$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b09f1c95-1eda-332f-bd25-cd2845cdbfed.roa File: b09f1c95-1eda-332f-bd25-cd2845cdbfed.roa (raw, json) Hash identifier: OMM/yablwuS4w5BciVQaq4RYlU/KNqxejTqTmFl/4wE= Subject key identifier: B3:99:D6:6E:B5:6B:6C:54:3B:5C:9A:87:CE:98:CC:36:52:C0:F4:CE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D8EE2256EB7B40A12940 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b09f1c95-1eda-332f-bd25-cd2845cdbfed.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 27338 IP address blocks: 209.192.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d8:ee:22:56:eb:7b:40:a1:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=465c3dc3-d6e0-4557-83d8-1ee44ca16fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:46:8b:7c:9f:bb:46:40:d8:17:0e:da:95:01: 68:07:94:ac:58:dc:4e:b8:c7:eb:b5:89:4a:1f:67: 72:e2:83:70:df:af:d2:1f:a4:d9:2c:ec:2f:9b:bb: 49:8a:dd:59:6e:46:74:70:1f:35:af:4d:58:70:ec: ff:1c:44:42:26:ba:a9:9c:6c:65:3d:ba:7e:bd:ad: cc:f9:de:77:3a:39:31:d2:91:80:6c:3a:58:35:65: b5:83:6e:be:28:31:ba:f6:ab:57:0f:95:29:07:53: a4:7a:b7:b5:9e:6e:89:8c:06:c2:9f:f6:4d:16:a0: 89:00:22:cf:90:a5:6c:91:e5:8e:54:9c:34:08:8b: 9e:9b:c6:64:e0:2d:2a:b6:8a:36:d1:ba:52:64:3f: 66:61:ad:b1:cc:99:c7:db:ad:5a:b3:f0:a9:bc:a5: 59:94:c5:c3:52:41:c6:76:34:4b:1e:6c:dd:73:b5: 53:43:b5:82:57:31:47:28:bb:89:f5:7d:a3:e9:7a: 2e:11:02:76:6d:6a:d4:ab:e4:17:5d:5f:eb:3c:02: bb:c1:ca:13:99:79:ab:98:10:97:c0:82:69:c9:6a: 12:9e:95:6d:26:26:64:d9:43:74:ab:11:d8:1a:5a: 6a:5a:eb:72:aa:71:e9:6e:92:ea:68:33:f0:06:c7: a3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:99:D6:6E:B5:6B:6C:54:3B:5C:9A:87:CE:98:CC:36:52:C0:F4:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b09f1c95-1eda-332f-bd25-cd2845cdbfed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:5b:7b:7d:26:d0:a8:5e:ad:d9:1a:1b:b2:17:16:7c:1b:1a: e9:14:2e:23:52:d5:1d:e5:b9:31:dd:a7:c1:2b:bd:82:d3:64: ba:a2:08:85:1a:f8:cb:55:36:23:6c:0a:11:d7:46:4d:b5:48: 87:1f:6d:16:f4:26:4c:5d:bc:69:a4:ee:d0:7a:48:21:33:4a: 71:c5:a2:d3:c6:2a:3d:b5:c8:4a:d0:1c:67:f0:ef:45:b0:cd: 25:70:2d:03:2c:d1:1c:c3:35:0f:fc:7a:a6:2f:34:4e:e6:07: ff:92:e8:05:63:93:a4:a7:5c:c1:91:68:f8:2b:af:88:c6:61: 03:b0:ec:fb:9c:bb:a4:6c:31:ab:63:7d:30:ac:80:3a:80:44: 8f:34:95:3b:57:a1:86:d6:50:c6:b5:e5:2c:43:4b:13:a4:db: 09:ce:69:f7:50:52:39:04:69:82:f2:fb:5e:7c:0d:6a:19:cf: 90:0d:81:4a:69:39:ec:5e:19:b3:89:0f:ae:a9:94:b9:fc:ad: ad:46:6d:e5:ff:2a:a0:44:07:eb:2f:af:87:dc:65:49:4c:ea: 94:fb:34:d6:86:f9:98:7f:7c:04:f5:ff:99:a6:5d:e5:d6:ad: 2a:ac:d2:7e:64:86:ba:ad:22:53:5d:bf:5d:f5:6f:41:9e:8f: 04:61:99:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNjuIlbre0ChKUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NDY1YzNkYzMtZDZlMC00NTU3LTgzZDgtMWVlNDRjYTE2ZmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEaLfJ+7RkDYFw7alQFoB5SsWNxOuMfrtYlK H2dy4oNw36/SH6TZLOwvm7tJit1ZbkZ0cB81r01YcOz/HERCJrqpnGxlPbp+va3M +d53Ojkx0pGAbDpYNWW1g26+KDG69qtXD5UpB1Okere1nm6JjAbCn/ZNFqCJACLP kKVskeWOVJw0CIuem8Zk4C0qtoo20bpSZD9mYa2xzJnH261as/CpvKVZlMXDUkHG djRLHmzdc7VTQ7WCVzFHKLuJ9X2j6XouEQJ2bWrUq+QXXV/rPAK7wcoTmXmrmBCX wIJpyWoSnpVtJiZk2UN0qxHYGlpqWutyqnHpbpLqaDPwBsejQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOZ1m61a2xUO1yah86YzDZSwPTOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjA5ZjFjOTUtMWVkYS0z MzJmLWJkMjUtY2QyODQ1Y2RiZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cAKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxbe30m0KherdkaG7IXFnwbGukULiNS1R3luTHdp8ErvYLTZLqiCIUa +MtVNiNsChHXRk21SIcfbRb0JkxdvGmk7tB6SCEzSnHFotPGKj21yErQHGfw70Ww zSVwLQMs0RzDNQ/8eqYvNE7mB/+S6AVjk6SnXMGRaPgrr4jGYQOw7Pucu6RsMatj fTCsgDqARI80lTtXoYbWUMa15SxDSxOk2wnOafdQUjkEaYLy+158DWoZz5ANgUpp OexeGbOJD66plLn8ra1GbeX/KqBEB+svr4fcZUlM6pT7NNaG+Zh/fAT1/5mmXeXW rSqs0n5khrqtIlNdv131b0GejwRhmcA= -----END CERTIFICATE-----Generated at Thu Aug 7 01:12:25 2025 by rpki-client