$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/632d2d98-3ca8-3c01-a046-3232bd2e8457.roa File: 632d2d98-3ca8-3c01-a046-3232bd2e8457.roa (raw, json) Hash identifier: RWgLnuKda3F6EBYqIG77AdaxR+nbORbdaAhF+O4rK30= Subject key identifier: 82:91:BD:B0:A4:3D:54:A6:A4:04:D0:1B:5F:53:77:C3:6B:E6:34:C4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A1092427A4C73F1F177480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/632d2d98-3ca8-3c01-a046-3232bd2e8457.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 54066 IP address blocks: 216.172.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:09:24:27:a4:c7:3f:1f:17:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=8d35a5af-35d2-4724-bfd0-e5780249aec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:01:5a:3c:de:2a:42:bd:47:d6:eb:89:2c:07: fe:10:c1:1a:70:e5:18:3b:4a:27:83:37:e9:ca:f7: 0a:10:41:1e:d6:cb:7d:ea:f5:d6:f9:ec:10:93:73: 36:24:8d:39:92:a9:1f:de:a5:30:e7:36:11:2f:17: 33:52:88:17:22:6e:39:01:bd:dc:10:bd:8d:f0:1e: 73:12:90:f5:a1:d9:cc:c1:ba:42:e7:25:06:54:65: 55:cb:f5:f0:e5:05:1b:ca:66:1d:7f:10:bf:bd:c0: ba:f5:5e:55:79:70:ab:e1:25:be:14:17:e6:16:6d: eb:9a:f1:88:29:08:4d:62:41:27:45:ee:75:70:7d: a9:8d:d1:3d:b7:60:a4:6f:7b:1f:71:7e:57:5c:65: ad:19:b4:b5:a2:e8:d4:37:f1:b9:93:8e:3b:20:4f: 43:45:be:81:55:ce:5e:d2:b0:37:ce:8b:55:25:5d: 06:5b:3e:f6:4c:0c:76:88:6f:07:65:72:2a:c3:af: 48:e7:49:1f:70:2f:da:02:2f:27:82:13:d4:86:bf: 61:8e:af:d0:29:98:ed:a3:49:07:fc:be:e8:a7:d0: 80:56:1e:6b:d1:1e:2c:25:54:d6:96:29:26:69:8f: f5:bb:5b:7e:eb:f8:e1:64:b8:3b:6a:b8:16:d8:38: 1d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:91:BD:B0:A4:3D:54:A6:A4:04:D0:1B:5F:53:77:C3:6B:E6:34:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/632d2d98-3ca8-3c01-a046-3232bd2e8457.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.172.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:f2:f4:f1:10:3c:5c:8c:b2:d9:40:90:f0:8c:97:a3:7c:2d: 3e:24:a8:11:0d:79:3d:06:da:5e:56:d1:99:fb:36:85:7a:9d: 75:f8:41:0d:ae:23:31:8f:04:82:71:02:0b:2a:b5:bf:68:e5: a5:86:2a:7a:cb:a3:e1:c2:d0:7d:86:79:a7:df:e7:bc:1c:8e: 8d:54:91:b8:4c:4a:b5:aa:57:82:7a:0c:b5:cb:1f:93:90:88: 22:b4:74:d6:98:e3:fb:74:67:79:4c:b0:bb:57:3c:18:fb:ce: 64:74:28:6b:1b:d1:2b:d9:48:2f:35:86:42:8f:73:d8:49:3c: 04:eb:ed:5e:58:10:f9:0e:d2:18:87:a2:c6:45:99:ad:90:09: 49:98:18:54:a6:74:dd:9a:4a:ca:02:07:c8:6a:bc:4c:6a:44: 0c:5c:96:52:e5:ef:65:b8:4a:49:ab:ef:99:1c:02:be:0d:85: 49:74:c9:22:1d:6f:3e:02:7c:f2:a2:38:32:2c:a8:14:5f:0f: 6a:4a:ad:b2:41:6a:74:c1:04:44:5b:23:4b:9b:9d:a0:08:47: 17:11:5b:8f:1f:20:d0:3a:8f:78:51:3b:23:50:61:b8:e7:f5: 87:dc:2b:9c:27:5f:95:c5:e0:e5:1b:5b:62:a2:13:1f:64:50: 65:20:7e:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoQkkJ6THPx8XdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk OGQzNWE1YWYtMzVkMi00NzI0LWJmZDAtZTU3ODAyNDlhZWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwFaPN4qQr1H1uuJLAf+EMEacOUYO0ongzfp yvcKEEEe1st96vXW+ewQk3M2JI05kqkf3qUw5zYRLxczUogXIm45Ab3cEL2N8B5z EpD1odnMwbpC5yUGVGVVy/Xw5QUbymYdfxC/vcC69V5VeXCr4SW+FBfmFm3rmvGI KQhNYkEnRe51cH2pjdE9t2Ckb3sfcX5XXGWtGbS1oujUN/G5k447IE9DRb6BVc5e 0rA3zotVJV0GWz72TAx2iG8HZXIqw69I50kfcC/aAi8nghPUhr9hjq/QKZjto0kH /L7op9CAVh5r0R4sJVTWlikmaY/1u1t+6/jhZLg7argW2DgdjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKRvbCkPVSmpATQG19Td8Nr5jTEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjMyZDJkOTgtM2NhOC0z YzAxLWEwNDYtMzIzMmJkMmU4NDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KwVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTy9PEQPFyMstlAkPCMl6N8LT4kqBENeT0G2l5W0Zn7NoV6nXX4QQ2u IzGPBIJxAgsqtb9o5aWGKnrLo+HC0H2Geaff57wcjo1UkbhMSrWqV4J6DLXLH5OQ iCK0dNaY4/t0Z3lMsLtXPBj7zmR0KGsb0SvZSC81hkKPc9hJPATr7V5YEPkO0hiH osZFma2QCUmYGFSmdN2aSsoCB8hqvExqRAxcllLl72W4Skmr75kcAr4NhUl0ySId bz4CfPKiODIsqBRfD2pKrbJBanTBBERbI0ubnaAIRxcRW48fINA6j3hROyNQYbjn 9YfcK5wnX5XF4OUbW2KiEx9kUGUgfuk= -----END CERTIFICATE-----Generated at Tue Jul 22 12:29:57 2025 by rpki-client