$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dd66e60-aa9a-3df3-be8c-e9f5be7d04d5.roa File: 2dd66e60-aa9a-3df3-be8c-e9f5be7d04d5.roa (raw, json) Hash identifier: S7kFHw2tE0Ah3WaiSDoNNK2tfLQ27GbdGPOXT7aO4HE= Subject key identifier: 81:69:85:A1:0B:39:FC:96:6D:47:92:AB:56:4A:57:B7:C5:4A:44:E0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E60693488664E39D11450C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dd66e60-aa9a-3df3-be8c-e9f5be7d04d5.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 216.96.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:69:34:88:66:4e:39:d1:14:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=7a0cac97-d7fa-4699-b4c1-423eb215f7ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ce:22:3b:65:bb:95:87:e0:d1:8a:04:7c:42: ab:af:b0:c8:d7:38:c2:ad:7f:f0:d7:cd:bf:cf:8c: 6f:df:5d:64:b8:dd:29:92:c9:aa:44:b3:c5:85:a5: fe:70:91:9b:7a:f5:c1:0b:a1:f8:d9:fd:f7:f3:9b: 8c:55:17:2e:2c:5e:ab:27:54:6a:70:10:99:ed:d6: a3:95:55:d8:56:ab:35:78:59:a0:77:b9:79:0b:2b: 65:04:a2:9f:51:f6:95:49:1d:4a:07:9d:c7:62:72: 77:af:69:41:e7:2c:65:fb:be:ce:55:5a:d1:36:b8: 0c:d8:07:7b:8f:65:0d:c2:2c:78:87:0a:59:6c:ea: 40:51:26:12:67:90:72:84:9b:54:d1:9e:18:0d:a3: 10:a4:7b:89:70:99:9b:aa:31:7c:ad:21:ae:2c:ad: 82:d4:fe:31:e3:98:32:64:1c:c7:41:91:1c:4e:76: d8:93:62:db:ff:f5:95:99:6b:09:f3:5a:09:70:52: 4b:c9:73:92:01:6b:8d:22:de:90:24:b1:db:6d:80: 62:a6:1c:7e:9f:d5:7d:9e:64:4d:5f:9a:58:b5:1d: ee:14:e5:78:cf:5d:f6:52:a9:0f:c8:20:f2:14:26: f0:6a:0a:9a:41:75:21:4e:56:1d:ed:4e:47:66:62: 78:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:69:85:A1:0B:39:FC:96:6D:47:92:AB:56:4A:57:B7:C5:4A:44:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dd66e60-aa9a-3df3-be8c-e9f5be7d04d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:a4:36:ef:64:02:87:30:ef:e9:25:77:8b:fb:0d:3c:2f:cd: 03:de:8d:cc:fb:c9:c8:0c:57:83:d6:e2:b9:27:1f:ad:30:89: 9c:ad:f3:04:9c:04:d1:0a:49:43:eb:e3:38:4e:c3:05:ad:03: 37:3e:6f:bb:e4:e9:d4:bc:0b:24:87:d4:6e:66:70:85:76:24: fa:3a:fc:2e:f9:f9:19:3d:66:6f:c4:f0:35:aa:eb:c8:46:82: 35:27:da:1e:44:87:5c:59:18:65:44:db:8a:fd:79:97:99:5a: c9:19:1c:12:df:6b:83:bc:2c:51:19:3c:cb:15:45:fb:ba:fd: 40:7c:71:6e:bc:e9:15:78:35:2b:6c:13:7b:17:30:e3:f4:99: 11:ff:8b:93:46:65:31:db:c5:61:4d:ce:d9:3d:8f:6b:35:9a: 98:3e:3d:fe:1a:f4:e9:23:59:8e:f9:12:4f:15:f1:d6:ad:ae: aa:80:dd:a1:8f:5d:14:6f:b8:c5:a6:6a:a5:99:7e:ae:7a:3a: 49:85:26:30:a0:51:37:66:83:8a:0c:3d:ac:36:17:7b:77:5f: 7f:0d:60:d6:19:bd:d5:c4:67:1a:fa:3e:82:b3:d8:3c:94:c6: cc:a0:6c:a1:2b:f7:d3:50:56:c9:7b:8c:77:3f:aa:cb:8d:e2: ab:19:d1:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYGk0iGZOOdEUUMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk N2EwY2FjOTctZDdmYS00Njk5LWI0YzEtNDIzZWIyMTVmN2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr84iO2W7lYfg0YoEfEKrr7DI1zjCrX/w182/ z4xv311kuN0pksmqRLPFhaX+cJGbevXBC6H42f3385uMVRcuLF6rJ1RqcBCZ7daj lVXYVqs1eFmgd7l5CytlBKKfUfaVSR1KB53HYnJ3r2lB5yxl+77OVVrRNrgM2Ad7 j2UNwix4hwpZbOpAUSYSZ5ByhJtU0Z4YDaMQpHuJcJmbqjF8rSGuLK2C1P4x45gy ZBzHQZEcTnbYk2Lb//WVmWsJ81oJcFJLyXOSAWuNIt6QJLHbbYBiphx+n9V9nmRN X5pYtR3uFOV4z132UqkPyCDyFCbwagqaQXUhTlYd7U5HZmJ4PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFphaELOfyWbUeSq1ZKV7fFSkTgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmRkNjZlNjAtYWE5YS0z ZGYzLWJlOGMtZTlmNWJlN2QwNGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCkNu9kAocw7+kld4v7DTwvzQPejcz7ycgMV4PW4rknH60wiZyt8wSc BNEKSUPr4zhOwwWtAzc+b7vk6dS8CySH1G5mcIV2JPo6/C75+Rk9Zm/E8DWq68hG gjUn2h5Eh1xZGGVE24r9eZeZWskZHBLfa4O8LFEZPMsVRfu6/UB8cW686RV4NSts E3sXMOP0mRH/i5NGZTHbxWFNztk9j2s1mpg+Pf4a9OkjWY75Ek8V8datrqqA3aGP XRRvuMWmaqWZfq56OkmFJjCgUTdmg4oMPaw2F3t3X38NYNYZvdXEZxr6PoKz2DyU xsygbKEr99NQVsl7jHc/qsuN4qsZ0Us= -----END CERTIFICATE-----Generated at Wed Jul 9 12:09:56 2025 by rpki-client