$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1054de7-fbbe-3f81-852e-f0bb13c2d9ce.roa File: a1054de7-fbbe-3f81-852e-f0bb13c2d9ce.roa (raw, json) Hash identifier: WVGVNUeorwG5lVLUwfj+3fUJEgwULyvbiX+4Ak0XEKg= Subject key identifier: FB:B2:C3:E7:F7:BB:D1:D9:D0:9B:44:B2:A9:5D:9D:81:ED:F1:EC:DD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D747D9BC14AFC8B247C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1054de7-fbbe-3f81-852e-f0bb13c2d9ce.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 12185 IP address blocks: 209.96.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d7:47:d9:bc:14:af:c8:b2:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=ed7408ef-0a3f-416a-b6af-90adb9d1c750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:39:91:e3:a5:ed:6b:eb:67:da:ea:1c:01:56: 0f:3d:45:a1:2a:ee:bb:94:2f:7f:2e:da:29:83:84: 1e:1d:77:f3:d1:ce:65:45:b7:f9:0b:d1:2c:61:27: df:7e:ba:a1:50:e7:54:8f:f4:f4:de:ac:74:a3:08: 92:01:ec:00:93:3b:58:ca:13:9c:3c:38:9a:f1:b1: b7:14:98:e4:56:fa:19:b8:cb:ec:87:6c:3e:a4:65: a4:ba:bc:f4:99:39:41:af:4b:d1:89:ef:f0:bb:28: 36:1f:0b:fe:9c:7d:e9:97:92:35:9c:58:1c:75:be: 06:89:8a:9f:d7:98:25:21:7d:ff:56:82:a2:8f:34: b9:38:1d:be:74:4a:63:53:23:cc:2b:d6:f2:6d:d9: 2d:ed:7b:49:b9:c1:b5:c4:91:69:b6:bb:f4:85:ea: 9a:62:91:32:83:b4:70:d8:95:eb:fd:31:11:e9:00: 62:fc:ad:fb:9b:95:40:a2:f7:af:67:f5:4d:db:28: f0:ac:ef:91:a5:86:0f:e8:40:0d:d9:66:08:c7:74: e2:b8:d3:dd:ba:92:f7:d4:e4:c8:59:15:d8:f1:41: d9:db:54:35:28:9b:59:99:cf:36:1f:01:06:62:62: 6f:46:8a:8b:4a:01:cb:27:58:25:20:98:ec:54:5c: 54:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B2:C3:E7:F7:BB:D1:D9:D0:9B:44:B2:A9:5D:9D:81:ED:F1:EC:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1054de7-fbbe-3f81-852e-f0bb13c2d9ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.96.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:88:79:00:13:54:df:2d:e7:6a:3f:b0:94:b6:95:79:b5:48: 21:1f:29:12:e7:db:55:9d:42:08:97:2b:b7:6a:91:31:9b:49: 8f:9a:64:95:25:9f:cf:89:39:59:67:c6:0e:6a:0a:ad:50:5d: e3:4c:62:3c:8a:56:ab:23:59:6b:c3:65:b0:83:93:80:f9:69: 04:a8:07:6b:64:11:01:c6:8c:8c:02:93:17:11:b5:32:78:97: 8b:de:b6:70:06:73:f5:c3:08:62:47:60:9b:33:7c:84:54:71: f1:e6:d9:90:6f:66:c5:c0:4b:95:4e:14:2b:c9:a2:21:2e:2d: 58:c7:40:e2:5b:99:78:a1:08:44:37:e2:3e:30:97:87:c4:27: 41:13:6c:25:d7:ba:73:3d:e9:a7:ab:db:cb:7e:8b:9a:e8:99: c8:8a:81:b0:9c:16:59:a9:74:20:2e:2c:31:d4:a4:34:b0:09: 68:64:c9:03:32:f8:a1:b5:11:b2:c5:ae:51:8a:df:1c:12:be: bc:c0:3e:7a:86:85:c5:22:54:d7:8f:c7:3f:f5:1d:38:c5:60: 64:87:a9:79:a2:23:ec:16:6f:b7:b6:b3:f4:df:50:8f:db:e2: 94:d8:8d:32:5c:aa:24:34:cd:b8:64:7b:79:7b:b3:39:c9:be: 6e:c1:e5:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNdH2bwUr8iyR8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZWQ3NDA4ZWYtMGEzZi00MTZhLWI2YWYtOTBhZGI5ZDFjNzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjmR46Xta+tn2uocAVYPPUWhKu67lC9/Ltop g4QeHXfz0c5lRbf5C9EsYSfffrqhUOdUj/T03qx0owiSAewAkztYyhOcPDia8bG3 FJjkVvoZuMvsh2w+pGWkurz0mTlBr0vRie/wuyg2Hwv+nH3pl5I1nFgcdb4GiYqf 15glIX3/VoKijzS5OB2+dEpjUyPMK9bybdkt7XtJucG1xJFptrv0heqaYpEyg7Rw 2JXr/TER6QBi/K37m5VAovevZ/VN2yjwrO+RpYYP6EAN2WYIx3TiuNPdupL31OTI WRXY8UHZ21Q1KJtZmc82HwEGYmJvRoqLSgHLJ1glIJjsVFxUGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuyw+f3u9HZ0JtEsqldnYHt8ezdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTEwNTRkZTctZmJiZS0z ZjgxLTg1MmUtZjBiYjEzYzJkOWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqIeQATVN8t52o/sJS2lXm1SCEfKRLn21WdQgiXK7dqkTGbSY+aZJUl n8+JOVlnxg5qCq1QXeNMYjyKVqsjWWvDZbCDk4D5aQSoB2tkEQHGjIwCkxcRtTJ4 l4vetnAGc/XDCGJHYJszfIRUcfHm2ZBvZsXAS5VOFCvJoiEuLVjHQOJbmXihCEQ3 4j4wl4fEJ0ETbCXXunM96aer28t+i5romciKgbCcFlmpdCAuLDHUpDSwCWhkyQMy +KG1EbLFrlGK3xwSvrzAPnqGhcUiVNePxz/1HTjFYGSHqXmiI+wWb7e2s/TfUI/b 4pTYjTJcqiQ0zbhke3l7sznJvm7B5U0= -----END CERTIFICATE-----Generated at Fri Aug 8 13:04:05 2025 by rpki-client