$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8038d7b0-bb58-3798-a6e0-7ab83bcb27f6.roa File: 8038d7b0-bb58-3798-a6e0-7ab83bcb27f6.roa (raw, json) Hash identifier: hcfP1+w485riYV9Xr/Tr2fGTWTcxUpkWiho7u6N0AbY= Subject key identifier: BF:9B:E8:38:EA:18:21:62:7C:DC:2A:B4:44:03:44:14:99:31:0C:F7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E605E25ACC157F6477C8880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8038d7b0-bb58-3798-a6e0-7ab83bcb27f6.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 216.96.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:5e:25:ac:c1:57:f6:47:7c:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=128f6321-da50-46b4-81fa-ca5ec183c429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8d:e9:1e:5c:bf:d7:34:0c:5c:6a:f8:41:e5: 46:ac:06:bc:37:d6:5b:b6:8b:f4:42:0d:d8:db:21: 87:d3:69:fc:08:9e:f3:63:3a:c1:96:c3:cb:e1:3e: 31:a0:22:9d:36:b8:75:24:9f:9e:39:69:a5:73:3a: 22:5b:8f:62:5f:c6:70:17:e5:84:db:a3:e3:3a:95: 17:e6:fe:11:6e:6b:83:ed:5e:33:d1:56:17:de:be: 6d:d4:ee:cc:54:db:4b:38:ea:16:a9:95:f1:95:32: 9c:8b:fc:78:97:66:3f:33:c6:bc:cf:df:69:da:71: f4:6f:27:7d:f7:b2:8b:26:52:78:64:79:39:d2:cc: 0f:ab:9e:5a:69:f9:27:e1:82:0e:92:31:bc:64:44: a5:36:97:4d:90:08:59:a3:f1:24:f2:3c:d9:bb:c6: 30:3a:53:c6:8b:49:63:6b:fe:22:c1:98:18:0b:c8: 2d:94:54:36:d0:44:bd:92:f7:aa:6a:a2:df:82:11: c3:aa:0f:d8:c2:df:83:ef:b8:93:90:24:60:c4:8e: 50:72:a7:9b:49:98:74:4e:72:e4:8d:15:87:b2:58: 26:ce:bb:6f:5f:93:77:da:e8:fe:88:2f:b3:61:64: 52:31:74:a9:7a:8b:6e:c0:1d:23:65:3a:3b:84:8a: 18:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9B:E8:38:EA:18:21:62:7C:DC:2A:B4:44:03:44:14:99:31:0C:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8038d7b0-bb58-3798-a6e0-7ab83bcb27f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:79:7e:cb:75:ee:a2:2d:b9:ad:39:1e:3d:c7:68:f2:2a:4a: ac:ed:e7:15:60:06:c0:50:06:ae:b9:88:46:fd:5d:56:01:b4: 95:24:1d:f3:92:c9:5e:0f:fb:18:d5:9e:db:f4:3a:91:e5:69: 58:b3:af:d7:b6:c7:58:d9:e7:41:e7:f1:e4:00:8c:ea:61:ae: d0:6a:f9:8f:82:fe:5c:f0:97:cd:6f:65:4f:95:53:02:f5:1f: 0d:6d:e1:f0:44:1a:26:5f:58:36:09:10:eb:04:b8:01:5c:50: a3:de:17:a8:70:de:2f:f2:7c:5d:06:6e:e6:cc:71:4c:a5:e8: a6:86:84:83:89:09:0a:9a:15:ec:53:81:ff:eb:e2:91:e9:7e: 79:6b:e6:36:a5:b4:ff:53:c3:0c:73:52:a1:af:42:63:9d:22: 61:0c:d1:3f:86:69:3c:5e:c5:ff:9a:f1:62:c9:e5:3d:5c:85: d9:ed:d7:5c:87:3e:19:c8:26:26:7f:28:82:c6:d0:17:5a:4c: c6:d1:0b:54:27:84:a2:aa:80:39:34:61:b4:6b:27:a8:39:22: 02:81:39:26:6e:72:ae:d6:2b:54:07:3c:b6:0e:b5:7b:0e:54: a3:93:ef:93:ce:c9:8b:41:8a:9f:d1:8c:a1:e0:5c:7f:9e:f2: a8:10:93:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYF4lrMFX9kd8iIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk MTI4ZjYzMjEtZGE1MC00NmI0LTgxZmEtY2E1ZWMxODNjNDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI3pHly/1zQMXGr4QeVGrAa8N9Zbtov0Qg3Y 2yGH02n8CJ7zYzrBlsPL4T4xoCKdNrh1JJ+eOWmlczoiW49iX8ZwF+WE26PjOpUX 5v4RbmuD7V4z0VYX3r5t1O7MVNtLOOoWqZXxlTKci/x4l2Y/M8a8z99p2nH0byd9 97KLJlJ4ZHk50swPq55aafkn4YIOkjG8ZESlNpdNkAhZo/Ek8jzZu8YwOlPGi0lj a/4iwZgYC8gtlFQ20ES9kveqaqLfghHDqg/Ywt+D77iTkCRgxI5QcqebSZh0TnLk jRWHslgmzrtvX5N32uj+iC+zYWRSMXSpeotuwB0jZTo7hIoYsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+b6DjqGCFifNwqtEQDRBSZMQz3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODAzOGQ3YjAtYmI1OC0z Nzk4LWE2ZTAtN2FiODNiY2IyN2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC95fst17qItua05Hj3HaPIqSqzt5xVgBsBQBq65iEb9XVYBtJUkHfOS yV4P+xjVntv0OpHlaVizr9e2x1jZ50Hn8eQAjOphrtBq+Y+C/lzwl81vZU+VUwL1 Hw1t4fBEGiZfWDYJEOsEuAFcUKPeF6hw3i/yfF0GbubMcUyl6KaGhIOJCQqaFexT gf/r4pHpfnlr5jaltP9TwwxzUqGvQmOdImEM0T+GaTxexf+a8WLJ5T1chdnt11yH PhnIJiZ/KILG0BdaTMbRC1QnhKKqgDk0YbRrJ6g5IgKBOSZucq7WK1QHPLYOtXsO VKOT75POyYtBip/RjKHgXH+e8qgQkxQ= -----END CERTIFICATE-----Generated at Tue Jul 1 20:25:57 2025 by rpki-client