$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/767c3723-1f39-35ed-8250-517736456002.roa File: 767c3723-1f39-35ed-8250-517736456002.roa (raw, json) Hash identifier: znwJQk3dbU20YebpeftHJoyYnPm/2Loiq301d32S/PM= Subject key identifier: E5:28:3D:1E:ED:61:4C:FA:5E:F6:7C:2A:B2:2F:13:11:A4:A1:2E:EF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B8882215BE71DABE202DC4500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/767c3723-1f39-35ed-8250-517736456002.roa Signing time: Wed 15 Oct 2025 19:59:50 +0000 ROA not before: Wed 15 Oct 2025 19:59:50 +0000 ROA not after: Tue 13 Jan 2026 20:59:50 +0000 asID: 7029 IP address blocks: 209.2.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:88:82:21:5b:e7:1d:ab:e2:02:dc:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 15 19:59:50 2025 GMT Not After : Jan 13 20:59:50 2026 GMT Subject: CN=c0f23d3f-54dc-4ff9-8354-83c9bcc099b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f5:92:f0:69:9a:de:ef:c0:7c:85:9b:38:f5: f1:12:9b:48:c6:49:a2:c8:e4:49:b8:96:0c:cc:05: 9d:6f:8b:c7:b8:9e:d0:c7:e7:af:66:af:0a:21:b3: 02:1b:c5:c5:e7:73:ec:ca:bc:82:a3:73:af:75:de: 85:ca:d9:05:e3:eb:56:e9:9b:63:f2:b4:1f:58:24: de:ac:7b:33:08:19:9a:54:51:16:76:6f:31:3b:8b: 20:d9:03:64:e4:15:a2:96:d3:c6:dc:ff:f1:93:f9: 8f:1a:de:24:dd:2e:fd:be:f8:18:95:0a:67:b4:a2: 27:f4:57:89:a0:d1:1f:c6:b5:8b:44:2d:4e:78:c5: 09:fe:fd:d8:cc:0b:d3:9e:53:cd:92:5b:5b:56:39: 96:6b:ac:fb:77:67:43:38:3b:b7:4a:d2:13:41:16: 70:a9:ff:af:db:0d:0f:97:00:56:ff:d6:52:c3:e2: 06:8d:93:a7:1c:2f:6a:36:a5:d4:dd:69:20:df:73: de:9e:72:0e:0f:50:4f:40:90:0b:64:97:66:ac:30: b2:36:52:11:f3:b2:22:61:42:ce:26:70:a9:a0:07: 4f:ed:0a:62:0c:4f:de:ab:d7:e6:c6:18:be:90:b5: b9:80:b3:c2:64:da:d4:2f:36:f2:94:44:de:b7:35: 9b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:28:3D:1E:ED:61:4C:FA:5E:F6:7C:2A:B2:2F:13:11:A4:A1:2E:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/767c3723-1f39-35ed-8250-517736456002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:f0:b3:42:b6:46:cb:b9:5e:13:49:11:cb:92:92:de:6c:13: 2a:f9:5e:3b:55:c6:3b:4c:e7:ad:8e:b5:9c:55:1c:04:49:6f: 7e:87:d3:22:08:e1:e7:9b:0f:3b:8b:09:4d:7e:01:57:a3:6b: f6:29:a9:69:80:64:cc:8b:d8:5e:7e:c3:49:5d:d9:02:4d:6a: 4e:36:ef:af:20:9f:a2:d2:33:32:46:99:1a:e5:b9:d1:82:17: b4:90:9f:54:39:f5:12:83:91:e7:9e:78:22:bc:8a:2f:12:1c: 05:33:57:b8:44:aa:6a:d7:52:e6:1c:2c:b7:07:79:1c:af:ce: fd:30:8e:c6:ad:b5:ad:19:d0:01:a9:84:76:b9:10:01:fc:25: a1:6e:45:4c:49:5c:8f:25:de:55:14:e1:90:5a:ac:f1:8b:8a: e6:ea:e1:c7:f1:ea:28:05:f1:db:90:2c:02:88:16:35:67:2d: 50:09:ac:3c:91:51:2f:4d:15:f4:b1:db:07:d8:4e:5e:35:1d: 1e:09:6a:fb:c6:83:b5:0c:81:a4:bc:e2:a7:12:bf:48:13:da: 61:94:5a:24:6b:63:d3:ea:93:8d:52:dc:db:1b:09:ef:b8:b3: 12:52:99:7c:79:25:2e:10:4f:cf:59:51:1b:7a:a1:49:fa:27: cd:9d:86:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuIgiFb5x2r4gLcRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxNTE5NTk1MFoXDTI2MDExMzIwNTk1MFowLzEtMCsGA1UEAxMk YzBmMjNkM2YtNTRkYy00ZmY5LTgzNTQtODNjOWJjYzA5OWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/WS8Gma3u/AfIWbOPXxEptIxkmiyORJuJYM zAWdb4vHuJ7Qx+evZq8KIbMCG8XF53PsyryCo3Ovdd6FytkF4+tW6Ztj8rQfWCTe rHszCBmaVFEWdm8xO4sg2QNk5BWiltPG3P/xk/mPGt4k3S79vvgYlQpntKIn9FeJ oNEfxrWLRC1OeMUJ/v3YzAvTnlPNkltbVjmWa6z7d2dDODu3StITQRZwqf+v2w0P lwBW/9ZSw+IGjZOnHC9qNqXU3Wkg33PennIOD1BPQJALZJdmrDCyNlIR87IiYULO JnCpoAdP7QpiDE/eq9fmxhi+kLW5gLPCZNrULzbylETetzWbYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUoPR7tYUz6XvZ8KrIvExGkoS7vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzY3YzM3MjMtMWYzOS0z NWVkLTgyNTAtNTE3NzM2NDU2MDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0QKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7ws0K2Rsu5XhNJEcuSkt5sEyr5XjtVxjtM562OtZxVHARJb36H0yII 4eebDzuLCU1+AVeja/YpqWmAZMyL2F5+w0ld2QJNak42768gn6LSMzJGmRrludGC F7SQn1Q59RKDkeeeeCK8ii8SHAUzV7hEqmrXUuYcLLcHeRyvzv0wjsatta0Z0AGp hHa5EAH8JaFuRUxJXI8l3lUU4ZBarPGLiubq4cfx6igF8duQLAKIFjVnLVAJrDyR US9NFfSx2wfYTl41HR4JavvGg7UMgaS84qcSv0gT2mGUWiRrY9Pqk41S3NsbCe+4 sxJSmXx5JS4QT89ZURt6oUn6J82dhvc= -----END CERTIFICATE-----Generated at Tue Nov 4 17:01:24 2025 by rpki-client