$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5dcb9aae-991a-368f-9926-ce846d46de90.roa File: 5dcb9aae-991a-368f-9926-ce846d46de90.roa (raw, json) Hash identifier: t+rvExQFbJECJtLOLfNkZvp8GCC5Yr2wHUBwS/40un8= Subject key identifier: 3F:8C:87:0C:C2:B5:9E:BD:A0:54:EA:84:04:58:E1:71:FC:BB:6F:79 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D92E1D0ECB450AE18380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5dcb9aae-991a-368f-9926-ce846d46de90.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 27338 IP address blocks: 209.192.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d9:2e:1d:0e:cb:45:0a:e1:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=26a62db7-f2ca-476d-ac77-40f3f7b3c85e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:44:60:34:2a:0c:e1:f7:99:97:00:88:af:79: c1:50:17:33:8c:f1:49:af:dc:f2:39:d0:db:f4:b5: d9:16:45:c4:a9:27:61:3a:24:02:51:b3:a6:da:af: 57:e2:1b:2d:92:bc:d8:52:19:b9:4a:de:1b:46:b6: 49:b8:44:81:2c:c3:d6:69:2d:e6:1f:c1:5c:72:f1: 88:73:e8:13:2d:70:15:b9:87:8e:13:19:74:5c:1d: 05:96:a6:b9:5c:4d:2e:51:c3:b4:06:46:c5:6f:0c: 0e:aa:29:55:c8:88:98:00:99:d7:7b:4d:47:ca:b7: 10:f1:88:30:c4:9b:c5:b1:b7:9b:58:b1:4c:c8:8f: b1:62:a5:6b:09:ae:9e:47:ed:86:6b:85:39:09:19: ad:e6:83:37:24:20:65:79:b9:13:27:cb:95:9e:8b: d3:72:e6:c9:53:05:3d:30:0c:79:1d:cd:06:61:d5: a6:bb:51:a7:89:83:7b:48:68:ac:f0:bb:96:3f:2c: f4:27:44:63:b1:d1:d2:79:8e:23:2c:9d:a5:cd:98: bc:c4:e0:00:3b:67:92:bd:4b:98:c1:1d:f2:33:ab: 40:88:82:0c:3e:d2:0f:06:98:da:0e:85:74:0f:32: 8f:43:14:98:86:d5:34:7e:aa:bd:fc:fb:96:d5:86: 69:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:8C:87:0C:C2:B5:9E:BD:A0:54:EA:84:04:58:E1:71:FC:BB:6F:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5dcb9aae-991a-368f-9926-ce846d46de90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:4c:ab:b0:6a:10:2f:84:76:a5:cc:a3:bd:c2:a0:39:ed:8a: ff:fe:2b:02:0e:c7:a7:00:15:e2:cd:6c:cb:08:af:ef:ff:2a: 04:33:4e:b6:4c:bf:c4:d3:bc:d9:3b:0f:e2:38:a8:0d:34:55: 8d:10:5d:a0:77:e8:58:77:39:21:1a:7b:58:ef:fb:66:90:d1: 87:16:fa:9c:1d:8b:89:cc:0a:50:d7:19:d3:8e:40:fb:55:6b: 50:fe:ed:71:4c:d1:16:da:7d:ae:80:bb:99:17:0d:0e:de:75: be:61:b1:a6:f1:61:0b:e6:d3:9f:3b:af:47:60:9f:41:2a:1d: 59:fa:9b:87:6c:d5:16:89:73:62:ca:f9:f2:a4:bb:48:da:12: 98:33:32:01:80:50:30:33:bb:a5:20:8e:32:0a:f8:b1:ec:51: 0d:6a:b5:95:4d:a7:29:3c:1d:55:27:29:cd:b3:ac:89:70:66: 39:8a:57:5e:47:65:8a:da:b5:4f:38:91:83:94:06:c3:cd:de: 35:80:4c:d7:56:0d:78:eb:7a:33:41:cb:14:9c:b8:41:3d:8f: 32:17:dc:05:66:54:fc:b0:f9:be:ed:ad:f6:07:7e:c2:28:1b: 93:cd:4c:e1:a3:ef:63:aa:09:d6:8b:9a:56:24:56:84:c9:24: 26:cc:35:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNkuHQ7LRQrhg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MjZhNjJkYjctZjJjYS00NzZkLWFjNzctNDBmM2Y3YjNjODVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxERgNCoM4feZlwCIr3nBUBczjPFJr9zyOdDb 9LXZFkXEqSdhOiQCUbOm2q9X4hstkrzYUhm5St4bRrZJuESBLMPWaS3mH8FccvGI c+gTLXAVuYeOExl0XB0Flqa5XE0uUcO0BkbFbwwOqilVyIiYAJnXe01HyrcQ8Ygw xJvFsbebWLFMyI+xYqVrCa6eR+2Ga4U5CRmt5oM3JCBlebkTJ8uVnovTcubJUwU9 MAx5Hc0GYdWmu1GniYN7SGis8LuWPyz0J0RjsdHSeY4jLJ2lzZi8xOAAO2eSvUuY wR3yM6tAiIIMPtIPBpjaDoV0DzKPQxSYhtU0fqq9/PuW1YZprwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+MhwzCtZ69oFTqhARY4XH8u295MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWRjYjlhYWUtOTkxYS0z NjhmLTk5MjYtY2U4NDZkNDZkZTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cBOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBMq7BqEC+EdqXMo73CoDntiv/+KwIOx6cAFeLNbMsIr+//KgQzTrZM v8TTvNk7D+I4qA00VY0QXaB36Fh3OSEae1jv+2aQ0YcW+pwdi4nMClDXGdOOQPtV a1D+7XFM0Rbafa6Au5kXDQ7edb5hsabxYQvm0587r0dgn0EqHVn6m4ds1RaJc2LK +fKku0jaEpgzMgGAUDAzu6UgjjIK+LHsUQ1qtZVNpyk8HVUnKc2zrIlwZjmKV15H ZYratU84kYOUBsPN3jWATNdWDXjrejNByxScuEE9jzIX3AVmVPyw+b7trfYHfsIo G5PNTOGj72OqCdaLmlYkVoTJJCbMNRM= -----END CERTIFICATE-----Generated at Fri Aug 8 00:11:04 2025 by rpki-client