$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f9d1346-ce62-36ba-a3e0-95ca2c3819f2.roa File: 0f9d1346-ce62-36ba-a3e0-95ca2c3819f2.roa (raw, json) Hash identifier: FK0etOKRa77yuy7P0wGsUU4/KN7aUfKyHPMtChwaYQs= Subject key identifier: 14:75:00:43:12:D3:8F:6D:D2:05:E2:77:87:B4:16:D3:F0:92:16:EA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A101D928B339FDBDAC5580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f9d1346-ce62-36ba-a3e0-95ca2c3819f2.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 216.204.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:01:d9:28:b3:39:fd:bd:ac:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=ead2aee9-be3a-4ef4-b0e5-997170545615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5c:34:2c:36:87:b5:af:41:47:fc:66:3d:dd: b0:52:7d:a2:bf:9b:79:14:66:6b:34:c6:3a:8b:a4: b1:e6:f6:24:b9:6a:61:ec:56:0e:1e:17:f5:9d:ab: ad:6a:19:e7:11:19:e2:3e:65:dd:b2:ca:cc:23:fd: 4e:a8:40:12:3f:ef:ac:9f:1d:0c:59:9c:10:26:bd: ce:36:66:96:32:e2:23:80:83:82:77:4c:95:e5:64: 00:ba:21:9b:d9:22:9f:27:95:e0:6e:8f:04:a3:9d: 15:55:86:09:dd:bc:45:e8:c4:96:fa:5b:a2:e7:76: c3:29:93:41:55:91:6b:31:d9:de:9f:ee:ac:55:7f: ba:00:75:3c:64:6e:35:65:77:b4:63:b1:dc:9b:ea: 51:8b:f6:3d:cf:24:11:25:c9:b2:ea:1f:7e:db:23: 7e:70:78:1b:72:bf:51:3f:1d:5f:21:5c:25:36:1b: 23:1f:2e:87:d8:b2:5c:f3:0e:40:2b:99:52:66:d1: 30:b4:c9:04:fa:43:b9:d8:e4:ca:4e:69:ac:e3:ac: 0d:d0:4f:ab:11:1f:4a:3c:4f:58:76:6c:3b:29:c6: 7a:e7:f5:6d:ad:76:a9:4a:f7:f8:7e:94:f8:ff:18: 38:17:c5:3e:5e:99:59:a8:6c:cb:54:76:46:ed:d7: 85:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:75:00:43:12:D3:8F:6D:D2:05:E2:77:87:B4:16:D3:F0:92:16:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f9d1346-ce62-36ba-a3e0-95ca2c3819f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.204.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:39:bd:c0:a2:1e:48:0f:22:79:63:f9:38:ab:f7:17:32:78: fd:fe:b0:f6:87:ab:35:96:5c:94:5a:bd:47:b1:f4:d3:e7:d0: 67:a8:bd:5a:96:a0:ee:84:90:4a:ad:ca:c8:de:be:8e:f4:12: 3b:74:a3:fa:80:e0:95:bb:13:f5:74:f7:73:53:eb:fd:bd:aa: 72:eb:3f:f2:a0:05:d0:66:2b:51:f3:b0:b4:b0:d8:8c:da:33: c0:96:8a:7e:dd:d4:4c:37:ef:44:55:58:a1:43:e8:84:f5:b6: b3:f3:89:67:c6:07:90:5e:19:a2:5c:a5:a7:9b:46:5a:36:ec: 73:bc:0d:c3:2f:92:e0:c0:53:f6:4f:eb:21:d4:58:39:b2:f4: d3:48:e8:17:0d:e2:d2:fd:43:9d:12:09:e3:51:6e:34:b2:4f: 35:5b:c8:73:b8:18:d0:b8:5f:f1:13:e0:79:d3:5e:74:6c:24: 3f:77:16:ee:f9:a0:a8:56:74:f9:27:d2:52:86:a3:a3:da:bd: 08:7d:de:64:00:8f:37:28:a3:7c:af:d5:9c:e3:f0:98:2f:4c: d0:46:65:eb:eb:9e:96:46:5f:f5:d1:2f:39:97:19:aa:f7:5e: ac:d9:e6:5b:83:b1:ab:6d:48:27:db:e4:dc:aa:46:d8:76:46: 34:5f:15:05 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqQoQHZKLM5/b2sVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZWFkMmFlZTktYmUzYS00ZWY0LWIwZTUtOTk3MTcwNTQ1NjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVw0LDaHta9BR/xmPd2wUn2iv5t5FGZrNMY6 i6Sx5vYkuWph7FYOHhf1nautahnnERniPmXdssrMI/1OqEASP++snx0MWZwQJr3O NmaWMuIjgIOCd0yV5WQAuiGb2SKfJ5Xgbo8Eo50VVYYJ3bxF6MSW+lui53bDKZNB VZFrMdnen+6sVX+6AHU8ZG41ZXe0Y7Hcm+pRi/Y9zyQRJcmy6h9+2yN+cHgbcr9R Px1fIVwlNhsjHy6H2LJc8w5AK5lSZtEwtMkE+kO52OTKTmms46wN0E+rER9KPE9Y dmw7KcZ65/VtrXapSvf4fpT4/xg4F8U+XplZqGzLVHZG7deFXwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBR1AEMS049t0gXid4e0FtPwkhbqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGY5ZDEzNDYtY2U2Mi0z NmJhLWEzZTAtOTVjYTJjMzgxOWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA2MwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAeDm9wKIeSA8ieWP5OKv3FzJ4/f6w9oerNZZclFq9R7H00+fQZ6i9Wpag 7oSQSq3KyN6+jvQSO3Sj+oDglbsT9XT3c1Pr/b2qcus/8qAF0GYrUfOwtLDYjNoz wJaKft3UTDfvRFVYoUPohPW2s/OJZ8YHkF4Zolylp5tGWjbsc7wNwy+S4MBT9k/r IdRYObL000joFw3i0v1DnRIJ41FuNLJPNVvIc7gY0Lhf8RPgedNedGwkP3cW7vmg qFZ0+SfSUoajo9q9CH3eZACPNyijfK/VnOPwmC9M0EZl6+uelkZf9dEvOZcZqvde rNnmW4Oxq21IJ9vk3KpG2HZGNF8VBQ== -----END CERTIFICATE-----Generated at Wed Aug 6 13:12:06 2025 by rpki-client