$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afc215d6-7c7c-393d-93eb-45b64ff471bb.roa File: afc215d6-7c7c-393d-93eb-45b64ff471bb.roa (raw, json) Hash identifier: 6QtGRi8K6p62MoMPORi4I7lBdR+nZzp+Gt2GsMqRaXc= Subject key identifier: B3:9A:2E:44:20:F6:27:7E:5D:AB:1F:D1:F8:8D:B4:AB:BC:E9:AC:4F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AF7EBE79622756AA7ECA43380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afc215d6-7c7c-393d-93eb-45b64ff471bb.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 0 IP address blocks: 209.177.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:e7:96:22:75:6a:a7:ec:a4:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=6b74bc3c-7993-4fe5-917c-a102dfbff63e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fd:e4:4b:80:1f:b0:6a:d1:d6:cd:82:b6:7b: c5:6e:53:a6:8c:89:d4:35:45:f2:0c:8c:a6:da:ec: de:2a:76:39:58:74:fa:23:80:aa:c7:55:ec:02:50: 34:f2:3f:0f:14:91:b9:18:35:77:18:13:e7:a0:e2: 4e:4c:80:ce:63:c6:99:c8:99:cc:c6:80:28:13:3d: 77:fe:7e:2e:bb:89:26:1e:07:b4:58:9d:2c:9a:61: 64:47:6c:49:3a:be:be:d7:cd:30:da:f1:ce:46:1a: 5d:3d:a8:d6:dc:8e:3a:da:b4:a1:3e:b0:02:0c:ff: e2:a6:b1:0e:ba:68:50:ef:5f:fa:ff:a0:b4:24:20: e8:6b:cd:0e:28:a0:77:59:63:b3:e3:b0:d2:0b:f9: cd:1b:b3:ba:83:ad:f8:cc:65:0d:5e:e2:91:83:ec: f2:3c:2c:4c:e8:04:d8:65:0d:f3:52:51:01:eb:90: 52:45:78:e1:20:6f:a3:ff:82:90:51:de:e0:85:e8: 51:fa:9d:ca:5e:c6:ce:34:84:2a:80:98:44:44:8e: be:ca:67:3c:b2:54:68:ff:95:3d:19:dc:3b:94:08: 02:26:0f:d0:2f:13:94:9f:8e:2c:27:25:34:d4:ca: e2:87:60:00:53:36:50:16:67:fa:f3:65:dd:57:39: f9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9A:2E:44:20:F6:27:7E:5D:AB:1F:D1:F8:8D:B4:AB:BC:E9:AC:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afc215d6-7c7c-393d-93eb-45b64ff471bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.177.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:46:55:f0:9a:0e:8e:a0:b1:c3:ad:06:38:ab:1e:80:54:2e: 37:bd:b3:32:37:39:1e:cc:b8:4c:95:f7:7f:74:f0:3e:6b:7d: 39:66:3e:aa:89:1d:5f:3e:b5:9e:f6:ee:2c:dc:3d:cf:68:1a: 20:7c:50:88:cc:10:df:01:f7:5f:3f:b3:50:ab:03:ab:d6:81: e1:73:86:3d:32:75:f2:0f:3b:82:07:b3:34:09:a7:58:2d:e9: b2:c9:ad:37:19:10:44:3f:4d:8a:4a:92:f0:9d:d6:b6:61:11: aa:bc:a2:77:47:36:7e:23:f3:c2:2b:c7:49:15:8e:b8:3b:b7: 57:d4:8a:39:2f:2c:1f:85:a2:fe:b2:94:8e:18:51:22:26:74: 00:d6:60:ff:fb:d1:b3:f2:80:04:fe:2b:47:fc:28:7d:95:53: 5d:ac:5d:0f:c3:ae:f3:ab:0e:45:18:9f:93:d6:87:88:84:a2: 94:8e:71:41:d1:17:24:14:ff:62:39:02:01:bc:d4:cd:4e:82: 95:4e:40:4d:11:98:ee:ff:1c:c4:cf:99:c5:67:e3:9f:ea:a3: e9:e8:38:c8:b8:bb:c8:44:0a:0c:b5:0f:ef:16:0e:75:e1:22: 09:67:f1:96:27:9c:95:b6:88:f1:71:42:fa:8c:29:12:e0:da: 35:6a:41:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr36+eWInVqp+ykM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk NmI3NGJjM2MtNzk5My00ZmU1LTkxN2MtYTEwMmRmYmZmNjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP3kS4AfsGrR1s2CtnvFblOmjInUNUXyDIym 2uzeKnY5WHT6I4Cqx1XsAlA08j8PFJG5GDV3GBPnoOJOTIDOY8aZyJnMxoAoEz13 /n4uu4kmHge0WJ0smmFkR2xJOr6+180w2vHORhpdPajW3I462rShPrACDP/iprEO umhQ71/6/6C0JCDoa80OKKB3WWOz47DSC/nNG7O6g634zGUNXuKRg+zyPCxM6ATY ZQ3zUlEB65BSRXjhIG+j/4KQUd7ghehR+p3KXsbONIQqgJhERI6+ymc8slRo/5U9 Gdw7lAgCJg/QLxOUn44sJyU01Mrih2AAUzZQFmf682XdVzn5kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOaLkQg9id+Xasf0fiNtKu86axPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWZjMjE1ZDYtN2M3Yy0z OTNkLTkzZWItNDViNjRmZjQ3MWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0bHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBGVfCaDo6gscOtBjirHoBULje9szI3OR7MuEyV93908D5rfTlmPqqJ HV8+tZ727izcPc9oGiB8UIjMEN8B918/s1CrA6vWgeFzhj0ydfIPO4IHszQJp1gt 6bLJrTcZEEQ/TYpKkvCd1rZhEaq8ondHNn4j88Irx0kVjrg7t1fUijkvLB+Fov6y lI4YUSImdADWYP/70bPygAT+K0f8KH2VU12sXQ/DrvOrDkUYn5PWh4iEopSOcUHR FyQU/2I5AgG81M1OgpVOQE0RmO7/HMTPmcVn45/qo+noOMi4u8hECgy1D+8WDnXh Igln8ZYnnJW2iPFxQvqMKRLg2jVqQaw= -----END CERTIFICATE-----Generated at Tue Aug 26 01:31:46 2025 by rpki-client