$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a51ada71-9eee-3f42-a21d-fceb50af00ed.roa File: a51ada71-9eee-3f42-a21d-fceb50af00ed.roa (raw, json) Hash identifier: h5VbeKtpz6jY3zoUdq2yQwza4ZDdZwTQm6pFFVd/BxY= Subject key identifier: 62:D2:CE:0D:F5:1F:B5:D9:6A:1D:60:A8:BE:FA:54:0B:86:29:4A:85 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A1015D047541035E06E080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a51ada71-9eee-3f42-a21d-fceb50af00ed.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 209.218.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:01:5d:04:75:41:03:5e:06:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=1b26d62f-9818-4caf-a5a4-1f82602b7ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f8:33:db:83:a5:3d:e7:63:1a:16:fe:07:5e: 13:94:da:6b:ef:6c:43:3e:9c:36:e4:b0:6a:0d:e4: 58:cd:fb:42:e1:69:92:e4:65:6f:64:8a:9e:8f:eb: 63:dc:ef:bd:67:a9:1f:98:74:e7:e0:24:36:25:2b: 6c:21:cc:de:5e:c0:6f:15:a6:e9:17:f7:63:4d:5e: 6f:08:3e:3c:82:53:f4:0b:14:19:8d:c0:e2:ad:c6: 67:d4:eb:4a:b3:a9:6d:d3:6a:ed:ab:b4:6c:6f:e8: 22:87:c4:f5:6c:c6:eb:9c:44:36:7d:e7:f1:11:17: d2:98:25:82:c6:d7:ad:0b:96:44:c0:c6:8d:46:61: da:1e:75:5e:b9:64:ff:f1:b1:e1:47:d0:e9:34:04: f4:56:d8:a4:2c:80:e8:1a:26:ce:92:b4:c3:3d:52: 07:ed:53:57:d1:12:be:a7:eb:15:2e:93:df:33:cd: 58:e9:b2:db:a4:e1:33:db:38:39:9c:fd:94:e8:4c: 63:88:d7:9b:0c:bc:04:94:03:40:25:43:55:c3:92: 46:49:e1:77:6c:04:63:d8:ed:ca:7c:9b:7c:33:54: 5d:60:94:4d:06:a0:27:bd:ef:bd:a8:9f:fc:98:cf: bf:00:66:b9:f2:ed:f8:be:0b:8c:4e:11:1f:f7:c9: 99:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D2:CE:0D:F5:1F:B5:D9:6A:1D:60:A8:BE:FA:54:0B:86:29:4A:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a51ada71-9eee-3f42-a21d-fceb50af00ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.218.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:fb:af:d3:03:5b:20:fe:99:72:cf:dc:0c:a8:a5:e6:67:75: e5:ab:09:22:fd:18:ac:10:7c:66:4e:c9:51:27:ed:a2:1a:c9: c1:15:95:e2:c5:fd:3e:0d:55:cc:fe:4c:fc:3c:31:e5:82:4d: fc:76:fa:02:51:9b:f5:87:b0:f7:5b:0b:7c:e7:9b:46:97:91: b1:a3:7b:10:05:a1:38:28:3a:2f:21:e1:14:23:1b:42:d5:26: 65:66:e0:76:dc:32:2a:0e:e9:9a:2b:40:a6:36:cb:11:44:d1: f4:dd:01:d6:6b:e9:4e:31:bb:26:d6:13:87:2d:69:8c:80:0d: dd:76:67:b5:fe:45:c5:7d:9b:6d:07:28:6c:b5:e7:7b:b7:ae: 5e:88:37:54:8e:a8:ce:84:7e:d4:76:78:7e:75:90:dd:9a:8b: a6:e1:31:63:65:cd:a9:1b:45:ba:84:e7:b5:0c:ce:bf:a6:c4: 41:d1:d0:75:a6:a5:4f:75:3e:65:aa:57:21:6d:f9:72:d6:12: 4a:cc:70:32:14:0b:b6:c7:d5:9b:92:ae:57:9f:b2:0a:bb:38: 55:8a:cf:6d:53:e8:e4:99:90:81:89:43:dd:b9:ef:53:58:a6: 70:fd:53:28:77:74:23:cc:42:a7:48:1b:11:05:a2:cf:9c:b7: bc:1a:97:cf -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqQoQFdBHVBA14G4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MWIyNmQ2MmYtOTgxOC00Y2FmLWE1YTQtMWY4MjYwMmI3YWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPgz24OlPedjGhb+B14TlNpr72xDPpw25LBq DeRYzftC4WmS5GVvZIqej+tj3O+9Z6kfmHTn4CQ2JStsIczeXsBvFabpF/djTV5v CD48glP0CxQZjcDircZn1OtKs6lt02rtq7Rsb+gih8T1bMbrnEQ2fefxERfSmCWC xtetC5ZEwMaNRmHaHnVeuWT/8bHhR9DpNAT0VtikLIDoGibOkrTDPVIH7VNX0RK+ p+sVLpPfM81Y6bLbpOEz2zg5nP2U6ExjiNebDLwElANAJUNVw5JGSeF3bARj2O3K fJt8M1RdYJRNBqAnve+9qJ/8mM+/AGa58u34vguMThEf98mZTwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGLSzg31H7XZah1gqL76VAuGKUqFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTUxYWRhNzEtOWVlZS0z ZjQyLWEyMWQtZmNlYjUwYWYwMGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMB0dowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAjfuv0wNbIP6Zcs/cDKil5md15asJIv0YrBB8Zk7JUSftohrJwRWV4sX9 Pg1VzP5M/Dwx5YJN/Hb6AlGb9Yew91sLfOebRpeRsaN7EAWhOCg6LyHhFCMbQtUm ZWbgdtwyKg7pmitApjbLEUTR9N0B1mvpTjG7JtYThy1pjIAN3XZntf5FxX2bbQco bLXne7euXog3VI6ozoR+1HZ4fnWQ3ZqLpuExY2XNqRtFuoTntQzOv6bEQdHQdaal T3U+ZapXIW35ctYSSsxwMhQLtsfVm5KuV5+yCrs4VYrPbVPo5JmQgYlD3bnvU1im cP1TKHd0I8xCp0gbEQWiz5y3vBqXzw== -----END CERTIFICATE-----Generated at Wed Aug 6 07:51:42 2025 by rpki-client