$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ef003e6-a09a-3b97-9fb6-df545c48d97a.roa File: 9ef003e6-a09a-3b97-9fb6-df545c48d97a.roa (raw, json) Hash identifier: Q+MB/NxElMHv9ji4Cfq14g2glzz0+B2cj5NjHBmApXo= Subject key identifier: FE:C2:CE:24:80:E2:39:D9:5A:C8:44:35:10:AB:0C:E6:79:38:47:C5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0DB8B9DE43E74661439D0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ef003e6-a09a-3b97-9fb6-df545c48d97a.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 53271 IP address blocks: 209.192.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:db:8b:9d:e4:3e:74:66:14:39:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=2ae717ed-9d31-40ef-bb4f-876188916def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f8:a3:6a:a3:62:2e:ab:61:60:1b:2f:dd:9b: c6:a9:08:e6:53:8b:c8:e8:d0:94:47:85:87:63:84: dd:96:de:2b:cf:a2:26:6b:44:c6:7b:48:6f:44:93: db:6b:b5:bf:e4:5d:20:a4:e7:20:a9:9a:16:a0:50: a1:0d:91:f2:2a:65:7f:e5:03:85:35:ba:5d:64:27: 76:63:cc:a9:f9:63:92:8d:ad:af:7c:4a:c3:c1:4e: a3:73:13:cd:6c:ab:ff:9d:bc:83:7c:dd:24:6e:b0: c4:ab:aa:a2:61:1d:18:4e:82:94:ef:e0:d1:b1:b1: 74:0d:86:e3:31:1e:83:8b:ab:09:f1:aa:ec:0b:44: 3a:c2:69:73:09:33:f9:f5:6c:13:10:ba:62:56:1f: f0:da:84:57:c1:17:cf:51:98:99:89:97:1a:ef:12: 9a:63:a0:d8:20:0e:92:56:80:56:b8:ff:65:df:5b: f6:7a:bd:1c:a1:92:93:07:4d:94:e7:27:94:aa:c0: 77:85:64:0c:f0:ad:df:4c:c2:a1:1a:f7:5a:71:1e: 84:ba:f9:5f:39:ce:ca:5d:c9:a1:ef:3d:4f:28:32: 32:67:11:b1:14:9e:72:ee:ae:c8:4b:cc:18:e7:74: d8:1e:3d:dd:b0:30:fc:87:e1:c5:04:50:65:2a:2e: 31:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C2:CE:24:80:E2:39:D9:5A:C8:44:35:10:AB:0C:E6:79:38:47:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ef003e6-a09a-3b97-9fb6-df545c48d97a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:33:da:f0:0d:db:67:4d:c5:d2:4f:fb:c1:c1:50:d9:d0:9a: cb:50:7d:e5:e7:5b:95:24:50:0f:09:ea:5c:b7:f3:00:cf:2e: 55:93:e4:60:9a:c7:2b:3a:89:c1:cd:25:31:32:ef:45:90:62: d4:d3:99:ec:bd:12:74:1d:23:6c:92:54:83:2f:9f:05:61:7c: ea:b8:e1:22:7e:98:20:4b:78:c4:22:09:a0:8b:33:17:12:6b: 65:47:e0:dc:8e:64:0c:4c:01:e5:36:16:7b:df:5e:81:44:21: cb:6a:e6:c8:11:15:36:2b:6c:a6:42:25:00:fd:9e:7c:f9:65: c1:cd:f3:e1:b7:f5:76:46:3a:4e:47:a1:d1:cd:74:29:b4:75: 9d:a4:d4:93:f8:ae:ca:11:8a:e3:59:7a:8d:9d:d4:63:72:a7: cd:03:c4:10:2f:6f:7b:d4:42:f9:bf:75:f2:f0:ee:9d:28:b4: 3f:f2:f1:01:f4:03:41:63:0e:47:0e:e4:8b:94:a7:58:b5:8b: ad:48:d9:63:4f:33:71:1f:52:1d:45:d6:75:69:f9:3e:31:59: f4:73:6f:35:c8:5d:82:21:5d:30:71:95:46:3d:f4:33:6d:76: e7:2c:ee:76:28:9b:a4:a8:f3:d7:97:85:56:64:30:be:e4:ba: de:00:bd:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNuLneQ+dGYUOdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MmFlNzE3ZWQtOWQzMS00MGVmLWJiNGYtODc2MTg4OTE2ZGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/ijaqNiLqthYBsv3ZvGqQjmU4vI6NCUR4WH Y4Tdlt4rz6Ima0TGe0hvRJPba7W/5F0gpOcgqZoWoFChDZHyKmV/5QOFNbpdZCd2 Y8yp+WOSja2vfErDwU6jcxPNbKv/nbyDfN0kbrDEq6qiYR0YToKU7+DRsbF0DYbj MR6Di6sJ8arsC0Q6wmlzCTP59WwTELpiVh/w2oRXwRfPUZiZiZca7xKaY6DYIA6S VoBWuP9l31v2er0coZKTB02U5yeUqsB3hWQM8K3fTMKhGvdacR6EuvlfOc7KXcmh 7z1PKDIyZxGxFJ5y7q7IS8wY53TYHj3dsDD8h+HFBFBlKi4xlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7CziSA4jnZWshENRCrDOZ5OEfFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWVmMDAzZTYtYTA5YS0z Yjk3LTlmYjYtZGY1NDVjNDhkOTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cANMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYz2vAN22dNxdJP+8HBUNnQmstQfeXnW5UkUA8J6ly38wDPLlWT5GCa xys6icHNJTEy70WQYtTTmey9EnQdI2ySVIMvnwVhfOq44SJ+mCBLeMQiCaCLMxcS a2VH4NyOZAxMAeU2FnvfXoFEIctq5sgRFTYrbKZCJQD9nnz5ZcHN8+G39XZGOk5H odHNdCm0dZ2k1JP4rsoRiuNZeo2d1GNyp80DxBAvb3vUQvm/dfLw7p0otD/y8QH0 A0FjDkcO5IuUp1i1i61I2WNPM3EfUh1F1nVp+T4xWfRzbzXIXYIhXTBxlUY99DNt ducs7nYom6So89eXhVZkML7kut4AvRI= -----END CERTIFICATE-----Generated at Thu Aug 7 03:15:36 2025 by rpki-client