$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3f64a2b0-41b3-34ca-a2aa-20e2f2f040ad.roa File: 3f64a2b0-41b3-34ca-a2aa-20e2f2f040ad.roa (raw, json) Hash identifier: aGS9vn9wWjUoX1cqlhM2jK6cHfKZDER6U806Kp9mTWE= Subject key identifier: 68:99:26:F1:7B:3D:4C:1A:38:55:37:89:0D:0C:A2:87:B0:82:A5:34 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D1E42E11A6652E6DE200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3f64a2b0-41b3-34ca-a2aa-20e2f2f040ad.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 216.20.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d1:e4:2e:11:a6:65:2e:6d:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=e995c9e5-ac9d-430e-aeca-5db7cc20e54d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c9:49:bf:9d:c5:c4:3b:bf:c1:bd:dd:26:3a: 73:c2:8b:75:9b:fc:8c:49:8b:45:f4:02:a3:e2:95: df:fb:a2:0a:c6:a2:0e:fe:c8:d9:5c:69:75:c5:d5: 23:ed:13:be:bb:ea:cd:d3:4d:1a:c3:3a:69:9f:21: f4:98:6a:80:d0:f7:ca:78:65:03:e0:80:c5:d7:27: d1:18:c1:5c:45:6f:c6:5a:7f:25:85:f1:93:20:61: 67:ff:d9:c9:4e:27:96:31:95:c8:c6:59:72:b3:49: 88:d6:0d:de:1f:cf:de:40:9c:29:9a:1b:45:7d:33: d6:cb:0e:b2:d5:bf:fc:f1:25:6f:eb:82:39:a5:0c: e1:28:e9:ac:5e:6b:6c:22:53:43:47:00:d8:3e:db: 0a:3b:42:2b:40:ae:a5:59:e2:63:40:cc:96:3b:cd: 84:e1:2a:ef:ee:28:8a:23:86:10:19:e8:83:67:de: cd:db:20:5b:da:63:1e:a0:00:ee:5b:ef:a1:5d:1d: f9:29:13:e1:bc:08:b4:cd:65:41:9a:ba:81:52:af: 67:14:2b:28:91:18:62:36:19:62:b7:cc:86:aa:e4: fd:36:b6:b4:36:8c:4b:8c:e5:78:89:a1:df:7a:55: 31:48:fc:50:54:fc:89:0b:7b:fe:9d:c3:4f:0a:16: 95:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:99:26:F1:7B:3D:4C:1A:38:55:37:89:0D:0C:A2:87:B0:82:A5:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3f64a2b0-41b3-34ca-a2aa-20e2f2f040ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.20.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ef:2c:fd:b2:89:fc:1e:60:71:2c:dd:2d:a5:b7:1b:04:44: e3:b1:54:fd:81:b5:1d:2c:ef:76:8c:a2:21:e8:bc:fa:1f:e8: 55:2e:cf:35:10:f5:ba:05:6a:c9:79:e4:fc:99:73:c6:eb:0d: cf:71:ed:d9:dc:ce:90:0d:11:80:9b:51:e3:8c:0b:80:a3:ef: a6:f5:15:16:79:2a:ee:96:5e:af:ae:8b:81:d6:76:bb:96:a1: cd:94:32:da:7c:ea:e9:17:1c:26:bb:a6:1c:0d:65:25:51:19: b0:d8:f1:7b:d4:2b:f9:27:e5:53:65:93:4f:16:14:51:b7:4b: 6d:30:e1:be:0d:88:df:4d:1a:16:e7:53:02:fb:9e:50:04:7a: 21:a6:ec:a3:8a:7f:72:1c:3e:cb:c0:65:ee:77:da:e6:27:96: 67:18:9a:5f:b0:14:a5:88:ef:dd:54:9e:52:50:9c:de:b6:da: 17:fe:58:07:21:fd:f4:44:f3:e6:56:9b:f9:55:f7:d1:42:48: b7:cf:52:58:d6:97:57:fa:ec:ea:35:96:78:59:48:ff:08:6e: 60:85:f1:5c:74:c3:9f:91:f4:0a:61:a6:c4:5f:38:33:d1:76: 6c:f8:6e:8c:a5:ed:8d:12:b0:2e:ab:4b:7e:ce:71:3e:ee:e1: 55:c1:f6:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNHkLhGmZS5t4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZTk5NWM5ZTUtYWM5ZC00MzBlLWFlY2EtNWRiN2NjMjBlNTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8lJv53FxDu/wb3dJjpzwot1m/yMSYtF9AKj 4pXf+6IKxqIO/sjZXGl1xdUj7RO+u+rN000awzppnyH0mGqA0PfKeGUD4IDF1yfR GMFcRW/GWn8lhfGTIGFn/9nJTieWMZXIxllys0mI1g3eH8/eQJwpmhtFfTPWyw6y 1b/88SVv64I5pQzhKOmsXmtsIlNDRwDYPtsKO0IrQK6lWeJjQMyWO82E4Srv7iiK I4YQGeiDZ97N2yBb2mMeoADuW++hXR35KRPhvAi0zWVBmrqBUq9nFCsokRhiNhli t8yGquT9Nra0NoxLjOV4iaHfelUxSPxQVPyJC3v+ncNPChaVXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiZJvF7PUwaOFU3iQ0MooewgqU0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2Y2NGEyYjAtNDFiMy0z NGNhLWEyYWEtMjBlMmYyZjA0MGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7vLP2yifweYHEs3S2ltxsEROOxVP2BtR0s73aMoiHovPof6FUuzzUQ 9boFasl55PyZc8brDc9x7dnczpANEYCbUeOMC4Cj76b1FRZ5Ku6WXq+ui4HWdruW oc2UMtp86ukXHCa7phwNZSVRGbDY8XvUK/kn5VNlk08WFFG3S20w4b4NiN9NGhbn UwL7nlAEeiGm7KOKf3IcPsvAZe532uYnlmcYml+wFKWI791UnlJQnN622hf+WAch /fRE8+ZWm/lV99FCSLfPUljWl1f67Oo1lnhZSP8IbmCF8Vx0w5+R9AphpsRfODPR dmz4boyl7Y0SsC6rS37OcT7u4VXB9r0= -----END CERTIFICATE-----Generated at Wed Aug 6 05:21:29 2025 by rpki-client