$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d42aca5-ae5c-34d6-8e24-7aad0f426f15.roa File: 0d42aca5-ae5c-34d6-8e24-7aad0f426f15.roa (raw, json) Hash identifier: aZhgq1pCqjk+KvPDt142vwAsVOacyaw5Qy6r4Gyk9qc= Subject key identifier: C2:C7:12:CE:72:08:A7:30:FC:E9:D7:03:91:AE:6C:81:96:88:8D:B1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D24B2E82AA4C92C23E20 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d42aca5-ae5c-34d6-8e24-7aad0f426f15.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 216.106.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d2:4b:2e:82:aa:4c:92:c2:3e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=8d4c6003-d459-478f-80c3-4a2d7efdc116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:72:87:ba:44:4f:78:48:9f:27:6d:99:1a:ac: 83:2b:56:2f:3c:e7:bc:b1:17:4b:53:f8:fb:cb:0d: 45:15:72:ca:0f:30:a4:21:36:74:11:6a:c2:ab:62: 3a:d4:5a:25:b6:da:39:8a:90:6a:4a:7d:46:9a:10: 52:49:20:6a:dc:69:ed:d7:12:8f:2a:64:0f:2e:80: ac:eb:16:f8:ee:9e:de:f5:10:e3:d1:64:22:16:ac: dd:ce:6c:a2:7d:0b:f7:05:86:88:dc:cd:b7:9f:8c: da:63:8e:c0:ab:cf:99:26:21:f2:76:97:bb:fe:e8: b6:7a:6b:e1:65:03:5f:77:d4:b0:e7:bc:60:4a:48: 66:eb:9f:8b:46:e9:e3:85:b2:91:e6:0b:5c:1c:2d: 32:ae:d2:93:6a:dd:5c:7a:c8:f3:b6:a7:69:b4:d1: 23:27:c6:a5:58:36:8f:55:5b:e2:3f:d7:10:cd:ff: a7:51:be:fa:51:7f:25:5c:ac:8d:1a:26:9c:3f:6a: c7:bd:3f:33:75:20:2a:fe:fc:19:74:56:23:cd:8f: 03:5a:20:be:2c:f5:65:9a:a8:3f:58:f3:0d:40:67: 59:b3:cb:6f:c9:42:ba:46:be:f9:82:60:24:99:ed: 98:f1:40:cb:77:19:e9:c3:d7:cb:42:59:b9:ad:b4: a1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C7:12:CE:72:08:A7:30:FC:E9:D7:03:91:AE:6C:81:96:88:8D:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d42aca5-ae5c-34d6-8e24-7aad0f426f15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.106.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:7e:2b:f5:06:8d:5a:e2:41:34:3f:58:72:22:c4:77:8a:5f: 54:18:b2:92:1f:b4:94:12:1d:5b:32:0b:7a:0b:b6:c2:a1:cc: 86:90:99:b4:90:14:1f:a8:5f:d4:92:d6:9b:4b:b5:b1:42:1b: f1:fd:0d:0e:89:37:c1:3e:55:40:e4:2d:6a:f6:18:7f:e5:32: 85:81:82:79:ed:3d:37:18:2f:4e:b9:30:e8:0c:d8:56:be:34: b9:81:c1:77:57:b9:d0:65:fe:22:90:2f:7c:b0:2c:8e:ee:34: d1:b8:23:a8:ef:8f:f1:13:91:ee:76:a6:cf:39:9a:7c:69:12: a4:15:a8:a5:1f:32:5d:9a:da:95:84:4c:56:42:27:52:fb:1b: 86:b8:c4:27:2e:e6:ff:a4:38:8a:d8:ac:ad:57:8f:f3:6f:d8: f0:14:ca:fb:a6:ae:6b:b1:1e:f3:ac:84:b2:e3:39:b1:f7:46: b8:0a:cf:29:42:02:c0:fe:78:6d:ae:a1:6d:9f:c2:dc:92:86: 97:7e:66:e7:dc:ca:0a:7f:d0:23:85:3c:1e:a3:a0:9d:da:96: 5f:94:d0:9d:a5:1b:c4:05:d7:bc:c1:8c:f4:2f:d3:4d:fa:84: bb:1b:0d:dc:1d:f0:f9:c9:46:47:f0:f7:92:6f:ce:62:d4:c6: c4:24:4f:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNJLLoKqTJLCPiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk OGQ0YzYwMDMtZDQ1OS00NzhmLTgwYzMtNGEyZDdlZmRjMTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3KHukRPeEifJ22ZGqyDK1YvPOe8sRdLU/j7 yw1FFXLKDzCkITZ0EWrCq2I61Foltto5ipBqSn1GmhBSSSBq3Gnt1xKPKmQPLoCs 6xb47p7e9RDj0WQiFqzdzmyifQv3BYaI3M23n4zaY47Aq8+ZJiHydpe7/ui2emvh ZQNfd9Sw57xgSkhm65+LRunjhbKR5gtcHC0yrtKTat1cesjztqdptNEjJ8alWDaP VVviP9cQzf+nUb76UX8lXKyNGiacP2rHvT8zdSAq/vwZdFYjzY8DWiC+LPVlmqg/ WPMNQGdZs8tvyUK6Rr75gmAkme2Y8UDLdxnpw9fLQlm5rbShswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLHEs5yCKcw/OnXA5GubIGWiI2xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGQ0MmFjYTUtYWU1Yy0z NGQ2LThlMjQtN2FhZDBmNDI2ZjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2GqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5+K/UGjVriQTQ/WHIixHeKX1QYspIftJQSHVsyC3oLtsKhzIaQmbSQ FB+oX9SS1ptLtbFCG/H9DQ6JN8E+VUDkLWr2GH/lMoWBgnntPTcYL065MOgM2Fa+ NLmBwXdXudBl/iKQL3ywLI7uNNG4I6jvj/ETke52ps85mnxpEqQVqKUfMl2a2pWE TFZCJ1L7G4a4xCcu5v+kOIrYrK1Xj/Nv2PAUyvumrmuxHvOshLLjObH3RrgKzylC AsD+eG2uoW2fwtyShpd+Zufcygp/0COFPB6joJ3all+U0J2lG8QF17zBjPQv0036 hLsbDdwd8PnJRkfw95JvzmLUxsQkT30= -----END CERTIFICATE-----Generated at Mon Aug 4 16:05:07 2025 by rpki-client