$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17e310e4-dd84-33c1-8eef-18aa2ead7fe9.roa File: 17e310e4-dd84-33c1-8eef-18aa2ead7fe9.roa (raw, json) Hash identifier: nsf4+3BEFHIT/zfGIUusrfg/RpcsLrMjootmj0Yftws= Subject key identifier: 14:FD:EF:E3:6C:77:96:D1:BE:F5:12:B9:42:86:CC:6C:D7:F2:D3:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D14BDD859EEB620F78C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17e310e4-dd84-33c1-8eef-18aa2ead7fe9.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 209.165.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d1:4b:dd:85:9e:eb:62:0f:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=67bb8c57-cafc-4e5e-bbb3-261d7b237669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:de:1d:cf:74:e7:93:6f:9e:a9:58:2a:21:08: de:9f:d1:de:4f:6f:4c:0b:67:63:b9:da:c2:ea:4d: e0:01:07:13:a3:ea:ea:04:2c:a9:b6:f9:97:8b:ba: 9b:f0:e8:97:ce:ee:9d:6f:93:25:f0:ed:86:df:89: 98:f5:50:ef:6c:25:7d:9c:55:ad:ec:df:d8:99:54: 94:3f:05:71:b8:f5:3f:c5:ea:81:76:85:3a:41:14: 4b:b6:b1:f6:41:d7:5f:70:f9:c3:7e:b3:95:d0:41: b7:7b:bc:0b:8c:02:d3:13:f5:2e:ae:73:16:c5:51: d5:89:2d:f6:5c:33:de:d1:31:73:83:6a:a7:2b:6c: 18:1d:6d:34:8b:d9:f8:ae:8a:dc:3d:2a:2f:c5:f6: 9f:01:fe:3e:0d:17:45:6f:21:8a:fd:19:da:22:0a: 08:2e:5b:d5:3c:46:d8:6d:ca:a4:b4:20:55:0f:d9: 25:cc:28:e8:28:50:9e:e3:2c:38:0e:d9:3f:42:8d: 81:b2:f6:a7:6a:9c:83:0c:2e:5a:fc:a6:a7:5f:12: f9:f3:d0:16:a2:d4:82:51:b1:95:ef:c2:4a:5f:44: fb:dd:bc:72:e0:8b:4a:02:8a:be:1f:0b:0e:f0:0b: 8c:8a:f8:2f:7f:7c:d7:cf:eb:45:4c:d0:b0:c8:f6: 7e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FD:EF:E3:6C:77:96:D1:BE:F5:12:B9:42:86:CC:6C:D7:F2:D3:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17e310e4-dd84-33c1-8eef-18aa2ead7fe9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.165.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:25:d9:33:cb:47:43:d4:07:26:f0:6c:7f:f1:ce:82:08:42: b5:e9:d2:72:79:56:48:b1:73:37:0b:dd:f8:4d:32:c7:fa:ee: 54:08:78:0f:73:49:f7:d6:2b:b4:a4:04:f2:1d:34:43:e3:5f: e2:d8:c9:78:e1:9b:ff:51:41:ff:5e:37:89:68:dd:d6:7f:ca: 32:77:38:47:22:7d:4d:e3:52:6b:dc:cc:be:4a:38:47:1b:bb: 60:9e:af:69:08:5e:23:92:cd:c5:99:6e:c6:9f:75:94:04:16: 0e:6a:2d:76:47:a7:d4:8c:12:12:0b:98:ab:4d:a9:60:ce:34: 65:f6:db:7f:53:48:39:3c:a8:c3:8e:11:e2:dc:ae:78:b1:c4: 13:b2:d8:de:e5:1b:c4:37:28:8f:7d:ed:c0:0e:a2:90:c0:c5: 1d:2c:92:9e:40:73:74:e3:ce:73:53:12:00:4b:17:40:68:6b: 61:32:f5:8e:ba:00:5c:88:20:6c:c3:b3:00:5f:c7:b6:76:13: 47:86:56:22:bb:53:49:a1:60:b7:ea:a9:47:d0:63:5b:4d:46: 0c:b6:c7:b9:fd:8f:3f:cd:c6:94:a8:22:f6:c9:67:c0:65:06: 25:ef:eb:9b:1b:dc:be:1d:0a:14:3f:d8:0a:18:eb:d6:a2:17: f8:52:c1:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNFL3YWe62IPeMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NjdiYjhjNTctY2FmYy00ZTVlLWJiYjMtMjYxZDdiMjM3NjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN4dz3Tnk2+eqVgqIQjen9HeT29MC2djudrC 6k3gAQcTo+rqBCyptvmXi7qb8OiXzu6db5Ml8O2G34mY9VDvbCV9nFWt7N/YmVSU PwVxuPU/xeqBdoU6QRRLtrH2QddfcPnDfrOV0EG3e7wLjALTE/UurnMWxVHViS32 XDPe0TFzg2qnK2wYHW00i9n4rorcPSovxfafAf4+DRdFbyGK/RnaIgoILlvVPEbY bcqktCBVD9klzCjoKFCe4yw4Dtk/Qo2BsvanapyDDC5a/KanXxL589AWotSCUbGV 78JKX0T73bxy4ItKAoq+HwsO8AuMivgvf3zXz+tFTNCwyPZ+3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBT97+Nsd5bRvvUSuUKGzGzX8tNbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTdlMzEwZTQtZGQ4NC0z M2MxLThlZWYtMThhYTJlYWQ3ZmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aUDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQl2TPLR0PUBybwbH/xzoIIQrXp0nJ5VkixczcL3fhNMsf67lQIeA9z SffWK7SkBPIdNEPjX+LYyXjhm/9RQf9eN4lo3dZ/yjJ3OEcifU3jUmvczL5KOEcb u2Cer2kIXiOSzcWZbsafdZQEFg5qLXZHp9SMEhILmKtNqWDONGX2239TSDk8qMOO EeLcrnixxBOy2N7lG8Q3KI997cAOopDAxR0skp5Ac3TjznNTEgBLF0Boa2Ey9Y66 AFyIIGzDswBfx7Z2E0eGViK7U0mhYLfqqUfQY1tNRgy2x7n9jz/NxpSoIvbJZ8Bl BiXv65sb3L4dChQ/2AoY69aiF/hSwZ0= -----END CERTIFICATE-----Generated at Wed Aug 6 05:53:48 2025 by rpki-client