$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4258c8d9-1bab-31b4-8618-6b310b05ca7c.roa File: 4258c8d9-1bab-31b4-8618-6b310b05ca7c.roa (raw, json) Hash identifier: XBx1533M3jk1fbL3UH40Lkcr9Gi7+JFhS7aWr7eKU40= Subject key identifier: 2E:5B:87:37:0F:22:8E:BC:9B:81:6B:67:63:E0:8A:25:CE:84:D0:A0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB651059CA18FB7D83DA40280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4258c8d9-1bab-31b4-8618-6b310b05ca7c.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 7029 IP address blocks: 216.96.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:51:05:9c:a1:8f:b7:d8:3d:a4:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=54d04a3c-089f-4d5a-8dee-7bac2d8f7083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3e:57:e8:1f:28:14:c9:65:e7:d9:e3:c6:ed: c8:a1:2e:5a:c3:75:e1:eb:ac:5a:bb:b4:24:43:2f: ea:05:e6:55:05:33:99:07:a7:5a:f3:ca:dc:3b:36: 7f:9d:24:a8:07:00:f1:6b:28:63:22:5d:40:81:f0: f7:91:e8:bc:36:c9:c6:f5:7e:a8:b8:e6:f1:44:46: 24:d5:95:58:b4:81:f5:7b:06:71:67:81:93:99:1c: 16:58:ed:23:db:d6:de:d6:34:71:40:03:72:58:71: 3b:1e:26:38:3c:83:dc:f8:33:6f:f1:7f:85:7b:b5: cc:af:bf:2e:e3:60:92:e1:95:f4:8b:c5:25:16:56: 6a:44:f1:92:14:8f:e1:82:39:28:fb:20:17:2f:03: 8a:92:db:6a:da:e0:0a:8a:28:71:cc:38:c2:cd:cf: 7f:b7:65:a6:95:d7:d0:7c:96:ad:f6:53:dd:e4:9c: 66:11:68:f0:73:5c:68:4b:08:a1:53:78:11:86:4c: cd:d2:be:cd:a2:e4:bb:c5:f3:b2:e4:cb:0a:41:97: 3e:4f:36:64:98:f6:b4:ff:3c:2a:a2:b9:ff:bf:10: 80:d8:db:5f:e1:7d:e1:32:f7:e6:21:2d:0d:2c:0c: 85:3c:af:02:6a:22:cb:95:2f:bd:ec:0c:a4:8e:d4: dc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5B:87:37:0F:22:8E:BC:9B:81:6B:67:63:E0:8A:25:CE:84:D0:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4258c8d9-1bab-31b4-8618-6b310b05ca7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ac:b7:b7:f7:af:c5:93:c9:eb:b8:d6:f4:c1:b7:26:8b:0c: a1:a0:8c:aa:ca:79:75:42:0c:86:00:0a:10:ac:f1:68:b1:ab: 8c:9a:4e:12:01:11:fd:40:fa:55:91:ee:47:c1:15:f0:34:df: fe:39:32:39:f1:39:40:4d:03:03:e6:17:93:d4:22:9d:0c:f5: d1:5e:a9:83:35:0e:e4:20:d4:29:22:f6:29:f2:93:12:44:cf: 82:1e:f7:a6:d1:35:2e:69:c5:e4:1b:09:e5:7d:8f:9c:73:d1: 2b:94:49:05:79:a1:00:cb:39:a5:34:11:15:09:b0:13:dc:1c: af:08:c1:63:9f:d7:39:97:9f:1c:fb:f5:c8:af:28:6f:3b:54: 4e:23:95:34:b5:11:24:e7:c9:3f:cc:cf:3b:13:3e:00:a6:0e: 40:8f:db:8a:b7:0e:06:6f:c7:8c:1a:95:fb:b5:b7:94:58:32: c7:31:bd:7d:3b:23:cf:3e:dc:d8:b3:f8:e9:28:60:25:92:bb: 0f:5e:dc:88:e4:69:46:57:3c:6e:d5:c4:34:7d:0e:08:1e:4a: d3:0f:68:6a:35:3d:cc:2b:ee:31:91:01:06:4e:e4:8f:3e:c9: 4e:8c:42:50:d4:64:3d:61:7d:2b:40:83:15:80:59:d1:0b:ab: 15:00:5a:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UQWcoY+32D2kAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk NTRkMDRhM2MtMDg5Zi00ZDVhLThkZWUtN2JhYzJkOGY3MDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz5X6B8oFMll59njxu3IoS5aw3Xh66xau7Qk Qy/qBeZVBTOZB6da88rcOzZ/nSSoBwDxayhjIl1AgfD3kei8NsnG9X6ouObxREYk 1ZVYtIH1ewZxZ4GTmRwWWO0j29be1jRxQANyWHE7HiY4PIPc+DNv8X+Fe7XMr78u 42CS4ZX0i8UlFlZqRPGSFI/hgjko+yAXLwOKkttq2uAKiihxzDjCzc9/t2WmldfQ fJat9lPd5JxmEWjwc1xoSwihU3gRhkzN0r7NouS7xfOy5MsKQZc+TzZkmPa0/zwq orn/vxCA2Ntf4X3hMvfmIS0NLAyFPK8CaiLLlS+97AykjtTc1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5bhzcPIo68m4FrZ2PgiiXOhNCgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDI1OGM4ZDktMWJhYi0z MWI0LTg2MTgtNmIzMTBiMDVjYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GBJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFast7f3r8WTyeu41vTBtyaLDKGgjKrKeXVCDIYAChCs8Wixq4yaThIB Ef1A+lWR7kfBFfA03/45MjnxOUBNAwPmF5PUIp0M9dFeqYM1DuQg1Cki9inykxJE z4Ie96bRNS5pxeQbCeV9j5xz0SuUSQV5oQDLOaU0ERUJsBPcHK8IwWOf1zmXnxz7 9civKG87VE4jlTS1ESTnyT/MzzsTPgCmDkCP24q3DgZvx4walfu1t5RYMscxvX07 I88+3Niz+OkoYCWSuw9e3IjkaUZXPG7VxDR9DggeStMPaGo1Pcwr7jGRAQZO5I8+ yU6MQlDUZD1hfStAgxWAWdELqxUAWpk= -----END CERTIFICATE-----Generated at Wed Aug 6 09:34:28 2025 by rpki-client