$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3728dd8b-d521-3477-ac4a-cc20387dfecb.roa File: 3728dd8b-d521-3477-ac4a-cc20387dfecb.roa (raw, json) Hash identifier: VKABiA5G3z6j3UJBJSKqzjvV9negA8F306VeiDiSBKo= Subject key identifier: AA:BB:AA:FD:4D:37:11:3C:C8:6E:3A:CD:42:88:4C:F5:CC:90:69:C2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A63371CBB9EC67BF9A7BD5900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3728dd8b-d521-3477-ac4a-cc20387dfecb.roa Signing time: Wed 02 Jul 2025 18:36:50 +0000 ROA not before: Wed 02 Jul 2025 18:36:50 +0000 ROA not after: Tue 30 Sep 2025 18:36:50 +0000 asID: 0 IP address blocks: 209.16.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:63:37:1c:bb:9e:c6:7b:f9:a7:bd:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 2 18:36:50 2025 GMT Not After : Sep 30 18:36:50 2025 GMT Subject: CN=2f8c47c2-748e-407c-9dfc-30f5439ff600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:08:22:6c:12:84:95:bf:4e:f4:65:32:e1:4c: d9:c8:af:3e:c9:77:e7:62:d5:f0:40:09:67:a9:d8: d3:30:5e:20:35:0c:f9:2d:0f:95:8a:bb:ab:85:14: d7:5a:c7:06:85:ed:2f:a1:8a:8d:87:ee:da:db:dd: cc:28:30:02:68:38:01:c9:fd:36:dd:96:4f:66:ce: 5a:4c:d3:ec:7a:ba:11:f7:78:1f:b0:94:13:5c:bd: 21:b4:1a:e4:d4:26:29:17:db:3c:a6:6b:76:fe:2a: 8c:ef:13:08:a3:1a:f6:3c:c5:be:6b:81:c7:37:23: 86:bf:84:b7:0d:c2:96:85:60:f9:cd:ae:2c:d3:77: c1:3e:6d:cf:9c:70:c2:15:85:a6:32:f4:bd:33:16: b6:85:26:57:72:d8:72:71:06:f9:e4:34:bc:22:d6: 44:27:f4:33:35:45:ad:fb:1b:b6:7c:3b:2a:64:91: 89:2e:6e:a2:51:94:85:c1:3a:77:ac:0d:38:ad:13: 8b:b4:84:f9:c8:33:31:ac:48:a3:cc:17:22:56:78: 36:37:31:f9:e1:90:4e:45:4b:7c:39:9c:0c:77:75: c5:d7:4f:1b:ce:e3:8a:04:17:a3:dc:8a:44:ec:49: e8:08:4f:61:08:8f:1a:aa:6e:85:3f:ad:0a:60:9b: e5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BB:AA:FD:4D:37:11:3C:C8:6E:3A:CD:42:88:4C:F5:CC:90:69:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3728dd8b-d521-3477-ac4a-cc20387dfecb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.16.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:70:46:9b:7e:cf:15:01:a0:9b:d8:d3:0f:6c:2c:9b:b1:19: 54:75:e7:00:ad:2b:32:39:db:aa:a2:02:48:41:98:fb:8c:16: f4:33:12:af:ff:95:8e:e0:04:67:ca:3b:c4:ff:a0:9a:e5:e8: 12:fa:64:20:8e:1d:21:0a:10:42:2d:f1:63:e0:02:bd:ae:91: 01:3d:05:13:47:f2:ea:ed:99:e4:cf:2e:4c:5f:c2:b5:98:21: 99:08:e6:75:21:27:45:c4:99:03:ad:16:88:a8:2c:4a:02:24: 77:ae:dc:2a:f0:2a:9b:b4:d5:08:d9:d4:93:96:e9:a6:9a:51: 09:34:1a:e9:fe:81:af:8d:ee:f3:eb:2b:6b:2b:0c:98:79:3d: ba:76:dd:27:09:58:0e:2d:cc:3a:20:71:f7:07:8c:78:1d:c5: 2d:20:a0:13:17:1d:26:eb:3c:54:22:21:b6:f8:57:69:4e:e6: 52:cc:51:f8:38:e7:b9:dc:9b:01:0c:a1:ff:17:41:c2:a8:ed: e5:40:9d:e6:7c:b5:61:de:2a:db:0a:24:05:6a:ed:ba:ce:b3: 71:8e:46:65:0b:4b:eb:df:34:eb:9f:6c:ae:a7:70:63:ba:08: c9:4a:0e:f5:ed:ff:18:94:de:d6:6e:39:51:c9:e4:bc:d8:c5: 03:03:9e:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpjNxy7nsZ7+ae9WQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMjE4MzY1MFoXDTI1MDkzMDE4MzY1MFowLzEtMCsGA1UEAxMk MmY4YzQ3YzItNzQ4ZS00MDdjLTlkZmMtMzBmNTQzOWZmNjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQgibBKElb9O9GUy4UzZyK8+yXfnYtXwQAln qdjTMF4gNQz5LQ+VirurhRTXWscGhe0voYqNh+7a293MKDACaDgByf023ZZPZs5a TNPseroR93gfsJQTXL0htBrk1CYpF9s8pmt2/iqM7xMIoxr2PMW+a4HHNyOGv4S3 DcKWhWD5za4s03fBPm3PnHDCFYWmMvS9Mxa2hSZXcthycQb55DS8ItZEJ/QzNUWt +xu2fDsqZJGJLm6iUZSFwTp3rA04rROLtIT5yDMxrEijzBciVng2NzH54ZBORUt8 OZwMd3XF108bzuOKBBej3IpE7EnoCE9hCI8aqm6FP60KYJvluQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKq7qv1NNxE8yG46zUKITPXMkGnCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzcyOGRkOGItZDUyMS0z NDc3LWFjNGEtY2MyMDM4N2RmZWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0RDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtwRpt+zxUBoJvY0w9sLJuxGVR15wCtKzI526qiAkhBmPuMFvQzEq// lY7gBGfKO8T/oJrl6BL6ZCCOHSEKEEIt8WPgAr2ukQE9BRNH8urtmeTPLkxfwrWY IZkI5nUhJ0XEmQOtFoioLEoCJHeu3CrwKpu01QjZ1JOW6aaaUQk0Gun+ga+N7vPr K2srDJh5Pbp23ScJWA4tzDogcfcHjHgdxS0goBMXHSbrPFQiIbb4V2lO5lLMUfg4 57ncmwEMof8XQcKo7eVAneZ8tWHeKtsKJAVq7brOs3GORmULS+vfNOufbK6ncGO6 CMlKDvXt/xiU3tZuOVHJ5LzYxQMDng8= -----END CERTIFICATE-----Generated at Wed Jul 9 13:30:30 2025 by rpki-client