$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c70f49b6-5761-3442-a40c-5a838f9fd894.roa File: c70f49b6-5761-3442-a40c-5a838f9fd894.roa (raw, json) Hash identifier: v0Ha0MBigFJ7s8x6kR+s2NLGNlUXhVr1SONmrj20UA4= Subject key identifier: 13:2D:00:B2:92:A5:C1:CE:2E:53:DF:26:8F:76:53:81:83:90:E3:D3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3F1C673376C2CA61E37908E8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c70f49b6-5761-3442-a40c-5a838f9fd894.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 216.96.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:67:33:76:c2:ca:61:e3:79:08:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=7d4f10eb-3bae-448e-a585-eaae4c261cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fe:ec:1d:d9:74:18:47:c1:43:e1:a9:c9:2c: 51:ff:f6:e8:79:72:64:4b:b9:97:5a:e3:ee:64:7e: 87:99:48:78:17:fd:84:db:34:21:c1:5f:a4:ac:cc: 4e:1f:0f:82:4b:aa:08:e1:55:24:e8:9b:c5:1a:25: 88:b1:33:8a:09:08:79:f4:d6:7a:b3:7a:a3:d2:a5: c9:62:54:4c:ea:b5:b9:83:6a:d5:33:96:e6:4c:1b: bb:cb:ac:29:14:ab:e3:8a:f9:66:a9:bc:11:67:c4: f1:0b:6d:6f:bc:d0:80:21:14:0d:b3:a2:56:77:b3: e1:6c:9b:3c:55:21:60:0a:75:8c:55:06:75:49:24: a9:5f:de:9e:ed:20:a9:47:c5:13:0e:05:46:8f:e5: a7:f9:6c:80:b5:45:ad:f5:e1:cf:34:98:0a:88:b2: 81:b4:1e:0b:e9:23:44:73:1b:f8:61:bd:aa:e5:21: 31:b6:f1:8f:d9:3e:f5:80:0a:93:6c:94:82:32:35: d0:4d:84:7b:10:f5:cd:e1:3d:39:3f:f2:b3:94:b2: d8:37:12:f6:f5:a5:62:a8:f5:b1:9f:87:1f:7c:f5: 6d:ff:79:9f:98:d9:96:13:1f:5e:20:96:9a:3d:08: 4f:23:08:0c:69:03:be:f0:01:a9:bb:8a:9f:c6:1c: c4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2D:00:B2:92:A5:C1:CE:2E:53:DF:26:8F:76:53:81:83:90:E3:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c70f49b6-5761-3442-a40c-5a838f9fd894.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:86:3e:bc:93:ea:73:d4:69:4e:ac:b2:94:d3:64:93:2a:87: 02:89:7a:10:ed:67:19:e8:03:5f:74:74:2d:4b:77:12:7a:e1: 81:d2:8f:29:4c:86:dc:77:d0:aa:ba:36:ad:5e:bb:cb:72:00: d6:d1:74:65:a5:f9:00:65:cc:ee:7d:ed:17:c0:0a:ee:14:7d: 03:57:9f:10:d9:c6:83:9b:b1:75:ab:17:c7:cd:31:f0:95:1b: ec:88:64:45:75:99:ba:bc:92:03:bf:10:0c:21:8f:68:86:be: 51:0e:3a:73:53:63:87:b4:5c:af:fe:8b:b2:c0:7d:cf:c3:b9: 94:19:bc:e2:0c:53:18:1f:27:95:3e:29:f5:fb:a8:72:89:b1: 5a:5f:12:91:39:0c:c3:c6:ba:95:05:4a:e1:ce:4b:fa:4e:2d: 32:3e:17:c9:75:98:df:25:c4:3e:2a:cd:66:70:41:ab:de:1c: 0c:8f:d0:62:92:bd:eb:5c:67:3c:a6:32:1c:ed:ec:3b:da:d5: e9:77:ce:fb:1c:46:aa:57:83:3f:05:c4:57:81:f2:87:60:3a: ef:b7:2b:95:fe:5f:ea:e1:22:1c:e0:16:e5:e3:fa:41:b4:1b: 13:4a:13:ab:04:f2:b1:9a:77:30:e6:7a:9a:d2:b8:a8:50:47: 54:39:37:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HGczdsLKYeN5COgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk N2Q0ZjEwZWItM2JhZS00NDhlLWE1ODUtZWFhZTRjMjYxY2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv7sHdl0GEfBQ+GpySxR//boeXJkS7mXWuPu ZH6HmUh4F/2E2zQhwV+krMxOHw+CS6oI4VUk6JvFGiWIsTOKCQh59NZ6s3qj0qXJ YlRM6rW5g2rVM5bmTBu7y6wpFKvjivlmqbwRZ8TxC21vvNCAIRQNs6JWd7PhbJs8 VSFgCnWMVQZ1SSSpX96e7SCpR8UTDgVGj+Wn+WyAtUWt9eHPNJgKiLKBtB4L6SNE cxv4Yb2q5SExtvGP2T71gAqTbJSCMjXQTYR7EPXN4T05P/KzlLLYNxL29aViqPWx n4cffPVt/3mfmNmWEx9eIJaaPQhPIwgMaQO+8AGpu4qfxhzEQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMtALKSpcHOLlPfJo92U4GDkOPTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzcwZjQ5YjYtNTc2MS0z NDQyLWE0MGMtNWE4MzhmOWZkODk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GAeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKGPryT6nPUaU6sspTTZJMqhwKJehDtZxnoA190dC1LdxJ64YHSjylM htx30Kq6Nq1eu8tyANbRdGWl+QBlzO597RfACu4UfQNXnxDZxoObsXWrF8fNMfCV G+yIZEV1mbq8kgO/EAwhj2iGvlEOOnNTY4e0XK/+i7LAfc/DuZQZvOIMUxgfJ5U+ KfX7qHKJsVpfEpE5DMPGupUFSuHOS/pOLTI+F8l1mN8lxD4qzWZwQaveHAyP0GKS vetcZzymMhzt7Dva1el3zvscRqpXgz8FxFeB8odgOu+3K5X+X+rhIhzgFuXj+kG0 GxNKE6sE8rGadzDmeprSuKhQR1Q5N9M= -----END CERTIFICATE-----Generated at Fri Oct 10 19:52:22 2025 by rpki-client