4daf1a7a-da43-3166-9acd-71ed2a62e445.roa File: 4daf1a7a-da43-3166-9acd-71ed2a62e445.roa (raw, json) Hash identifier: uU+blUqTJFuUMWIK8zF/KYI26hgdQ6MZ/mv42Q/SYmE= Subject key identifier: 5C:09:7D:AE:2B:02:E8:F1:0F:0C:D4:72:BD:72:E9:89:AD:77:89:14 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D2839A112C86D3CEDA00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4daf1a7a-da43-3166-9acd-71ed2a62e445.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 216.135.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d2:83:9a:11:2c:86:d3:ce:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=1cfbb67c-27e8-42b7-985f-9bcf32b92b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:66:89:7d:30:e2:c0:f3:56:7f:7a:41:43:6b: 94:4a:c4:7a:7d:93:3e:3b:20:ff:48:80:c4:c8:1d: 17:21:15:47:ab:41:cc:04:f5:69:0f:7e:1a:e8:75: 0b:66:b1:a7:88:4f:84:31:b4:e0:bb:39:f1:25:ec: e0:e3:b4:89:20:72:bc:ed:fa:8c:2b:9d:24:df:bc: e8:6b:76:c1:7d:20:b0:6b:95:4b:44:18:12:bf:eb: 11:b8:ea:a6:0e:b6:06:13:37:4b:97:88:17:4c:47: 8f:2c:d4:4b:54:1a:a6:6b:71:51:68:90:45:79:5e: f3:db:a0:0a:c4:48:88:df:45:9c:70:a7:e3:84:d4: d2:11:7c:d0:ff:47:e5:46:58:be:1c:2d:ed:47:97: 82:db:ac:86:b7:a5:ec:da:ad:0e:87:23:6c:79:58: ef:da:a2:22:c2:06:bb:1f:62:2f:0a:52:32:ce:34: cc:39:6c:db:8d:b6:50:7d:75:2d:f2:da:2b:90:df: af:7a:48:46:38:f1:9b:bb:11:c2:00:32:21:2e:01: f6:8f:4a:da:35:78:c9:f0:ff:b3:24:d6:66:87:c1: 3f:00:05:72:bf:5e:c5:f5:87:38:99:40:82:89:15: e5:dd:c1:8e:69:48:3e:93:f1:3f:a3:bb:20:96:17: 78:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:09:7D:AE:2B:02:E8:F1:0F:0C:D4:72:BD:72:E9:89:AD:77:89:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4daf1a7a-da43-3166-9acd-71ed2a62e445.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.135.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:57:c8:a0:22:4c:0a:b9:de:7f:97:27:87:bc:7c:5e:21:12: f9:fd:88:4b:3e:0a:50:58:d4:8c:8e:1d:4e:46:45:d1:cf:45: 1f:2a:a1:bc:ee:7e:70:9d:5a:6b:2e:22:ca:f2:bc:79:ae:d5: 03:d5:f7:59:2d:45:b6:3d:79:b9:f1:8d:aa:fe:76:08:ee:66: 09:62:11:23:33:ad:4d:85:c4:c1:a2:46:c7:eb:5a:20:40:76: 63:06:95:70:44:2e:ef:45:22:59:6e:ce:08:28:91:21:8b:5e: 32:77:9c:d4:e3:ef:c7:d2:8e:d3:77:fa:21:62:4f:5c:57:1d: 8f:61:e8:9d:f1:97:13:9e:62:09:52:a8:98:b4:c4:47:2e:68: ad:bf:f8:23:b1:0c:d1:0f:0a:42:5a:e3:1a:79:3c:12:43:f2: ae:02:c9:01:3a:1a:6a:3d:b2:88:c1:9c:7c:8e:66:9c:61:91: e7:5d:00:db:27:1b:51:e2:47:81:46:8f:74:61:25:d7:1e:a9: 95:6e:ca:58:7d:cc:4f:aa:37:cc:ce:36:77:ac:0e:8d:0b:8b: a1:84:6e:1c:49:cf:58:96:7b:4a:e9:45:ec:54:0f:7c:66:14: 87:15:07:7f:49:1b:ce:65:62:88:c2:1e:a6:80:44:0e:cc:aa: 17:69:c1:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNKDmhEshtPO2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MWNmYmI2N2MtMjdlOC00MmI3LTk4NWYtOWJjZjMyYjkyYjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGaJfTDiwPNWf3pBQ2uUSsR6fZM+OyD/SIDE yB0XIRVHq0HMBPVpD34a6HULZrGniE+EMbTguznxJezg47SJIHK87fqMK50k37zo a3bBfSCwa5VLRBgSv+sRuOqmDrYGEzdLl4gXTEePLNRLVBqma3FRaJBFeV7z26AK xEiI30WccKfjhNTSEXzQ/0flRli+HC3tR5eC26yGt6Xs2q0OhyNseVjv2qIiwga7 H2IvClIyzjTMOWzbjbZQfXUt8torkN+vekhGOPGbuxHCADIhLgH2j0raNXjJ8P+z JNZmh8E/AAVyv17F9Yc4mUCCiRXl3cGOaUg+k/E/o7sglhd4TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwJfa4rAujxDwzUcr1y6Ymtd4kUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGRhZjFhN2EtZGE0My0z MTY2LTlhY2QtNzFlZDJhNjJlNDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2IcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFXyKAiTAq53n+XJ4e8fF4hEvn9iEs+ClBY1IyOHU5GRdHPRR8qobzu fnCdWmsuIsryvHmu1QPV91ktRbY9ebnxjar+dgjuZgliESMzrU2FxMGiRsfrWiBA dmMGlXBELu9FIlluzggokSGLXjJ3nNTj78fSjtN3+iFiT1xXHY9h6J3xlxOeYglS qJi0xEcuaK2/+COxDNEPCkJa4xp5PBJD8q4CyQE6Gmo9sojBnHyOZpxhkeddANsn G1HiR4FGj3RhJdceqZVuylh9zE+qN8zONnesDo0Li6GEbhxJz1iWe0rpRexUD3xm FIcVB39JG85lYojCHqaARA7MqhdpwQE= -----END CERTIFICATE-----Generated at Sat Aug 23 14:19:30 2025 by rpki-client