$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7272b0b2-5be3-3198-9d07-122f9ce9ae8b.roa File: 7272b0b2-5be3-3198-9d07-122f9ce9ae8b.roa (raw, json) Hash identifier: LOQMMwnQHsdVOlHxZ0wiFcUsNOB1DuZN1kVkYWLWtbo= Subject key identifier: 03:9E:40:A6:3B:5A:FC:F9:94:92:4E:C8:9F:C5:BC:71:79:42:3F:A9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A100C7ECADFE8BFC440C20 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7272b0b2-5be3-3198-9d07-122f9ce9ae8b.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 209.83.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:00:c7:ec:ad:fe:8b:fc:44:0c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=36195d2e-073b-46d1-add4-bf568b48fc7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5e:e1:71:9a:da:23:d3:93:c3:32:8f:e2:8d: c7:1f:aa:8a:55:b7:a1:39:23:da:b1:a3:4f:c6:31: 1d:40:25:bb:92:17:7a:07:da:d4:1a:13:35:38:be: 5f:76:30:c9:bf:fe:98:e5:13:c6:4a:20:d2:ad:a0: f0:10:e3:5b:88:eb:25:1b:11:14:29:e1:21:18:3e: 70:63:4f:c8:da:77:d3:b7:e7:73:50:8c:04:9f:d6: 3e:83:a5:61:94:36:ec:37:1f:34:3d:ed:bb:51:0e: 77:7a:63:d8:dc:2e:2e:8a:ae:83:5e:b0:96:cc:63: f6:8e:8e:df:c6:98:61:f5:eb:7d:6f:e5:56:0d:e4: db:c0:67:af:f7:7f:d3:0e:3e:04:30:45:62:a2:ec: b8:74:a2:19:61:df:34:4d:e7:04:3d:ee:c0:90:2d: 9b:85:f1:eb:a4:03:5d:f1:ca:a6:31:f3:c8:3d:70: 5f:45:42:57:0a:5d:60:d0:97:3a:fd:c6:4a:03:47: f1:ee:1e:a0:51:3d:8b:a5:78:e4:47:2b:03:f4:f7: 03:b2:1c:cb:ac:b6:fe:3c:da:a7:21:47:6e:d4:b1: ab:65:26:c1:b9:9e:be:f8:f8:9a:e6:cd:7e:56:b3: ca:f3:36:b2:3b:eb:84:59:25:74:a4:ea:60:49:b2: 1c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9E:40:A6:3B:5A:FC:F9:94:92:4E:C8:9F:C5:BC:71:79:42:3F:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7272b0b2-5be3-3198-9d07-122f9ce9ae8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.83.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:6d:0d:8c:cd:12:c6:d0:1f:ad:55:51:05:dd:a0:2f:eb:7d: 01:c4:ad:66:40:35:3b:fc:bb:2a:be:be:d3:b5:09:6a:1e:e3: c9:3c:e7:13:18:81:e6:4b:1e:3b:54:04:ae:61:03:51:fa:da: 13:9c:88:25:dc:d3:d4:d9:45:2b:d2:33:c5:f0:9d:77:ad:f4: 16:26:b4:c6:d4:33:d1:55:74:6c:a6:bc:41:58:7b:d1:c7:7e: cc:d6:bf:0c:0b:f6:95:ed:f7:b2:b9:de:54:8e:e2:4c:6c:5c: 19:7b:d0:0e:9a:48:ac:26:43:f0:26:70:e0:63:1e:8b:02:3f: 70:6f:d6:b8:fa:05:00:93:3c:ba:27:4d:1c:b5:2e:bb:e9:47: a8:fa:d8:d6:df:4d:3d:3b:e5:e3:b9:8c:57:43:a7:74:97:de: 76:15:43:e0:8c:58:73:06:8b:37:3c:8c:88:10:62:b1:ea:df: 69:6a:fb:52:5c:c0:a8:2f:24:50:93:ab:36:a3:05:7d:e4:24: a2:a2:a6:f1:67:d2:fa:87:f0:b6:b8:f2:92:31:7a:44:a7:20: 99:9a:7b:b9:9a:ff:e5:f1:0c:1c:b7:c6:49:77:c2:e5:cd:a8: 22:9e:84:03:89:c4:80:35:c4:07:75:6a:ed:c2:a5:00:41:28: e0:d4:35:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoQDH7K3+i/xEDCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MzYxOTVkMmUtMDczYi00NmQxLWFkZDQtYmY1NjhiNDhmYzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF7hcZraI9OTwzKP4o3HH6qKVbehOSPasaNP xjEdQCW7khd6B9rUGhM1OL5fdjDJv/6Y5RPGSiDSraDwEONbiOslGxEUKeEhGD5w Y0/I2nfTt+dzUIwEn9Y+g6VhlDbsNx80Pe27UQ53emPY3C4uiq6DXrCWzGP2jo7f xphh9et9b+VWDeTbwGev93/TDj4EMEViouy4dKIZYd80TecEPe7AkC2bhfHrpANd 8cqmMfPIPXBfRUJXCl1g0Jc6/cZKA0fx7h6gUT2LpXjkRysD9PcDshzLrLb+PNqn IUdu1LGrZSbBuZ6++Pia5s1+VrPK8zayO+uEWSV0pOpgSbIc6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOeQKY7Wvz5lJJOyJ/FvHF5Qj+pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzI3MmIwYjItNWJlMy0z MTk4LTlkMDctMTIyZjljZTlhZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0VMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJtDYzNEsbQH61VUQXdoC/rfQHErWZANTv8uyq+vtO1CWoe48k85xMY geZLHjtUBK5hA1H62hOciCXc09TZRSvSM8XwnXet9BYmtMbUM9FVdGymvEFYe9HH fszWvwwL9pXt97K53lSO4kxsXBl70A6aSKwmQ/AmcOBjHosCP3Bv1rj6BQCTPLon TRy1LrvpR6j62NbfTT075eO5jFdDp3SX3nYVQ+CMWHMGizc8jIgQYrHq32lq+1Jc wKgvJFCTqzajBX3kJKKipvFn0vqH8La48pIxekSnIJmae7ma/+XxDBy3xkl3wuXN qCKehAOJxIA1xAd1au3CpQBBKODUNRY= -----END CERTIFICATE-----Generated at Wed Aug 6 12:41:41 2025 by rpki-client