$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc1dbcd9-1050-39bf-afaa-723193d52e1a.roa File: dc1dbcd9-1050-39bf-afaa-723193d52e1a.roa (raw, json) Hash identifier: 6Ksd6NSlVGFkGTned4+mXJD7pvWPKBA84kY+KNaLTGw= Subject key identifier: AB:57:2F:2B:18:BB:B5:8B:40:25:D4:A0:80:54:4A:4C:E9:9E:C2:39 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A10207C2B46B140E52AFD0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc1dbcd9-1050-39bf-afaa-723193d52e1a.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 216.219.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:02:07:c2:b4:6b:14:0e:52:af:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=b8328c6c-70b2-4502-ace6-15cc6a1c6905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:bd:a9:21:48:ce:78:54:df:67:1b:79:8e:4b: 2b:ba:e6:82:b9:21:fd:5a:18:03:1d:d0:5f:8b:d3: ac:65:4d:08:f5:13:4e:1f:92:38:b5:31:0b:69:78: 52:3c:7f:83:ec:9f:8a:40:d5:af:55:6b:4a:5d:29: c8:0a:d2:bf:b9:45:f3:61:06:aa:b2:61:bd:0c:10: 85:57:58:47:6b:d9:4e:68:2b:c3:f4:fc:46:3f:59: 1b:9d:36:2c:5a:fd:c9:66:ce:76:fc:fc:2c:5d:36: 9b:04:c0:d5:9e:ff:48:ca:c6:04:3f:5d:57:fb:2b: f7:79:7b:92:11:f9:8e:67:56:cf:af:19:c3:57:a1: 05:e8:a8:50:48:3a:81:71:ee:73:00:3e:66:24:8c: 9f:ec:0f:0f:08:3c:2d:54:07:36:21:e2:5f:1c:0c: f5:1a:4f:ce:17:c0:e9:0c:82:8b:34:9b:7e:1f:55: bd:73:df:b2:09:05:a1:cb:12:cd:c3:0f:9b:a4:6c: 38:d3:e5:f2:6a:5a:ad:38:64:c5:de:b1:58:7c:36: 28:9e:6f:ad:5e:af:86:fc:c2:e4:dd:fa:b1:ca:c2: b5:1a:ba:2a:58:11:3f:4d:86:8e:42:de:a4:4d:fb: 09:dd:ba:bb:56:dc:dd:13:b5:1e:a6:ad:cd:dc:97: b2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:57:2F:2B:18:BB:B5:8B:40:25:D4:A0:80:54:4A:4C:E9:9E:C2:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc1dbcd9-1050-39bf-afaa-723193d52e1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.219.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:dc:73:fc:06:50:84:23:73:37:74:2d:2a:16:6b:15:3a:61: d7:98:33:80:d8:b2:3b:05:2e:47:31:28:96:be:20:b7:88:97: 03:45:9c:7f:2f:fd:45:47:37:56:9c:b0:3f:7b:27:7c:1d:ff: d6:2b:e0:cf:48:ba:7e:49:ff:36:e7:56:35:bf:04:ef:12:0a: 99:6f:62:6a:72:ac:90:54:7c:28:a6:25:1d:4e:90:e1:2d:f2: 3b:ba:e8:00:5b:7c:35:1b:80:2d:9a:9d:60:33:16:8e:ae:dd: 5c:e7:4a:48:7f:a5:68:00:4c:a7:c8:91:cf:f1:57:c0:29:33: 5a:a4:3b:d0:81:c0:f7:2a:e7:0b:b4:32:ec:99:09:72:b2:fa: bf:a6:6a:2a:1d:e9:ef:bc:f4:c7:a5:95:73:c4:8d:cc:73:46: eb:01:ab:c9:9e:be:a5:82:27:5b:38:b5:39:cb:86:c3:76:4b: a2:63:be:6b:de:f7:ea:fb:10:c8:f4:da:90:01:7b:44:13:aa: d0:ca:50:a3:c6:69:a8:5a:d3:35:31:65:97:1a:bd:a1:7e:1c: 49:4e:b7:a8:6e:68:2a:9d:d8:38:f5:72:ff:3c:f0:be:bb:77: 61:48:b4:b7:62:90:c0:c9:c2:bd:f2:a0:73:49:ae:92:96:f7: 0a:89:63:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoQIHwrRrFA5Sr9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YjgzMjhjNmMtNzBiMi00NTAyLWFjZTYtMTVjYzZhMWM2OTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL2pIUjOeFTfZxt5jksruuaCuSH9WhgDHdBf i9OsZU0I9RNOH5I4tTELaXhSPH+D7J+KQNWvVWtKXSnICtK/uUXzYQaqsmG9DBCF V1hHa9lOaCvD9PxGP1kbnTYsWv3JZs52/PwsXTabBMDVnv9IysYEP11X+yv3eXuS EfmOZ1bPrxnDV6EF6KhQSDqBce5zAD5mJIyf7A8PCDwtVAc2IeJfHAz1Gk/OF8Dp DIKLNJt+H1W9c9+yCQWhyxLNww+bpGw40+XyalqtOGTF3rFYfDYonm+tXq+G/MLk 3fqxysK1GroqWBE/TYaOQt6kTfsJ3bq7VtzdE7Uepq3N3JeyewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtXLysYu7WLQCXUoIBUSkzpnsI5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGMxZGJjZDktMTA1MC0z OWJmLWFmYWEtNzIzMTkzZDUyZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2NsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIncc/wGUIQjczd0LSoWaxU6YdeYM4DYsjsFLkcxKJa+ILeIlwNFnH8v /UVHN1acsD97J3wd/9Yr4M9Iun5J/zbnVjW/BO8SCplvYmpyrJBUfCimJR1OkOEt 8ju66ABbfDUbgC2anWAzFo6u3VznSkh/pWgATKfIkc/xV8ApM1qkO9CBwPcq5wu0 MuyZCXKy+r+maiod6e+89MellXPEjcxzRusBq8mevqWCJ1s4tTnLhsN2S6Jjvmve 9+r7EMj02pABe0QTqtDKUKPGaaha0zUxZZcavaF+HElOt6huaCqd2Dj1cv888L67 d2FItLdikMDJwr3yoHNJrpKW9wqJY5g= -----END CERTIFICATE-----Generated at Wed Aug 6 13:11:29 2025 by rpki-client