$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b96c2879-d5cd-3541-b67a-a108443d0500.roa File: b96c2879-d5cd-3541-b67a-a108443d0500.roa (raw, json) Hash identifier: vzdgCnk/KJBHLxWfTdtU0AesOKJvC0MxUXC7uv28jTQ= Subject key identifier: 0C:E8:2A:34:4A:00:76:F0:E1:68:BA:14:39:A4:F2:B5:1B:69:33:B0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849EE008EC6F3C7CE864B15BA40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b96c2879-d5cd-3541-b67a-a108443d0500.roa Signing time: Wed 21 May 2025 18:57:20 +0000 ROA not before: Wed 21 May 2025 18:57:20 +0000 ROA not after: Tue 19 Aug 2025 18:57:20 +0000 asID: 7029 IP address blocks: 216.96.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:00:8e:c6:f3:c7:ce:86:4b:15:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 21 18:57:20 2025 GMT Not After : Aug 19 18:57:20 2025 GMT Subject: CN=e51def4b-983d-4ffb-a8e8-eac78e7a7f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:92:36:c0:1e:2f:75:05:7a:e6:df:99:5d:d2: 2f:8f:85:4b:f9:4a:3f:27:d0:44:2c:19:34:37:00: ce:ea:ee:06:d7:dd:d8:93:c3:3e:c1:b9:6a:8d:25: 0d:a7:ac:ed:7e:aa:3f:7f:34:c0:c4:e7:c9:bc:62: 2e:6f:99:e4:24:df:71:ce:8b:9b:50:28:71:8e:8f: 17:48:bb:c3:9c:3f:6b:f0:bf:0c:1a:99:49:93:5c: b1:23:8c:35:89:37:c2:db:55:6f:af:9e:58:1c:ef: 60:08:67:4a:70:0a:fd:cc:95:aa:58:60:ee:90:45: ba:f3:36:a5:41:8c:d7:7a:5a:98:50:49:d1:22:98: b3:49:df:e3:b5:8b:3b:6c:1d:cf:43:aa:df:b4:0e: 33:eb:2d:25:45:cf:c2:a3:3b:e9:ac:7b:4e:5d:bb: b0:33:55:15:e1:ee:59:1b:7b:79:f6:16:57:ba:5a: 07:00:4a:8c:91:e5:f5:3b:56:2b:b2:14:fe:ff:38: 88:3d:d0:7b:fa:ba:43:2a:10:ac:7c:4a:17:69:7f: 83:66:88:a0:cf:0b:de:ea:5e:40:b3:f1:79:4d:fa: 70:40:bb:28:d8:af:97:0a:57:30:5a:ae:0f:ee:30: 9a:b3:9f:7b:87:23:ae:79:d1:68:90:6e:45:cd:0e: 86:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E8:2A:34:4A:00:76:F0:E1:68:BA:14:39:A4:F2:B5:1B:69:33:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b96c2879-d5cd-3541-b67a-a108443d0500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:4d:ab:48:06:d8:b9:fa:05:af:cb:a4:21:e5:f1:78:85:7d: eb:56:36:53:ab:b3:a2:7b:a4:ce:e8:b0:ef:fc:1f:83:f1:e3: d1:24:55:1b:98:0b:1f:4c:9e:c1:d1:b5:a2:d7:a6:2a:5f:b9: 2a:48:0e:11:ba:a9:ed:4a:29:7a:16:46:01:b2:64:85:1d:74: 24:6e:32:b2:4a:4e:f8:6e:8e:2a:9e:c0:a4:cf:b9:8d:07:b1: 9f:0c:82:70:fd:53:8b:28:d3:e9:b8:a1:f6:ec:56:22:9f:48: 0e:ff:9a:66:b9:02:1c:70:b6:25:45:e9:01:c1:5a:92:d6:c1: b2:4a:f7:62:8e:b9:51:54:7b:7f:87:1d:fb:ec:7a:4e:72:19: 0c:09:22:58:0a:a3:de:0d:82:60:be:11:d8:26:83:64:5c:3b: d5:6b:cf:62:27:74:ac:2a:36:54:68:53:7d:d2:d2:db:55:3d: 6e:e6:17:f4:53:c2:d7:76:96:13:9e:d3:e5:09:23:b8:e1:f8: 3f:c0:e6:05:d1:88:1c:f4:84:94:77:c9:45:56:39:c1:46:eb: 90:b5:0b:56:61:f6:2e:7d:88:40:91:ff:0b:8d:9d:e3:9c:37: 06:64:cd:3d:2d:53:c6:c7:5d:61:53:25:00:1e:08:d9:52:53: 94:14:1a:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnuAI7G88fOhksVukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyMTE4NTcyMFoXDTI1MDgxOTE4NTcyMFowLzEtMCsGA1UEAxMk ZTUxZGVmNGItOTgzZC00ZmZiLWE4ZTgtZWFjNzhlN2E3ZjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZI2wB4vdQV65t+ZXdIvj4VL+Uo/J9BELBk0 NwDO6u4G193Yk8M+wblqjSUNp6ztfqo/fzTAxOfJvGIub5nkJN9xzoubUChxjo8X SLvDnD9r8L8MGplJk1yxI4w1iTfC21Vvr55YHO9gCGdKcAr9zJWqWGDukEW68zal QYzXelqYUEnRIpizSd/jtYs7bB3PQ6rftA4z6y0lRc/CozvprHtOXbuwM1UV4e5Z G3t59hZXuloHAEqMkeX1O1YrshT+/ziIPdB7+rpDKhCsfEoXaX+DZoigzwve6l5A s/F5TfpwQLso2K+XClcwWq4P7jCas597hyOuedFokG5FzQ6GvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzoKjRKAHbw4Wi6FDmk8rUbaTOwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjk2YzI4NzktZDVjZC0z NTQxLWI2N2EtYTEwODQ0M2QwNTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2GBOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxNq0gG2Ln6Ba/LpCHl8XiFfetWNlOrs6J7pM7osO/8H4Px49EkVRuY Cx9MnsHRtaLXpipfuSpIDhG6qe1KKXoWRgGyZIUddCRuMrJKTvhujiqewKTPuY0H sZ8MgnD9U4so0+m4ofbsViKfSA7/mma5AhxwtiVF6QHBWpLWwbJK92KOuVFUe3+H Hfvsek5yGQwJIlgKo94NgmC+Edgmg2RcO9Vrz2IndKwqNlRoU33S0ttVPW7mF/RT wtd2lhOe0+UJI7jh+D/A5gXRiBz0hJR3yUVWOcFG65C1C1Zh9i59iECR/wuNneOc NwZkzT0tU8bHXWFTJQAeCNlSU5QUGg8= -----END CERTIFICATE-----Generated at Mon Jun 16 14:40:34 2025 by rpki-client