$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d332597c-9bdd-36d2-9637-73c4c9fce066.roa File: d332597c-9bdd-36d2-9637-73c4c9fce066.roa (raw, json) Hash identifier: 1+ROanrXh+od+afkigfgev7vgKcSwCf2mEZAm9ZaZDU= Subject key identifier: 86:26:3F:E3:E1:D3:8E:66:7C:AB:95:35:80:0D:EB:05:B8:B7:2D:0C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D23DAB2374F0FB291580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d332597c-9bdd-36d2-9637-73c4c9fce066.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 216.97.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d2:3d:ab:23:74:f0:fb:29:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=e7b84d02-2cbf-4348-985b-c49dfb522a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c6:71:a5:54:24:4f:98:ba:eb:bc:68:7f:fb: 59:a8:c2:42:87:8a:f2:e0:02:c9:12:07:37:3f:8e: 93:72:3b:ce:b2:4b:43:dd:5d:7f:da:ac:2a:da:05: f9:0b:8e:89:00:2e:ec:60:50:9b:7b:12:5f:f3:ab: 9c:39:64:98:fd:36:bb:fd:3b:99:36:88:a2:30:a0: d9:c6:9c:78:9f:60:ef:47:a9:36:00:61:79:70:20: 88:b0:8e:ad:b5:c5:41:fe:5d:d6:4a:05:2e:4e:54: 03:15:e9:67:39:01:0f:af:30:30:2f:27:c9:22:ba: d2:35:da:d9:53:28:9d:ae:9c:22:0a:89:e0:a3:01: 86:ba:88:24:2a:26:2b:02:e2:af:86:30:a6:53:bd: 61:a0:b0:4f:b0:74:3c:d0:77:a4:22:6a:69:10:a6: e7:be:f9:e1:f4:45:79:2c:f8:71:d3:bd:e6:23:c9: 45:c6:b3:8e:02:86:79:26:e1:a5:f7:10:91:61:e4: 90:c5:6b:c0:e8:c1:ca:30:07:04:dc:53:7d:63:7f: fb:14:94:5b:95:35:19:2b:72:b4:92:e4:1c:03:ee: 27:35:c3:f5:ae:10:4d:a2:2e:11:7d:91:40:db:6e: a9:a5:fe:e0:36:21:10:c2:f0:e8:ed:fd:52:db:98: 12:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:26:3F:E3:E1:D3:8E:66:7C:AB:95:35:80:0D:EB:05:B8:B7:2D:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d332597c-9bdd-36d2-9637-73c4c9fce066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.97.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:f5:b8:ab:fd:22:83:96:8b:f5:9d:45:e8:15:f7:93:12:f8: 6e:64:b6:b2:f4:3a:85:9f:55:4a:85:ff:c2:bf:37:63:8e:76: 22:b7:1a:8e:f7:0f:f7:53:16:37:64:a3:97:8e:7d:82:78:c0: 88:4e:c0:33:1c:f8:92:14:da:01:9c:b9:e3:01:c8:89:5d:f2: 95:ba:53:f6:d2:e4:5e:91:ee:e2:ab:52:b9:fc:78:71:ae:49: 1d:db:d3:a7:8f:9c:7a:6c:cc:22:56:2d:42:2a:32:84:27:65: af:00:91:f9:f1:98:0a:19:cb:64:2d:ca:f0:09:d8:12:7f:9c: 77:fe:36:f9:23:e0:35:41:46:92:c0:5d:a2:ef:fa:6a:1d:06: 30:fd:2e:e6:6f:03:e9:e9:18:d7:85:4e:cd:9a:de:bb:fb:05: 6f:2a:47:cc:8a:19:ff:9a:d2:7d:9e:19:9a:4d:32:e7:05:ff: 7c:83:79:3e:d5:44:d1:c4:42:9a:81:d0:c4:2a:a6:cd:58:c4: 87:c8:0f:c8:57:05:5d:d7:3d:8f:9d:3b:f8:f6:65:99:d8:0e: 7e:e7:1d:29:b5:4c:04:fc:19:65:bb:f3:89:57:61:06:8d:99: 83:87:2a:fb:33:41:3c:db:a0:d8:f1:9e:78:77:94:86:5b:e3: 87:4e:51:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNI9qyN08PspFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZTdiODRkMDItMmNiZi00MzQ4LTk4NWItYzQ5ZGZiNTIyYTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sZxpVQkT5i667xof/tZqMJCh4ry4ALJEgc3 P46TcjvOsktD3V1/2qwq2gX5C46JAC7sYFCbexJf86ucOWSY/Ta7/TuZNoiiMKDZ xpx4n2DvR6k2AGF5cCCIsI6ttcVB/l3WSgUuTlQDFelnOQEPrzAwLyfJIrrSNdrZ UyidrpwiCongowGGuogkKiYrAuKvhjCmU71hoLBPsHQ80HekImppEKbnvvnh9EV5 LPhx073mI8lFxrOOAoZ5JuGl9xCRYeSQxWvA6MHKMAcE3FN9Y3/7FJRblTUZK3K0 kuQcA+4nNcP1rhBNoi4RfZFA226ppf7gNiEQwvDo7f1S25gS6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYmP+Ph045mfKuVNYAN6wW4ty0MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDMzMjU5N2MtOWJkZC0z NmQyLTk2MzctNzNjNGM5ZmNlMDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2GGgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACf1uKv9IoOWi/WdRegV95MS+G5ktrL0OoWfVUqF/8K/N2OOdiK3Go73 D/dTFjdko5eOfYJ4wIhOwDMc+JIU2gGcueMByIld8pW6U/bS5F6R7uKrUrn8eHGu SR3b06ePnHpszCJWLUIqMoQnZa8AkfnxmAoZy2QtyvAJ2BJ/nHf+Nvkj4DVBRpLA XaLv+modBjD9LuZvA+npGNeFTs2a3rv7BW8qR8yKGf+a0n2eGZpNMucF/3yDeT7V RNHEQpqB0MQqps1YxIfID8hXBV3XPY+dO/j2ZZnYDn7nHSm1TAT8GWW784lXYQaN mYOHKvszQTzboNjxnnh3lIZb44dOUUQ= -----END CERTIFICATE-----Generated at Mon Aug 4 19:11:47 2025 by rpki-client