$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5882f490-a5be-3610-9c37-d30189e9628d.roa File: 5882f490-a5be-3610-9c37-d30189e9628d.roa (raw, json) Hash identifier: wB04UFUQLd9RRQKF47JEU3TEQufoFCvuYDqYQOkstDE= Subject key identifier: 38:F0:6D:D6:FF:EB:DB:25:B5:70:65:58:41:40:E2:E9:D7:D8:31:9B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8B0B4BCD0E7A78BAE436C0A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5882f490-a5be-3610-9c37-d30189e9628d.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 7029 IP address blocks: 72.16.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:4b:cd:0e:7a:78:ba:e4:36:c0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=5c0d5af7-e9e4-41cd-9b06-11ad2b197077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6c:e9:7f:c4:29:ab:70:5c:36:4a:4d:f5:ca: d2:31:e7:e2:70:f5:bc:6c:a1:99:09:ea:2c:52:0d: b6:eb:65:63:98:7f:35:12:2f:82:f2:2b:df:4c:c5: 45:0c:d0:c4:80:e9:ee:7c:40:01:25:07:46:48:18: da:5b:74:2d:1c:fe:a2:8f:9b:e8:ce:f1:78:9a:ca: 88:3a:bd:1b:3e:9d:72:67:e2:3d:1a:39:88:bb:aa: 9c:26:d9:ef:9b:5b:51:79:29:03:15:4b:dc:f1:73: b8:f4:07:79:b3:bf:d2:5f:34:d4:66:1f:f0:d4:61: e3:80:4d:3a:cd:15:ed:e4:83:a7:2f:ea:26:dd:8e: 42:cd:1f:34:26:1e:3f:0d:73:ba:50:0a:8d:65:37: 9e:f0:50:14:dd:89:fa:1b:fb:65:20:05:46:64:68: ae:35:dc:18:58:0c:b1:12:31:38:ec:7e:a6:29:18: 81:61:c7:4f:0f:6e:bd:f5:d8:08:17:d8:3c:3c:a2: 04:09:a3:17:e0:af:e5:f4:21:21:37:77:d6:1f:54: ed:9e:c4:d9:74:48:4a:d5:07:12:9c:cf:54:de:fd: 73:80:35:08:e5:4d:9b:ff:7c:82:02:51:ca:6c:28: 85:77:6b:4e:fe:d5:fd:a8:2c:79:36:f1:78:05:fb: 82:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F0:6D:D6:FF:EB:DB:25:B5:70:65:58:41:40:E2:E9:D7:D8:31:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5882f490-a5be-3610-9c37-d30189e9628d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:96:d8:47:4b:2a:0e:78:68:bb:c1:5b:a3:8f:7f:ed:24:a6: 2a:ef:a3:41:6b:a7:9c:f5:18:6d:c3:15:f7:d1:44:2b:e7:4d: 14:37:30:63:8f:a0:0b:a8:59:b7:38:b4:f3:f3:5d:8e:9e:40: 6c:c8:62:e5:84:ee:ff:1f:27:17:8b:e0:19:09:66:48:16:0a: 6d:0d:d4:b2:2b:16:80:d3:3e:2c:d0:45:a4:bb:91:d3:c3:53: bf:19:4f:b7:de:4c:c6:4e:64:18:ad:56:44:4c:7f:13:e1:51: 36:3c:e1:ad:8a:2d:ee:9f:43:43:0c:64:76:85:e1:6a:47:ed: 50:e3:51:31:4d:ac:fb:2b:65:ff:e5:8d:ba:b5:51:79:d4:4a: c4:a1:3c:b6:3a:a4:d3:47:c5:76:70:2f:7a:ee:89:5b:30:45: 5a:e6:35:7d:8c:fd:9d:f6:09:e8:ee:af:fb:d0:05:76:aa:1e: 35:22:60:6f:dc:d3:68:fd:5f:5e:c2:66:a2:db:b0:01:bb:06: d1:29:34:98:15:f1:00:ac:e8:db:b5:89:76:15:67:05:c8:e5: 42:b6:5d:52:87:7c:98:e8:6a:79:3c:c6:b0:26:2a:2f:0a:9f: bf:c4:67:b6:c4:72:ca:be:eb:06:ab:7c:c6:f1:f9:74:e6:a5: f3:cd:a4:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC0vNDnp4uuQ2wKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk NWMwZDVhZjctZTllNC00MWNkLTliMDYtMTFhZDJiMTk3MDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGzpf8Qpq3BcNkpN9crSMeficPW8bKGZCeos Ug2262VjmH81Ei+C8ivfTMVFDNDEgOnufEABJQdGSBjaW3QtHP6ij5vozvF4msqI Or0bPp1yZ+I9GjmIu6qcJtnvm1tReSkDFUvc8XO49Ad5s7/SXzTUZh/w1GHjgE06 zRXt5IOnL+om3Y5CzR80Jh4/DXO6UAqNZTee8FAU3Yn6G/tlIAVGZGiuNdwYWAyx EjE47H6mKRiBYcdPD2699dgIF9g8PKIECaMX4K/l9CEhN3fWH1TtnsTZdEhK1QcS nM9U3v1zgDUI5U2b/3yCAlHKbCiFd2tO/tX9qCx5NvF4BfuCYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjwbdb/69sltXBlWEFA4unX2DGbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTg4MmY0OTAtYTViZS0z NjEwLTljMzctZDMwMTg5ZTk2MjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSBBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuW2EdLKg54aLvBW6OPf+0kpirvo0Frp5z1GG3DFffRRCvnTRQ3MGOP oAuoWbc4tPPzXY6eQGzIYuWE7v8fJxeL4BkJZkgWCm0N1LIrFoDTPizQRaS7kdPD U78ZT7feTMZOZBitVkRMfxPhUTY84a2KLe6fQ0MMZHaF4WpH7VDjUTFNrPsrZf/l jbq1UXnUSsShPLY6pNNHxXZwL3ruiVswRVrmNX2M/Z32Cejur/vQBXaqHjUiYG/c 02j9X17CZqLbsAG7BtEpNJgV8QCs6Nu1iXYVZwXI5UK2XVKHfJjoank8xrAmKi8K n7/EZ7bEcsq+6warfMbx+XTmpfPNpD8= -----END CERTIFICATE-----Generated at Wed Aug 6 07:52:18 2025 by rpki-client