$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ec5a5ea-58f9-36c5-a10d-a552db4ba8c4.roa File: 4ec5a5ea-58f9-36c5-a10d-a552db4ba8c4.roa (raw, json) Hash identifier: /EC/b4461K2PuMK/trXwWuuY3uoq0GiYnWMHukkLeHA= Subject key identifier: 27:94:2E:55:A1:8B:3E:B7:24:7C:AC:64:58:C6:C8:D1:D7:FD:7B:E7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B434CAFCB5356EEE9CB160F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ec5a5ea-58f9-36c5-a10d-a552db4ba8c4.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 0 IP address blocks: 209.50.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:af:cb:53:56:ee:e9:cb:16:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=14d0284d-ecad-4a64-9324-3b80b13986ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7d:11:57:f3:9f:a7:54:b9:cf:8a:64:c2:d5: c1:67:02:c8:c5:a8:da:dc:b6:ae:a8:3d:34:22:53: cc:e9:9c:bc:3d:b5:60:1d:2a:96:3b:0e:15:84:86: 82:7c:19:c3:65:cd:66:88:8a:4e:31:19:08:b9:20: 71:e4:43:f4:e2:4f:53:16:8b:f2:c6:c1:1f:55:e1: f8:d7:4c:80:d7:fc:2f:28:4b:1a:35:b0:87:59:39: 1f:03:1f:b5:1d:08:e0:2b:0f:15:ec:00:ea:bc:00: 10:56:8c:36:88:83:35:b7:47:ac:4c:cd:a3:e0:7d: 04:9e:36:13:0a:43:5f:e2:f4:90:25:b0:ec:6b:44: 99:a3:f8:66:38:01:dd:01:6e:3e:13:be:ed:61:d3: ad:cc:35:ef:4a:09:62:3c:a1:fb:02:7f:50:84:63: e4:81:40:58:6f:4a:c2:cb:d9:b1:54:b1:2d:18:46: d5:a5:d4:f7:84:95:1b:e4:d2:9a:37:2a:cd:1a:b6: 69:27:5b:b3:15:05:50:1f:70:aa:f7:b3:32:ca:af: c6:93:16:df:de:d2:74:99:38:b6:be:35:83:e8:3d: 74:e0:15:35:81:38:7c:dd:f1:fd:06:85:67:89:cb: 91:35:26:52:29:b5:ee:a1:83:55:c6:2a:bc:14:63: 4f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:94:2E:55:A1:8B:3E:B7:24:7C:AC:64:58:C6:C8:D1:D7:FD:7B:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ec5a5ea-58f9-36c5-a10d-a552db4ba8c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.50.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:98:c2:42:17:49:ef:37:83:98:ae:b4:50:08:18:fb:63:b1: c6:b2:bd:85:d3:fe:a1:2e:43:38:e3:5f:b9:d2:09:68:c7:c3: 0e:d1:44:43:f3:f8:77:17:bf:5c:ba:b5:73:cf:31:19:1d:05: 65:22:64:4e:f1:ca:67:37:f6:16:e8:21:8c:c3:80:f5:7f:a2: ee:be:57:2e:6b:19:05:75:1d:c0:8a:9f:d5:db:44:a9:f0:7f: b5:69:fe:fd:31:60:28:2e:fd:44:46:b1:ad:34:40:5a:52:5b: ba:09:4b:62:83:7f:24:7f:17:bd:28:89:1c:23:9c:c7:5f:55: 1b:65:21:24:d8:5a:a1:fa:13:2e:c7:ca:a7:aa:2b:17:e2:fc: f1:1c:a7:f5:95:a6:2c:ea:32:69:02:db:8f:ed:b5:f8:66:fd: a3:4d:15:a4:2f:3d:85:70:9e:e2:83:87:e1:02:e5:26:75:d5: e9:9b:17:b0:65:37:6a:14:84:a0:6a:68:fb:d0:b6:8d:fb:e6: 19:3e:c0:7b:c0:63:7d:1c:08:c6:f4:16:4e:0b:23:13:ff:0f: c0:c0:cf:f6:ad:80:f5:72:41:2d:23:30:c2:10:a8:d8:20:cb: 1a:f2:fc:26:4a:2f:0b:6f:06:78:97:61:2a:17:44:01:2a:27: 61:4c:87:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTK/LU1bu6csWD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MTRkMDI4NGQtZWNhZC00YTY0LTkzMjQtM2I4MGIxMzk4NmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH0RV/Ofp1S5z4pkwtXBZwLIxaja3LauqD00 IlPM6Zy8PbVgHSqWOw4VhIaCfBnDZc1miIpOMRkIuSBx5EP04k9TFovyxsEfVeH4 10yA1/wvKEsaNbCHWTkfAx+1HQjgKw8V7ADqvAAQVow2iIM1t0esTM2j4H0EnjYT CkNf4vSQJbDsa0SZo/hmOAHdAW4+E77tYdOtzDXvSgliPKH7An9QhGPkgUBYb0rC y9mxVLEtGEbVpdT3hJUb5NKaNyrNGrZpJ1uzFQVQH3Cq97Myyq/Gkxbf3tJ0mTi2 vjWD6D104BU1gTh83fH9BoVnicuRNSZSKbXuoYNVxiq8FGNPsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeULlWhiz63JHysZFjGyNHX/XvnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGVjNWE1ZWEtNThmOS0z NmM1LWExMGQtYTU1MmRiNGJhOGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0TJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWYwkIXSe83g5iutFAIGPtjscayvYXT/qEuQzjjX7nSCWjHww7RREPz +HcXv1y6tXPPMRkdBWUiZE7xymc39hboIYzDgPV/ou6+Vy5rGQV1HcCKn9XbRKnw f7Vp/v0xYCgu/URGsa00QFpSW7oJS2KDfyR/F70oiRwjnMdfVRtlISTYWqH6Ey7H yqeqKxfi/PEcp/WVpizqMmkC24/ttfhm/aNNFaQvPYVwnuKDh+EC5SZ11embF7Bl N2oUhKBqaPvQto375hk+wHvAY30cCMb0Fk4LIxP/D8DAz/atgPVyQS0jMMIQqNgg yxry/CZKLwtvBniXYSoXRAEqJ2FMh/0= -----END CERTIFICATE-----Generated at Fri Oct 10 22:03:28 2025 by rpki-client