$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8683cdc2-c9f4-3377-88c3-f6b9038ca1f9.roa File: 8683cdc2-c9f4-3377-88c3-f6b9038ca1f9.roa (raw, json) Hash identifier: ja39uNbzYVnbWJUQ5tGm40aUFnm+51/mMv6Q1e+xBQs= Subject key identifier: FD:28:41:20:13:8E:D5:0B:24:8F:B5:D5:B2:26:AC:24:49:54:E3:B2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D0845BF8F98B57A75820 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8683cdc2-c9f4-3377-88c3-f6b9038ca1f9.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 209.2.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d0:84:5b:f8:f9:8b:57:a7:58:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=ec52d1a1-2b8e-4602-8080-c3f1b8798d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:66:ab:73:f6:23:28:b5:1c:54:a4:fd:29:51: fb:a2:bb:f1:df:5d:0d:b6:c8:86:b3:09:48:d9:45: e9:04:2a:45:fa:3a:d1:3a:70:72:c7:a7:d8:a1:57: 5f:1b:88:af:e7:b6:66:5a:e3:06:c3:33:49:28:e0: 22:fb:c8:44:31:65:4e:c0:17:3c:7d:51:a1:af:a6: 03:79:b4:7c:fc:62:6f:97:19:c4:43:02:9f:40:48: d9:83:d9:f2:dd:7e:f4:60:5e:2a:d3:15:75:54:3a: 2d:d1:49:a2:ec:96:89:b7:4d:f1:9e:2f:16:9f:fc: b9:f0:fd:c5:84:b8:04:c7:5c:12:6d:62:23:23:16: 40:61:9a:1f:e7:8a:11:7c:04:97:c8:b0:73:67:12: 4a:42:dc:06:8d:a9:ab:f7:30:ba:41:7d:f0:41:45: 58:d5:01:f9:2c:bb:35:b4:2e:0f:e7:e8:6b:47:ee: a7:e4:3a:5e:80:3d:38:cb:35:c6:f1:7c:26:7b:18: 0c:4a:26:83:60:85:b9:44:e4:b0:4f:fa:19:3c:a0: 06:4e:f0:1f:18:50:23:ea:22:f9:b2:bb:fa:48:1c: 9c:e3:b0:5f:bc:47:61:43:b5:23:df:98:87:b7:88: 31:de:a6:fc:d5:79:9c:78:0d:7d:d8:12:fa:d3:51: a0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:28:41:20:13:8E:D5:0B:24:8F:B5:D5:B2:26:AC:24:49:54:E3:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8683cdc2-c9f4-3377-88c3-f6b9038ca1f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:e4:04:f9:95:06:af:cc:6b:b1:ca:be:04:14:d9:82:71:16: 6c:29:96:c2:cc:32:b8:44:83:95:ba:90:0d:a7:73:e6:40:34: e4:cc:cd:1c:7d:b2:45:e2:58:cc:20:11:56:06:03:30:24:8f: d8:f0:ac:58:10:a9:c2:b7:f8:f8:ce:9f:80:a2:bf:1d:5c:d1: 4e:67:7d:83:0c:35:62:00:4d:e3:d7:fb:ed:9c:05:fc:7f:bf: 91:e2:10:93:58:be:63:52:24:a8:31:fd:5a:c3:25:73:01:96: dd:3e:d1:12:f3:41:34:6c:c3:be:ef:84:09:a0:f4:c4:c0:21: d2:0d:76:fa:55:0d:72:68:ff:33:7e:0d:8c:3a:33:aa:24:fc: af:12:79:d3:a2:7b:c9:13:0d:01:d6:42:71:cc:4a:c8:38:27: 76:62:78:b8:8c:99:d2:e3:f4:bd:d1:ed:e6:4d:0c:85:16:04: e6:8e:d2:7a:d0:9e:09:91:85:0b:92:87:b2:36:6b:3a:e1:68: f2:44:f8:3e:4d:ab:5a:8e:ff:f5:3a:1e:ff:72:48:07:8a:a6: 3c:9a:f6:9f:3f:54:0b:b9:c7:0f:7e:2d:05:3a:18:dc:97:fb: 2e:6c:2c:e8:ec:b9:2c:52:64:c7:39:84:5b:6d:2b:5b:71:c1: f6:17:ba:78 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqQoNCEW/j5i1enWCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZWM1MmQxYTEtMmI4ZS00NjAyLTgwODAtYzNmMWI4Nzk4ZDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4marc/YjKLUcVKT9KVH7orvx310NtsiGswlI 2UXpBCpF+jrROnByx6fYoVdfG4iv57ZmWuMGwzNJKOAi+8hEMWVOwBc8fVGhr6YD ebR8/GJvlxnEQwKfQEjZg9ny3X70YF4q0xV1VDot0Umi7JaJt03xni8Wn/y58P3F hLgEx1wSbWIjIxZAYZof54oRfASXyLBzZxJKQtwGjamr9zC6QX3wQUVY1QH5LLs1 tC4P5+hrR+6n5DpegD04yzXG8XwmexgMSiaDYIW5ROSwT/oZPKAGTvAfGFAj6iL5 srv6SByc47BfvEdhQ7Uj35iHt4gx3qb81XmceA192BL601GgoQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFP0oQSATjtULJI+11bImrCRJVOOyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODY4M2NkYzItYzlmNC0z Mzc3LTg4YzMtZjZiOTAzOGNhMWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0QIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAHeQE+ZUGr8xrscq+BBTZgnEWbCmWwswyuESDlbqQDadz5kA05MzNHH2y ReJYzCARVgYDMCSP2PCsWBCpwrf4+M6fgKK/HVzRTmd9gww1YgBN49f77ZwF/H+/ keIQk1i+Y1IkqDH9WsMlcwGW3T7REvNBNGzDvu+ECaD0xMAh0g12+lUNcmj/M34N jDozqiT8rxJ506J7yRMNAdZCccxKyDgndmJ4uIyZ0uP0vdHt5k0MhRYE5o7SetCe CZGFC5KHsjZrOuFo8kT4Pk2rWo7/9Toe/3JIB4qmPJr2nz9UC7nHD34tBToY3Jf7 Lmws6Oy5LFJkxzmEW20rW3HB9he6eA== -----END CERTIFICATE-----Generated at Wed Aug 6 12:38:12 2025 by rpki-client