$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6f6e734-4ae6-3107-974a-3ed0e5c9d3d7.roa File: d6f6e734-4ae6-3107-974a-3ed0e5c9d3d7.roa (raw, json) Hash identifier: 9YKmFcW6gGvfvyAILjeJ3caGHC6YxQ1fkR4N2n9Trsw= Subject key identifier: C6:D3:40:0F:36:78:DB:1C:B0:60:5F:2C:BE:26:39:3F:CD:B6:04:51 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A101933F0D1F9156E94800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6f6e734-4ae6-3107-974a-3ed0e5c9d3d7.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 216.138.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:01:93:3f:0d:1f:91:56:e9:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=d84cc193-ae63-4bb0-9977-27807d7e04e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3d:9d:cb:ff:47:d5:50:b8:b0:09:98:63:1b: 77:71:4e:25:b6:98:ae:95:14:a1:2d:e6:4b:ab:27: e3:fe:5e:2b:9d:f1:72:05:a2:90:03:07:df:cf:21: 54:66:d1:62:de:1b:10:db:97:bb:c3:cc:65:64:67: 14:7b:7a:6f:48:a2:0d:35:b6:9d:57:3d:67:ae:e6: b3:fd:88:c0:8e:53:e2:60:fa:85:a9:8f:01:55:58: 41:8b:fe:24:c4:cc:3f:0c:06:54:8c:fd:a9:d4:29: b2:b7:cf:3c:d7:1e:b9:8e:4d:3e:e9:78:4c:67:62: a3:79:4c:ab:68:d2:c2:59:04:84:24:c4:81:6c:f7: 9f:7c:26:90:f3:c8:db:a0:e8:91:7b:89:60:d3:02: c1:c5:23:6c:05:ac:19:30:1a:8d:46:ae:94:7a:e7: c6:39:4d:8a:3e:60:f3:dc:8c:6e:26:03:80:53:1f: 7a:65:97:55:dd:92:23:25:f9:15:f6:72:0d:73:dd: 0f:4d:b9:65:7d:34:8a:63:cc:f0:14:09:1f:40:a0: 93:c0:c6:8b:43:00:d7:d1:f1:07:82:32:4a:9b:23: 63:2a:c8:c0:93:a3:70:82:28:70:c7:fa:89:a4:fa: 67:48:40:d7:1e:7e:21:85:55:eb:cf:95:8c:20:37: 44:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D3:40:0F:36:78:DB:1C:B0:60:5F:2C:BE:26:39:3F:CD:B6:04:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6f6e734-4ae6-3107-974a-3ed0e5c9d3d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.138.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:78:52:c1:09:38:ff:7b:f8:14:42:0d:8d:d5:45:fd:61:d2: 8c:47:6f:b2:f6:10:58:d5:c9:fb:38:ac:e0:2f:70:62:11:5c: 38:2f:f8:3d:e0:bf:dd:b7:5c:cf:3d:c3:9a:1f:d4:40:3b:03: 3f:29:e7:b0:bf:bb:56:66:e3:09:ca:90:1e:3e:cd:9a:6d:25: 12:ca:85:dd:6d:2b:45:44:fb:f0:d3:88:71:88:58:22:3d:52: 6e:b0:a7:f3:d8:db:e9:04:ee:f7:f0:52:6b:42:72:3f:98:58: ee:4b:cb:19:b2:78:bc:c9:47:fd:45:57:79:5b:3c:49:23:ef: 01:2b:1e:b2:ef:db:87:2d:1d:7e:73:98:75:02:77:71:e3:eb: 12:95:19:66:85:59:39:d5:d4:1c:5d:97:31:16:ba:4f:05:c3: 13:d5:0f:fe:ce:5c:b5:5b:4d:94:02:05:bc:81:3b:d0:e0:f9: c9:ea:de:cb:5a:32:39:75:25:5e:dc:4e:54:2c:87:b5:8f:14: 85:27:a4:d2:ff:1f:5c:d6:0c:93:bf:5e:59:91:5f:56:7b:16: 7a:48:51:27:86:6c:01:4a:a1:96:c6:46:65:ec:7b:f7:60:71: c8:4a:98:d1:07:55:11:6b:24:c9:81:a3:de:5f:c3:b9:ae:3d: f1:32:51:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoQGTPw0fkVbpSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZDg0Y2MxOTMtYWU2My00YmIwLTk5NzctMjc4MDdkN2UwNGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz2dy/9H1VC4sAmYYxt3cU4ltpiulRShLeZL qyfj/l4rnfFyBaKQAwffzyFUZtFi3hsQ25e7w8xlZGcUe3pvSKINNbadVz1nruaz /YjAjlPiYPqFqY8BVVhBi/4kxMw/DAZUjP2p1Cmyt8881x65jk0+6XhMZ2KjeUyr aNLCWQSEJMSBbPeffCaQ88jboOiRe4lg0wLBxSNsBawZMBqNRq6UeufGOU2KPmDz 3IxuJgOAUx96ZZdV3ZIjJfkV9nINc90PTbllfTSKY8zwFAkfQKCTwMaLQwDX0fEH gjJKmyNjKsjAk6Nwgihwx/qJpPpnSEDXHn4hhVXrz5WMIDdEBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbTQA82eNscsGBfLL4mOT/NtgRRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDZmNmU3MzQtNGFlNi0z MTA3LTk3NGEtM2VkMGU1YzlkM2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2IqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGt4UsEJOP97+BRCDY3VRf1h0oxHb7L2EFjVyfs4rOAvcGIRXDgv+D3g v923XM89w5of1EA7Az8p57C/u1Zm4wnKkB4+zZptJRLKhd1tK0VE+/DTiHGIWCI9 Um6wp/PY2+kE7vfwUmtCcj+YWO5LyxmyeLzJR/1FV3lbPEkj7wErHrLv24ctHX5z mHUCd3Hj6xKVGWaFWTnV1BxdlzEWuk8FwxPVD/7OXLVbTZQCBbyBO9Dg+cnq3sta Mjl1JV7cTlQsh7WPFIUnpNL/H1zWDJO/XlmRX1Z7FnpIUSeGbAFKoZbGRmXse/dg cchKmNEHVRFrJMmBo95fw7muPfEyUYA= -----END CERTIFICATE-----Generated at Wed Aug 6 05:54:34 2025 by rpki-client