$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0cf861e2-8e53-3780-9bf9-e068445ce518.roa File: 0cf861e2-8e53-3780-9bf9-e068445ce518.roa (raw, json) Hash identifier: rIs8tDBRjVIZt61jOWx3jPjxDinJPAkUYmCdOwqsbuI= Subject key identifier: 4D:14:68:77:13:13:83:5A:D6:88:46:2A:27:73:87:0E:26:0C:55:71 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849EDF530D08314425D3D7A19A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0cf861e2-8e53-3780-9bf9-e068445ce518.roa Signing time: Wed 21 May 2025 18:34:26 +0000 ROA not before: Wed 21 May 2025 18:34:26 +0000 ROA not after: Tue 19 Aug 2025 18:34:26 +0000 asID: 7029 IP address blocks: 216.96.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:f5:30:d0:83:14:42:5d:3d:7a:19:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 21 18:34:26 2025 GMT Not After : Aug 19 18:34:26 2025 GMT Subject: CN=a3fc368f-f704-4bfe-8f41-8f98134be966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:57:d7:7b:7b:a7:37:39:00:ce:2a:95:6d:77: 6b:b4:65:ff:2c:e0:ec:1f:1a:fc:16:a2:52:20:19: 32:3d:1e:63:55:90:b4:ea:9e:31:0b:52:e5:cf:a9: 5e:7a:66:62:05:1b:68:cb:9d:ad:e3:18:0f:91:23: 7e:7f:da:59:80:cb:26:e8:d7:37:61:f3:40:c1:fa: 8a:c0:16:17:8b:17:91:24:52:b6:a2:a3:1e:dc:4f: 27:3e:7f:01:89:1c:39:5a:47:3e:38:6b:13:02:ec: 9b:93:87:f3:4e:81:a3:28:61:e0:87:3f:de:c5:90: ba:8c:1c:4a:97:2b:05:07:0e:b3:fa:d3:06:5e:d0: 26:b0:ff:ce:ee:0c:34:e9:23:02:cc:3a:8e:2c:c7: 85:34:aa:25:5f:20:c5:33:4c:89:d8:7e:46:b5:6d: fa:9d:13:ce:c2:6b:10:c7:a9:1d:cd:1b:49:d9:7b: c3:52:fc:53:88:a2:87:04:a1:3e:89:86:9f:55:36: 9e:e3:e0:6a:17:a7:bc:eb:6b:22:79:8e:1a:de:dc: 26:d3:36:43:3d:db:41:1f:3f:34:6b:c8:bc:27:f7: d9:29:3d:99:fc:31:e0:86:59:a9:b3:10:09:7c:e0: 38:db:5c:f5:70:1c:96:6b:65:ad:44:19:21:e9:ae: 86:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:14:68:77:13:13:83:5A:D6:88:46:2A:27:73:87:0E:26:0C:55:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0cf861e2-8e53-3780-9bf9-e068445ce518.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.74.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:de:64:ae:21:ae:d1:5a:0d:dc:78:06:e6:37:66:97:2f:0a: 92:a9:b5:37:5b:5b:85:98:19:aa:96:3d:ff:47:20:df:3a:f8: 5a:ae:1e:57:da:54:fb:b2:85:7f:84:4c:78:97:22:c9:45:cf: f3:5e:f8:a1:fe:57:ec:0c:69:cd:0e:e7:08:75:a7:9e:6a:db: f0:db:d2:de:2e:a3:32:ea:d0:ca:27:d5:da:a7:af:d0:89:10: 86:39:5e:5c:4d:9b:3e:0e:a2:f2:31:2f:a8:9f:9a:9a:7b:da: c1:3b:c1:65:f1:2d:b1:0a:63:ab:f4:ad:9c:e3:5d:fd:3f:70: cd:50:8d:5f:59:08:c2:2d:47:5c:b5:61:e1:6e:03:91:53:4f: 68:ee:14:0c:90:03:80:6e:7f:79:ba:d4:eb:2b:b5:b6:4f:60: f6:f7:2b:10:82:d8:51:6c:0f:b8:2f:e2:c8:30:73:22:26:af: 93:7d:21:09:41:99:2e:fa:5d:e5:0b:32:41:d5:59:4b:0a:7d: ef:00:88:95:8f:67:7b:28:65:44:89:da:aa:64:6f:7d:89:26: 77:28:2b:1d:64:74:0a:7f:1e:42:9c:9a:4a:8c:90:33:1c:39: e2:a8:84:9b:32:ac:2f:72:1f:6d:08:84:78:cd:3d:13:89:1e: 15:b3:36:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnt9TDQgxRCXT16GaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyMTE4MzQyNloXDTI1MDgxOTE4MzQyNlowLzEtMCsGA1UEAxMk YTNmYzM2OGYtZjcwNC00YmZlLThmNDEtOGY5ODEzNGJlOTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFfXe3unNzkAziqVbXdrtGX/LODsHxr8FqJS IBkyPR5jVZC06p4xC1Llz6leemZiBRtoy52t4xgPkSN+f9pZgMsm6Nc3YfNAwfqK wBYXixeRJFK2oqMe3E8nPn8BiRw5Wkc+OGsTAuybk4fzToGjKGHghz/exZC6jBxK lysFBw6z+tMGXtAmsP/O7gw06SMCzDqOLMeFNKolXyDFM0yJ2H5GtW36nRPOwmsQ x6kdzRtJ2XvDUvxTiKKHBKE+iYafVTae4+BqF6e862sieY4a3twm0zZDPdtBHz80 a8i8J/fZKT2Z/DHghlmpsxAJfOA421z1cByWa2WtRBkh6a6GxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0UaHcTE4Na1ohGKidzhw4mDFVxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGNmODYxZTItOGU1My0z NzgwLTliZjktZTA2ODQ0NWNlNTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2GBKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3eZK4hrtFaDdx4BuY3ZpcvCpKptTdbW4WYGaqWPf9HIN86+FquHlfa VPuyhX+ETHiXIslFz/Ne+KH+V+wMac0O5wh1p55q2/Db0t4uozLq0Mon1dqnr9CJ EIY5XlxNmz4OovIxL6ifmpp72sE7wWXxLbEKY6v0rZzjXf0/cM1QjV9ZCMItR1y1 YeFuA5FTT2juFAyQA4Buf3m61OsrtbZPYPb3KxCC2FFsD7gv4sgwcyImr5N9IQlB mS76XeULMkHVWUsKfe8AiJWPZ3soZUSJ2qpkb32JJncoKx1kdAp/HkKcmkqMkDMc OeKohJsyrC9yH20IhHjNPROJHhWzNoM= -----END CERTIFICATE-----Generated at Wed Jun 18 19:53:22 2025 by rpki-client