$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1186cd3b-88e9-3a09-829c-d6b5208d026f.roa File: 1186cd3b-88e9-3a09-829c-d6b5208d026f.roa (raw, json) Hash identifier: sGzJXz502ddvxtNv9PKs/w27swvVuIk3Q6ozumUDkOM= Subject key identifier: 3C:26:D0:74:AE:ED:EB:1F:EA:7B:CF:CF:C4:CE:23:71:92:5B:E1:D0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D274F240F4375492D000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1186cd3b-88e9-3a09-829c-d6b5208d026f.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 216.126.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d2:74:f2:40:f4:37:54:92:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=046e343f-3a42-4039-a2c7-2fefd404f098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3a:13:3f:b4:1f:fb:d7:6d:2c:fe:e3:9e:17: c2:1a:53:cd:21:ca:10:5a:b7:31:d7:aa:5c:9e:39: e8:07:de:e4:5b:68:2a:ac:1a:ee:2d:84:12:64:5b: d7:5f:85:b1:e7:49:66:13:ee:c6:5a:a0:d6:49:79: e4:54:20:ea:2a:05:6f:af:32:51:5a:e3:f7:bb:8b: af:dc:67:fb:e4:a4:e0:82:0f:67:bd:7a:24:d0:e8: fa:48:f3:c1:ff:3c:f8:ce:f8:e5:1e:89:34:1f:14: 7a:24:29:c0:42:b9:e6:c6:91:ea:5f:bf:98:26:f6: 95:c1:3b:1e:57:aa:b8:6c:1e:d8:80:03:9b:ac:eb: 49:00:be:69:d9:f2:e9:29:ab:1e:65:73:a4:cc:07: a9:0a:c8:a3:9d:a9:6d:cb:98:7d:e1:ab:4e:63:a9: 0d:bb:50:83:a6:0a:4d:b4:4b:dd:12:d7:20:bc:f4: 3b:e8:88:e0:0d:f8:98:49:2b:40:8c:47:4a:07:ac: 78:3b:15:a3:8f:6f:86:eb:ed:51:b6:1d:be:d4:15: 4b:bc:4a:11:91:9f:5d:d6:ce:35:5f:83:a8:d3:61: b4:8b:22:82:7f:1d:5a:b4:dc:ae:e3:b9:58:4e:80: 05:6b:f9:5b:de:aa:e1:57:65:c3:c8:4e:60:2a:bf: e0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:26:D0:74:AE:ED:EB:1F:EA:7B:CF:CF:C4:CE:23:71:92:5B:E1:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1186cd3b-88e9-3a09-829c-d6b5208d026f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.126.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:00:a7:df:24:d7:0a:d6:c8:a8:1b:b0:dc:e4:c2:b8:14:3a: da:b2:b9:56:dc:f2:c9:30:3a:c1:ad:79:63:c8:c7:c3:30:72: 64:1f:03:fa:ea:ab:48:bd:08:21:65:50:f0:1f:c3:44:2c:23: 38:68:15:6e:0a:c1:29:ad:ef:0d:94:1f:24:5f:01:d8:7b:57: 12:0c:6a:1f:14:45:2c:3a:ab:12:65:11:74:a8:d1:89:f3:f2: b2:0e:00:e8:6b:f5:b6:3b:c2:10:86:be:62:21:59:76:66:62: db:e8:0c:1b:a9:f8:c8:12:74:8d:32:94:05:c6:11:a8:31:40: 49:f4:fc:12:87:b6:6f:c1:fe:3f:34:47:c7:89:6d:4a:3f:3e: ba:16:c4:24:03:d7:16:c2:7b:a6:95:18:38:e8:fa:44:95:e0: 18:90:17:e5:b6:e4:f7:cb:ec:65:37:e5:25:9b:b9:e0:25:1c: 93:c7:85:36:71:97:fc:5a:42:32:cc:fc:1b:02:1b:dc:40:d3: 9c:3d:db:18:68:a9:d6:a4:bb:fc:d8:f1:ff:50:ba:db:a2:10: 59:f0:f6:9a:c2:7f:43:b7:30:14:50:0b:af:07:7d:9b:4c:af: e0:ad:b5:e4:54:7e:08:24:40:4e:6b:43:78:20:eb:f4:6a:a2: da:b8:31:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNJ08kD0N1SS0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MDQ2ZTM0M2YtM2E0Mi00MDM5LWEyYzctMmZlZmQ0MDRmMDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiToTP7Qf+9dtLP7jnhfCGlPNIcoQWrcx16pc njnoB97kW2gqrBruLYQSZFvXX4Wx50lmE+7GWqDWSXnkVCDqKgVvrzJRWuP3u4uv 3Gf75KTggg9nvXok0Oj6SPPB/zz4zvjlHok0HxR6JCnAQrnmxpHqX7+YJvaVwTse V6q4bB7YgAObrOtJAL5p2fLpKaseZXOkzAepCsijnalty5h94atOY6kNu1CDpgpN tEvdEtcgvPQ76IjgDfiYSStAjEdKB6x4OxWjj2+G6+1Rth2+1BVLvEoRkZ9d1s41 X4Oo02G0iyKCfx1atNyu47lYToAFa/lb3qrhV2XDyE5gKr/gKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwm0HSu7esf6nvPz8TOI3GSW+HQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTE4NmNkM2ItODhlOS0z YTA5LTgyOWMtZDZiNTIwOGQwMjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2H6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYAp98k1wrWyKgbsNzkwrgUOtqyuVbc8skwOsGteWPIx8MwcmQfA/rq q0i9CCFlUPAfw0QsIzhoFW4KwSmt7w2UHyRfAdh7VxIMah8URSw6qxJlEXSo0Ynz 8rIOAOhr9bY7whCGvmIhWXZmYtvoDBup+MgSdI0ylAXGEagxQEn0/BKHtm/B/j80 R8eJbUo/ProWxCQD1xbCe6aVGDjo+kSV4BiQF+W25PfL7GU35SWbueAlHJPHhTZx l/xaQjLM/BsCG9xA05w92xhoqdaku/zY8f9QutuiEFnw9prCf0O3MBRQC68HfZtM r+CtteRUfggkQE5rQ3gg6/Rqotq4MfA= -----END CERTIFICATE-----Generated at Mon Aug 4 16:02:54 2025 by rpki-client