$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3728dd8b-d521-3477-ac4a-cc20387dfecb.roa File: 3728dd8b-d521-3477-ac4a-cc20387dfecb.roa (raw, json) Hash identifier: 0Sx7puvHH7YNvTQFcJNL7mj+QN8txS0LO2xszceLx+8= Subject key identifier: 74:EB:4E:F4:A2:D7:32:9F:31:DF:95:BE:CC:0B:33:5C:3D:91:04:BC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B434CAFB971AB92D601956FC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3728dd8b-d521-3477-ac4a-cc20387dfecb.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 0 IP address blocks: 209.16.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:af:b9:71:ab:92:d6:01:95:6f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=1ae20cf4-9862-45dc-95ac-8b7be0508c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fd:24:50:3d:95:63:88:0a:be:e0:e9:bf:41: 92:75:8d:d6:98:a9:4e:e9:d3:c4:a8:ae:a0:7a:30: bc:7d:51:03:b1:24:c2:f3:47:54:47:ba:93:a7:2a: 1d:15:7e:bc:b3:78:8a:cc:89:bc:9a:75:c0:90:e3: 04:46:af:1c:ee:47:9c:e7:71:7d:57:e4:64:f1:5e: d6:f8:f1:e4:cd:99:bf:1f:36:a7:39:c1:d2:7e:2e: f2:0a:ea:8d:b6:32:ad:cf:d2:6e:47:b8:59:f5:bf: db:11:79:0a:d2:95:f5:b3:84:6b:65:e0:ae:b9:75: 11:93:ac:6a:95:78:f7:8d:4d:80:05:36:91:26:d1: ad:7f:67:1e:35:17:e3:14:5a:96:ac:1c:ce:3c:4a: e2:cd:0d:a6:0a:c8:d9:57:dd:f1:6b:d6:a0:c8:0c: 06:16:7b:68:4d:3d:17:bf:52:ac:58:57:13:01:a0: 6f:34:1d:fc:3f:61:1c:80:79:65:79:8c:1d:ac:7d: 1d:f2:35:e2:ad:a3:aa:1a:52:d7:03:d8:bc:a3:12: a3:a0:77:44:59:7e:6f:a2:9e:ea:e0:bf:13:78:3a: 12:7e:55:94:9d:db:ba:3e:69:57:1f:7d:41:51:34: f6:d7:93:3d:e8:e1:47:43:ce:46:16:d6:41:c0:f8: 48:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:EB:4E:F4:A2:D7:32:9F:31:DF:95:BE:CC:0B:33:5C:3D:91:04:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3728dd8b-d521-3477-ac4a-cc20387dfecb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.16.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:db:e9:ac:b6:f4:fd:21:c4:f2:50:26:09:34:52:3d:d5:7c: af:06:52:07:cd:58:7a:59:e3:9e:0a:2c:49:c2:68:63:f4:c1: 94:64:ca:ca:c1:34:58:32:78:46:aa:32:9f:ed:89:b0:61:99: 3f:51:7b:c1:0c:0f:61:92:68:9d:30:41:13:a8:ef:ce:a1:2d: e2:bc:4d:9b:74:eb:c5:c6:69:90:40:7c:03:dd:b1:3f:3c:ef: 20:63:57:f5:57:6c:c6:67:8c:f1:a9:fa:a0:17:11:44:e6:7b: 5e:80:84:f2:21:af:af:9c:b8:b7:4a:3f:e3:95:0e:bc:88:6d: 2f:1e:d4:7b:56:56:fe:95:1e:8a:96:bd:f4:b8:8c:97:82:7e: a5:c5:10:42:e9:b8:a3:98:42:b2:d3:83:1c:76:08:51:b4:67: 67:8c:af:9a:5b:37:d7:09:f0:86:a5:06:61:ef:cf:fd:a7:84: 78:c2:7d:73:4e:d6:e9:fc:1c:69:56:5a:f6:aa:9d:c5:5e:d7: d0:82:1c:24:2c:1d:5f:c1:4c:6c:8c:13:0f:0e:4a:49:09:ac: 4a:2a:d6:09:9c:d2:fc:7e:56:ab:ea:93:76:74:85:a4:9e:44: 8b:87:74:8b:8a:9d:fa:46:ba:06:90:ff:4b:67:45:9e:71:3a: 0a:86:c1:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTK+5cauS1gGVb8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MWFlMjBjZjQtOTg2Mi00NWRjLTk1YWMtOGI3YmUwNTA4YzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP0kUD2VY4gKvuDpv0GSdY3WmKlO6dPEqK6g ejC8fVEDsSTC80dUR7qTpyodFX68s3iKzIm8mnXAkOMERq8c7kec53F9V+Rk8V7W +PHkzZm/HzanOcHSfi7yCuqNtjKtz9JuR7hZ9b/bEXkK0pX1s4RrZeCuuXURk6xq lXj3jU2ABTaRJtGtf2ceNRfjFFqWrBzOPErizQ2mCsjZV93xa9agyAwGFntoTT0X v1KsWFcTAaBvNB38P2EcgHlleYwdrH0d8jXiraOqGlLXA9i8oxKjoHdEWX5vop7q 4L8TeDoSflWUndu6PmlXH31BUTT215M96OFHQ85GFtZBwPhI7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTrTvSi1zKfMd+VvswLM1w9kQS8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzcyOGRkOGItZDUyMS0z NDc3LWFjNGEtY2MyMDM4N2RmZWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0RDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErb6ay29P0hxPJQJgk0Uj3VfK8GUgfNWHpZ454KLEnCaGP0wZRkysrB NFgyeEaqMp/tibBhmT9Re8EMD2GSaJ0wQROo786hLeK8TZt068XGaZBAfAPdsT88 7yBjV/VXbMZnjPGp+qAXEUTme16AhPIhr6+cuLdKP+OVDryIbS8e1HtWVv6VHoqW vfS4jJeCfqXFEELpuKOYQrLTgxx2CFG0Z2eMr5pbN9cJ8IalBmHvz/2nhHjCfXNO 1un8HGlWWvaqncVe19CCHCQsHV/BTGyMEw8OSkkJrEoq1gmc0vx+Vqvqk3Z0haSe RIuHdIuKnfpGugaQ/0tnRZ5xOgqGwdk= -----END CERTIFICATE-----Generated at Fri Oct 10 20:00:32 2025 by rpki-client