$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8038d7b0-bb58-3798-a6e0-7ab83bcb27f6.roa File: 8038d7b0-bb58-3798-a6e0-7ab83bcb27f6.roa (raw, json) Hash identifier: xxemVE0h8KVMJNJXJs5xEzJVSMRCnpM8bobjghhxRNg= Subject key identifier: 21:B8:BF:50:5D:58:BB:63:AC:BD:2C:02:4C:00:30:B7:E4:E9:EB:B7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3F1C58F5515D3520E6E28480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8038d7b0-bb58-3798-a6e0-7ab83bcb27f6.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 216.96.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:58:f5:51:5d:35:20:e6:e2:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=f49a72c7-a963-4aea-bcf9-1e714073e6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:14:13:46:43:1d:8c:fc:cc:6a:18:88:f4:0a: db:9e:c3:78:78:0d:cc:2e:76:2a:9d:70:2d:16:0f: 33:a5:4f:98:ab:19:8c:39:6b:2d:18:59:91:cb:53: 93:5d:5b:99:21:80:e4:46:8f:1e:52:c3:8e:17:79: 6f:43:0c:d1:76:86:ec:cd:28:59:e9:c0:e0:2c:6b: 42:58:09:d7:88:f6:eb:da:02:7d:81:91:02:78:d7: 35:83:5d:c5:63:65:28:96:62:80:0f:b0:77:a7:84: e3:2b:89:79:f1:ba:cb:97:fc:28:53:15:ff:ec:57: 17:b5:09:29:d0:07:46:19:54:e6:9c:c4:42:82:8a: e5:16:4c:3b:24:08:aa:68:28:ee:81:35:7b:2a:d8: 8b:00:a4:45:74:ae:af:70:c1:66:f9:7f:f2:95:59: f1:3f:94:b7:c7:6d:aa:9c:73:3e:34:96:75:cf:41: 7b:b8:98:3d:73:df:62:bf:ed:9d:50:02:b8:34:bd: f1:8e:76:16:16:c6:71:95:90:4f:29:5b:98:68:1a: 75:6b:7c:a3:31:7e:a8:9c:dc:4d:67:d0:c0:b4:03: 7c:e7:24:64:2f:d7:ad:7f:d9:5e:ab:f9:3c:0e:01: e3:c2:17:6b:4c:aa:38:e1:13:c2:dc:fa:98:75:85: 18:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B8:BF:50:5D:58:BB:63:AC:BD:2C:02:4C:00:30:B7:E4:E9:EB:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8038d7b0-bb58-3798-a6e0-7ab83bcb27f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:64:a9:67:d3:8e:ff:c8:6b:ef:18:ba:1a:4c:b0:28:1b:64: 40:b5:bd:74:a6:43:47:74:bd:2a:7a:b8:cd:ce:21:28:0b:6f: 4e:03:a0:8b:16:31:19:4e:ef:fc:9f:eb:6a:fc:4b:f8:27:89: 02:e2:47:34:48:db:e1:93:01:fd:21:2b:c7:07:38:1a:29:eb: db:28:b5:e2:7f:85:7a:b6:92:35:3a:89:29:97:59:46:f1:6c: 58:14:13:e9:a3:bc:48:19:30:03:72:d0:6d:8e:fe:90:f9:cd: d6:bb:ad:38:e8:ec:11:7b:5d:09:0c:4b:aa:af:e9:e2:a8:e4: d9:2c:18:cb:7a:28:5e:a8:d3:7c:65:1f:d2:9c:3a:ed:a1:e3: 44:12:f5:a7:ee:49:cd:5a:41:c0:6f:32:29:8e:a5:8f:cd:9e: 36:77:e1:84:95:b7:bc:78:66:b3:74:cd:ee:ae:b5:cc:71:5a: 7b:52:68:eb:7c:95:ef:59:63:21:6b:ca:f3:73:2b:9f:0e:4d: 0f:98:b8:3e:5c:c6:df:25:73:34:04:fb:5a:69:9e:22:ae:0f: 55:a9:ca:f1:b1:81:65:47:83:b2:66:49:52:f0:56:0f:98:e8: 8c:bd:24:34:27:f8:56:78:85:4b:1d:72:a3:65:55:90:ca:bc: 6b:48:d5:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HFj1UV01IObihIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk ZjQ5YTcyYzctYTk2My00YWVhLWJjZjktMWU3MTQwNzNlNmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhQTRkMdjPzMahiI9ArbnsN4eA3MLnYqnXAt Fg8zpU+YqxmMOWstGFmRy1OTXVuZIYDkRo8eUsOOF3lvQwzRdobszShZ6cDgLGtC WAnXiPbr2gJ9gZECeNc1g13FY2UolmKAD7B3p4TjK4l58brLl/woUxX/7FcXtQkp 0AdGGVTmnMRCgorlFkw7JAiqaCjugTV7KtiLAKRFdK6vcMFm+X/ylVnxP5S3x22q nHM+NJZ1z0F7uJg9c99iv+2dUAK4NL3xjnYWFsZxlZBPKVuYaBp1a3yjMX6onNxN Z9DAtAN85yRkL9etf9leq/k8DgHjwhdrTKo44RPC3PqYdYUYHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCG4v1BdWLtjrL0sAkwAMLfk6eu3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODAzOGQ3YjAtYmI1OC0z Nzk4LWE2ZTAtN2FiODNiY2IyN2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5kqWfTjv/Ia+8YuhpMsCgbZEC1vXSmQ0d0vSp6uM3OISgLb04DoIsW MRlO7/yf62r8S/gniQLiRzRI2+GTAf0hK8cHOBop69soteJ/hXq2kjU6iSmXWUbx bFgUE+mjvEgZMANy0G2O/pD5zda7rTjo7BF7XQkMS6qv6eKo5NksGMt6KF6o03xl H9KcOu2h40QS9afuSc1aQcBvMimOpY/NnjZ34YSVt7x4ZrN0ze6utcxxWntSaOt8 le9ZYyFryvNzK58OTQ+YuD5cxt8lczQE+1ppniKuD1WpyvGxgWVHg7JmSVLwVg+Y 6Iy9JDQn+FZ4hUsdcqNlVZDKvGtI1Yw= -----END CERTIFICATE-----Generated at Fri Oct 10 20:08:27 2025 by rpki-client