$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/493fa329-6d83-37c5-b215-c7f7e31fd60d.roa File: 493fa329-6d83-37c5-b215-c7f7e31fd60d.roa (raw, json) Hash identifier: CjHWkref/T49LY2Ypmzt9PGKEolJ4jXmAMJcJejePFI= Subject key identifier: 2D:05:B9:CF:42:0B:35:30:DC:07:60:D8:2C:12:29:3C:37:35:E2:92 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A10135744891407C83DA80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/493fa329-6d83-37c5-b215-c7f7e31fd60d.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 209.137.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:01:35:74:48:91:40:7c:83:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=431759e0-5a64-42d7-bb2b-eb8919a905a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:04:b3:14:43:83:61:fb:55:2b:30:25:5a:79: 30:b0:cf:15:98:8d:19:f6:e7:d3:ce:80:c9:b0:dc: e4:a1:c3:c7:46:d3:c4:8c:34:dc:e7:03:29:aa:53: ac:c6:59:ea:51:15:f0:50:ac:ad:ea:3e:71:d8:cf: e9:8d:44:0d:d9:a2:fc:90:40:c7:04:9c:c7:e7:15: aa:94:7a:74:b6:58:26:b3:50:d0:9d:52:be:b8:98: f0:50:a3:c8:46:4f:8e:25:1d:48:10:53:91:24:84: 4d:a8:da:e2:be:54:26:72:83:35:bf:e1:61:d4:29: 35:18:a8:b0:91:0b:0d:a2:b0:e8:b5:f8:21:1f:62: 3e:d9:c4:ff:ec:53:d3:59:67:2c:49:d4:00:ea:59: 82:99:0e:c1:36:2f:4c:62:1e:71:1e:fe:0f:62:b0: 9c:dc:f1:e5:5f:72:4a:85:84:c0:d4:cf:49:c3:45: d8:e9:5a:fe:20:01:b6:e4:c0:ae:fd:b7:e4:df:64: fb:9a:21:d7:18:78:88:d0:a4:7b:05:89:9f:e8:25: 8e:d8:59:04:d0:7c:11:ff:e8:c5:d9:d9:24:93:98: 27:f3:e7:e0:3c:4c:09:60:65:a5:72:e7:40:15:46: c4:27:35:b4:9f:b3:a9:77:eb:01:d4:a4:2a:92:dd: 80:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:05:B9:CF:42:0B:35:30:DC:07:60:D8:2C:12:29:3C:37:35:E2:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/493fa329-6d83-37c5-b215-c7f7e31fd60d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.137.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:9d:84:55:15:e8:e0:f9:be:69:01:ba:9e:49:1b:bd:6b:4a: 4e:43:62:1f:c6:c6:69:54:de:c6:98:5e:7e:d3:77:0c:6d:69: 92:06:b1:34:43:22:9b:7a:49:05:cc:4b:96:c0:73:04:75:ac: 6e:75:92:70:fc:02:73:0f:9f:b7:a0:8d:bd:97:80:2e:9b:07: 61:36:a1:20:52:ef:94:c9:56:b8:3b:ed:65:85:a2:94:4e:1f: ae:21:6c:77:29:4f:70:a0:96:59:66:57:4c:93:f4:5b:73:0b: c0:91:dd:79:d9:68:dd:bc:cc:1b:d9:a1:a7:1f:d6:8a:4a:20: 80:9e:48:15:6b:97:51:74:03:86:51:64:f7:d5:42:6f:d5:2d: ab:21:ad:a2:d7:a9:db:66:f1:27:cd:43:bf:49:47:8f:a8:d4: 28:7a:97:17:04:2c:8a:78:01:73:5f:b1:71:eb:cd:e9:20:fd: ef:8e:14:90:81:0c:7b:48:c2:29:c2:17:1b:37:0a:3c:f5:0e: d2:48:9a:f0:93:52:24:60:7b:b3:c4:b9:f0:8c:85:de:35:a0: e6:27:ed:80:e8:0d:37:77:a7:f3:a8:bd:b0:fa:bc:19:4f:1e: 72:7a:68:21:a5:8e:85:f1:43:f7:32:95:ea:f1:b7:ee:b5:bd: f8:a5:16:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoQE1dEiRQHyD2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NDMxNzU5ZTAtNWE2NC00MmQ3LWJiMmItZWI4OTE5YTkwNWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQSzFEODYftVKzAlWnkwsM8VmI0Z9ufTzoDJ sNzkocPHRtPEjDTc5wMpqlOsxlnqURXwUKyt6j5x2M/pjUQN2aL8kEDHBJzH5xWq lHp0tlgms1DQnVK+uJjwUKPIRk+OJR1IEFORJIRNqNrivlQmcoM1v+Fh1Ck1GKiw kQsNorDotfghH2I+2cT/7FPTWWcsSdQA6lmCmQ7BNi9MYh5xHv4PYrCc3PHlX3JK hYTA1M9Jw0XY6Vr+IAG25MCu/bfk32T7miHXGHiI0KR7BYmf6CWO2FkE0HwR/+jF 2dkkk5gn8+fgPEwJYGWlcudAFUbEJzW0n7Opd+sB1KQqkt2AAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0Fuc9CCzUw3Adg2CwSKTw3NeKSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDkzZmEzMjktNmQ4My0z N2M1LWIyMTUtYzdmN2UzMWZkNjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0YmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEydhFUV6OD5vmkBup5JG71rSk5DYh/GxmlU3saYXn7TdwxtaZIGsTRD Ipt6SQXMS5bAcwR1rG51knD8AnMPn7egjb2XgC6bB2E2oSBS75TJVrg77WWFopRO H64hbHcpT3CglllmV0yT9FtzC8CR3XnZaN28zBvZoacf1opKIICeSBVrl1F0A4ZR ZPfVQm/VLashraLXqdtm8SfNQ79JR4+o1Ch6lxcELIp4AXNfsXHrzekg/e+OFJCB DHtIwinCFxs3Cjz1DtJImvCTUiRge7PEufCMhd41oOYn7YDoDTd3p/OovbD6vBlP HnJ6aCGljoXxQ/cylerxt+61vfilFsU= -----END CERTIFICATE-----Generated at Wed Aug 6 10:10:04 2025 by rpki-client