$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a85b66d-5b14-3f1b-81a0-03f88b9b1e74.roa File: 3a85b66d-5b14-3f1b-81a0-03f88b9b1e74.roa (raw, json) Hash identifier: /42MEkvRSWxDkwqalKXjrAZNxRC9vzZCUaUvaxqr+3E= Subject key identifier: 62:40:0A:EE:B4:B8:16:53:B4:00:04:F5:26:4E:ED:DC:44:7A:6C:1B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E6067E8CA6D7BF2F70F0900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a85b66d-5b14-3f1b-81a0-03f88b9b1e74.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 216.96.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:67:e8:ca:6d:7b:f2:f7:0f:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=b60e1621-64e4-4437-86a8-35a42728d790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:47:11:48:a1:c7:39:26:40:42:19:4d:76:fb: 88:70:cd:a0:f2:24:01:b9:66:b6:15:9a:b1:3e:96: 4c:d2:ab:08:34:b7:cd:81:d1:20:71:a2:83:40:15: 45:7f:e1:c2:39:05:34:1f:a0:7f:11:83:fc:26:e5: 24:7d:42:04:57:e6:cb:c8:f7:87:9a:16:29:54:88: 59:8c:58:40:d6:49:12:39:ea:6f:11:35:85:92:d5: 85:db:79:23:5b:e9:8e:8d:eb:2d:23:bf:31:01:93: 2e:7b:af:d1:25:17:7b:53:49:56:fc:f5:bd:0e:49: fb:c4:76:e8:dd:05:30:46:d4:f4:62:83:37:94:40: 43:a6:fc:3a:51:74:29:5f:d5:a9:b7:fe:4e:d2:30: 1e:b6:fa:13:f5:68:b0:22:30:78:95:3d:03:08:fd: f6:43:67:39:32:0f:6d:0f:8f:b6:51:70:1e:c4:e0: 11:5b:06:d1:05:97:e4:36:09:0d:08:09:af:30:6d: 99:5b:0c:65:5d:62:93:ec:10:98:ff:f9:78:f8:52: bd:37:49:0a:dc:3e:86:e9:5c:df:c0:fc:6a:c7:e9: c2:d5:3d:00:62:b4:31:a4:41:3e:d6:08:d1:aa:d6: 4f:87:8e:d6:7d:f1:78:f1:57:ec:e0:bf:89:83:d2: cc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:40:0A:EE:B4:B8:16:53:B4:00:04:F5:26:4E:ED:DC:44:7A:6C:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a85b66d-5b14-3f1b-81a0-03f88b9b1e74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:5d:1d:20:54:f1:5b:50:73:bb:32:09:8f:5e:4a:44:f4:ff: 42:b9:a5:9d:de:fa:2e:db:d3:ff:08:69:dc:27:21:dc:3d:7b: 86:de:cb:63:fb:c8:7b:e0:2a:c5:7d:59:39:ed:2a:33:c2:fd: 7d:72:ba:c8:06:db:61:d5:d4:11:82:8c:72:4c:63:6e:ec:2a: 90:fb:1b:b4:74:18:e9:58:90:b0:61:6c:56:24:ff:ca:4c:d1: 7d:59:25:2f:55:27:90:4b:59:e8:51:da:80:6c:3f:4b:d8:87: 30:24:24:cc:7c:ad:dc:53:d1:46:76:c3:5d:ba:f5:45:89:8e: 6b:56:0a:09:a2:36:e5:28:a0:1c:ad:1c:59:0c:2b:df:fa:35: d8:f6:b7:e8:ed:3a:db:4f:9a:7f:bd:56:ae:f2:12:c7:85:5b: 4e:b9:95:39:80:1d:84:02:8d:91:32:ab:27:83:1f:02:5a:3b: 73:5b:31:ba:d0:84:c7:3f:24:06:a6:59:eb:08:7a:ce:f9:49: 22:4f:6e:73:d2:97:b6:d7:03:db:7c:65:ee:e0:32:e1:48:b9: 24:26:2c:cb:fd:11:65:21:52:90:5c:de:24:18:f3:6d:1d:48: 8d:62:29:ee:aa:65:6f:68:01:6f:ea:25:b0:85:18:ca:1a:09: 36:43:31:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYGfoym178vcPCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk YjYwZTE2MjEtNjRlNC00NDM3LTg2YTgtMzVhNDI3MjhkNzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUcRSKHHOSZAQhlNdvuIcM2g8iQBuWa2FZqx PpZM0qsINLfNgdEgcaKDQBVFf+HCOQU0H6B/EYP8JuUkfUIEV+bLyPeHmhYpVIhZ jFhA1kkSOepvETWFktWF23kjW+mOjestI78xAZMue6/RJRd7U0lW/PW9Dkn7xHbo 3QUwRtT0YoM3lEBDpvw6UXQpX9Wpt/5O0jAetvoT9WiwIjB4lT0DCP32Q2c5Mg9t D4+2UXAexOARWwbRBZfkNgkNCAmvMG2ZWwxlXWKT7BCY//l4+FK9N0kK3D6G6Vzf wPxqx+nC1T0AYrQxpEE+1gjRqtZPh47WffF48Vfs4L+Jg9LMMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJACu60uBZTtAAE9SZO7dxEemwbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2E4NWI2NmQtNWIxNC0z ZjFiLTgxYTAtMDNmODhiOWIxZTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GAJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1dHSBU8VtQc7syCY9eSkT0/0K5pZ3e+i7b0/8IadwnIdw9e4bey2P7 yHvgKsV9WTntKjPC/X1yusgG22HV1BGCjHJMY27sKpD7G7R0GOlYkLBhbFYk/8pM 0X1ZJS9VJ5BLWehR2oBsP0vYhzAkJMx8rdxT0UZ2w1269UWJjmtWCgmiNuUooByt HFkMK9/6Ndj2t+jtOttPmn+9Vq7yEseFW065lTmAHYQCjZEyqyeDHwJaO3NbMbrQ hMc/JAamWesIes75SSJPbnPSl7bXA9t8Ze7gMuFIuSQmLMv9EWUhUpBc3iQY820d SI1iKe6qZW9oAW/qJbCFGMoaCTZDMbM= -----END CERTIFICATE-----Generated at Wed Jul 9 12:42:00 2025 by rpki-client