$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/541ce537-2a0b-39de-969d-d091bbb9bf76.roa File: 541ce537-2a0b-39de-969d-d091bbb9bf76.roa (raw, json) Hash identifier: aIAaCcXUWRbYDwue1dRG0nSSGR8pZQV5sH0I/HSBHVY= Subject key identifier: 46:3F:9F:2D:C2:90:71:93:2C:1A:7C:AD:00:BB:7E:E9:F2:43:24:5E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A1093BFFAA538D3D3A3940 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/541ce537-2a0b-39de-969d-d091bbb9bf76.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 54278 IP address blocks: 216.172.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:09:3b:ff:aa:53:8d:3d:3a:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=3e384058-6e43-4b9f-b0a4-89e746e70ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3f:fb:a5:e1:d9:5c:7d:32:0c:54:c2:07:0b: b5:84:5c:24:c1:5c:97:5b:ea:7d:81:88:72:03:c8: bc:6e:54:32:a6:8e:c5:61:b7:66:cf:51:01:67:52: 18:98:40:71:3b:16:1f:f2:e7:50:71:4a:77:1b:7a: 21:45:7b:0d:8d:da:88:a3:7d:8a:0c:1f:75:07:2a: 45:c5:fb:a3:29:3f:22:66:a6:f4:d4:87:70:fc:a3: 85:7d:73:1d:3e:fe:8b:b3:f3:5a:a7:11:fe:d8:ba: ce:ed:fb:07:f6:51:30:8c:82:af:2e:1c:42:b3:18: 3d:45:47:ff:34:cd:db:93:24:fa:1b:0e:78:f4:81: f4:1a:4f:1b:ff:c2:f2:34:da:11:3f:76:f2:22:3a: 45:5c:27:23:09:57:73:dc:9c:f9:83:d6:f7:2f:9b: 38:04:09:95:48:d5:70:5d:1f:2c:ec:86:9d:fd:7f: 39:f5:8a:d6:da:a3:28:09:05:1e:9d:fd:be:d1:da: 79:2a:b3:16:55:00:2b:39:3a:a8:45:46:e2:cf:1c: 45:4e:01:78:e9:1d:16:7d:87:62:ad:87:a1:c1:bb: a0:87:d0:39:00:2a:e1:65:74:23:2f:1e:a9:c7:b7: a6:de:ae:6b:91:18:27:02:19:df:2e:af:92:da:36: ba:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3F:9F:2D:C2:90:71:93:2C:1A:7C:AD:00:BB:7E:E9:F2:43:24:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/541ce537-2a0b-39de-969d-d091bbb9bf76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.172.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:8c:80:c6:ee:46:61:71:b2:bd:3f:5d:00:c2:be:14:5e:29: 83:0a:51:9b:69:da:22:27:b6:07:00:c0:30:20:a3:b2:84:7b: dc:53:81:3f:dc:20:16:d3:58:b2:d1:9e:df:e8:ac:54:2b:e8: 28:ac:e2:11:e4:2f:bb:ce:1b:5b:09:ec:6c:17:c3:eb:d9:d8: 43:bc:12:b9:6b:02:da:7c:87:c3:9f:8d:f6:27:40:fe:36:0b: 3a:e8:6b:61:90:5b:77:58:ba:9d:bf:04:c2:d2:37:2a:53:e4: ab:4c:c6:2b:af:93:02:b5:e3:9e:c9:d3:99:98:45:46:f1:53: b8:61:93:54:dd:41:b0:ba:3b:be:bf:61:46:59:50:c8:2c:96: 7f:86:c9:41:7f:5b:f4:ed:07:e1:c3:3d:aa:8f:b5:51:28:ee: 21:a1:0b:77:c2:8e:7f:8d:e4:c7:71:ab:b0:f4:19:f6:bc:8e: 9c:1b:46:fb:27:76:54:4c:27:35:1f:b0:89:82:63:3b:05:55: 9b:63:f2:25:8f:26:31:c9:9b:6e:de:d5:2f:28:ac:97:cd:9f: 88:fa:f3:c5:38:1c:9d:20:48:6a:98:c7:9d:0f:f5:2a:d8:8a: ff:b3:fc:7f:d3:d3:d9:12:ba:95:7f:71:ca:4e:c6:12:97:4a: 3f:d1:b7:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoQk7/6pTjT06OUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk M2UzODQwNTgtNmU0My00YjlmLWIwYTQtODllNzQ2ZTcwYWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT/7peHZXH0yDFTCBwu1hFwkwVyXW+p9gYhy A8i8blQypo7FYbdmz1EBZ1IYmEBxOxYf8udQcUp3G3ohRXsNjdqIo32KDB91BypF xfujKT8iZqb01Idw/KOFfXMdPv6Ls/NapxH+2LrO7fsH9lEwjIKvLhxCsxg9RUf/ NM3bkyT6Gw549IH0Gk8b/8LyNNoRP3byIjpFXCcjCVdz3Jz5g9b3L5s4BAmVSNVw XR8s7Iad/X859YrW2qMoCQUenf2+0dp5KrMWVQArOTqoRUbizxxFTgF46R0WfYdi rYehwbugh9A5ACrhZXQjLx6px7em3q5rkRgnAhnfLq+S2ja6CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEY/ny3CkHGTLBp8rQC7funyQyReMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTQxY2U1MzctMmEwYi0z OWRlLTk2OWQtZDA5MWJiYjliZjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KwZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCMgMbuRmFxsr0/XQDCvhReKYMKUZtp2iIntgcAwDAgo7KEe9xTgT/c IBbTWLLRnt/orFQr6Cis4hHkL7vOG1sJ7GwXw+vZ2EO8ErlrAtp8h8OfjfYnQP42 Czroa2GQW3dYup2/BMLSNypT5KtMxiuvkwK1457J05mYRUbxU7hhk1TdQbC6O76/ YUZZUMgsln+GyUF/W/TtB+HDPaqPtVEo7iGhC3fCjn+N5Mdxq7D0Gfa8jpwbRvsn dlRMJzUfsImCYzsFVZtj8iWPJjHJm27e1S8orJfNn4j688U4HJ0gSGqYx50P9SrY iv+z/H/T09kSupV/ccpOxhKXSj/Rt5U= -----END CERTIFICATE-----Generated at Thu Aug 7 04:39:15 2025 by rpki-client