$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1550d1f-e3fe-3776-a892-790b38196ecf.roa File: a1550d1f-e3fe-3776-a892-790b38196ecf.roa (raw, json) Hash identifier: g9p+PKp9T7noht2Mg9nt6fHbxm98Ygdb5cYeEIZ+RXQ= Subject key identifier: 78:CF:25:CB:91:2D:97:1E:24:BA:9F:60:C5:BB:EF:19:1E:61:7D:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A1009615BDE40D23E5FE00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1550d1f-e3fe-3776-a892-790b38196ecf.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 209.60.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:00:96:15:bd:e4:0d:23:e5:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=f2c62cb2-a50b-418a-a499-d9d71587f549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:57:be:4c:35:56:88:b3:a1:96:38:80:a6:7f: 84:82:ee:e6:49:bd:18:69:ec:9d:c6:02:cc:f5:62: 79:c5:bf:d5:c8:c3:20:e9:6d:e5:3a:d4:1b:0f:bb: d3:1b:0d:cd:04:3f:b7:c2:df:be:a0:8d:0f:2a:2b: 8d:d6:d0:c3:cb:9b:e9:61:55:00:64:9a:b6:70:3f: b8:09:81:8f:2f:e7:ad:d4:c9:93:43:08:de:b6:72: c4:8c:35:8c:36:f6:ec:24:04:a3:71:c6:81:1d:cd: 04:ed:d6:8f:dc:79:b0:0d:c0:98:18:df:dc:bd:fc: 4a:88:be:00:db:e1:43:fb:f4:d6:ad:d9:ee:a2:9b: dd:e9:fe:41:f6:1b:55:0e:b4:16:70:70:8e:ff:a3: 38:29:71:a5:0d:6a:d6:3e:67:bf:39:e7:c7:94:11: 3f:a8:f1:4a:03:12:ce:81:f3:09:9f:18:14:74:55: 70:d3:18:bd:06:58:88:2b:49:44:05:7f:bf:73:0c: f7:9c:19:98:af:13:60:c1:aa:01:46:25:42:5b:28: 0e:8a:8b:c0:10:e5:d6:d2:61:31:25:32:cb:fd:dc: 37:38:28:05:82:d3:bc:a0:49:3a:4c:df:2a:01:7a: dc:ca:67:ce:ea:5d:b7:bd:f3:cd:28:1a:b3:fd:65: 6c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:CF:25:CB:91:2D:97:1E:24:BA:9F:60:C5:BB:EF:19:1E:61:7D:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1550d1f-e3fe-3776-a892-790b38196ecf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.60.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:0b:5e:ac:9b:d6:5e:ee:20:36:ae:a7:43:24:6f:f8:53:d4: ac:d1:b7:21:64:ef:ca:2f:fe:de:0c:a1:e0:f1:cd:53:b4:46: 3b:13:06:8a:e0:07:60:3f:0f:82:ac:f0:9e:d5:9d:14:ad:1f: ec:c3:cd:a9:58:8c:a0:b5:6a:3a:72:9c:2d:48:50:ac:fd:74: 77:68:f8:91:19:19:05:86:2b:19:25:d7:1b:ae:8a:5e:93:ab: 01:4d:59:7a:81:af:60:8d:3b:5b:be:21:88:05:7a:60:72:26: 9b:0b:9a:65:9a:a5:4b:4d:21:96:ce:42:b3:21:c5:6d:f8:41: 85:05:4d:bc:7e:b9:4a:b8:49:dd:ed:c8:93:8e:a1:39:e5:8d: 16:ed:81:72:ff:f9:27:6f:47:60:a7:62:6a:3a:b9:71:c9:bb: 63:d7:49:23:aa:6a:25:6c:fa:a7:e3:6c:90:48:d9:4a:f8:26: 69:3a:74:24:13:4e:57:b5:de:67:62:d0:c5:ba:dd:90:c7:18: de:46:59:25:b4:c6:5e:2b:1a:63:ba:f6:a8:eb:60:0a:3e:c8: f3:50:09:c7:1b:fa:ff:38:f2:2b:81:4f:2a:64:7f:69:b7:98: e6:c1:76:7e:b3:0a:f4:6b:34:67:57:86:e9:72:30:77:e8:02: a5:9a:25:e3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqQoQCWFb3kDSPl/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZjJjNjJjYjItYTUwYi00MThhLWE0OTktZDlkNzE1ODdmNTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFe+TDVWiLOhljiApn+Egu7mSb0YaeydxgLM 9WJ5xb/VyMMg6W3lOtQbD7vTGw3NBD+3wt++oI0PKiuN1tDDy5vpYVUAZJq2cD+4 CYGPL+et1MmTQwjetnLEjDWMNvbsJASjccaBHc0E7daP3HmwDcCYGN/cvfxKiL4A 2+FD+/TWrdnuopvd6f5B9htVDrQWcHCO/6M4KXGlDWrWPme/OefHlBE/qPFKAxLO gfMJnxgUdFVw0xi9BliIK0lEBX+/cwz3nBmYrxNgwaoBRiVCWygOiovAEOXW0mEx JTLL/dw3OCgFgtO8oEk6TN8qAXrcymfO6l23vfPNKBqz/WVs/QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHjPJcuRLZceJLqfYMW77xkeYX1bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTE1NTBkMWYtZTNmZS0z Nzc2LWE4OTItNzkwYjM4MTk2ZWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0TwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAggterJvWXu4gNq6nQyRv+FPUrNG3IWTvyi/+3gyh4PHNU7RGOxMGiuAH YD8PgqzwntWdFK0f7MPNqViMoLVqOnKcLUhQrP10d2j4kRkZBYYrGSXXG66KXpOr AU1ZeoGvYI07W74hiAV6YHImmwuaZZqlS00hls5CsyHFbfhBhQVNvH65SrhJ3e3I k46hOeWNFu2Bcv/5J29HYKdiajq5ccm7Y9dJI6pqJWz6p+NskEjZSvgmaTp0JBNO V7XeZ2LQxbrdkMcY3kZZJbTGXisaY7r2qOtgCj7I81AJxxv6/zjyK4FPKmR/abeY 5sF2frMK9Gs0Z1eG6XIwd+gCpZol4w== -----END CERTIFICATE-----Generated at Wed Aug 6 00:57:03 2025 by rpki-client