$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b27eeb9d-cf44-374c-85ac-46bca9d2bece.roa File: b27eeb9d-cf44-374c-85ac-46bca9d2bece.roa (raw, json) Hash identifier: drB6TEoT+oo7zwPIVpT/1I7ogp0r0zVp1DwzDrOUCLo= Subject key identifier: BF:65:C2:E1:9C:93:5E:00:AB:63:DA:CB:D9:56:C8:4A:4B:64:8F:21 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A107C45A233D16275BEE00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b27eeb9d-cf44-374c-85ac-46bca9d2bece.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 30363 IP address blocks: 209.156.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:07:c4:5a:23:3d:16:27:5b:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=ad70d7c9-6de4-4572-b484-5b3138065272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:af:a6:29:2c:7f:3f:6d:86:4d:19:11:be:73: b7:ad:52:bb:ec:f7:82:b0:8e:c5:db:d3:89:64:bb: a1:9d:ed:f4:f2:94:9f:d8:7f:84:0b:4d:bb:ce:c3: e5:a5:a0:40:bd:db:06:1d:51:5c:67:85:ef:93:f7: c8:24:7b:6d:33:4f:1f:87:48:62:3b:d3:61:14:8f: 06:05:de:6e:4a:ad:da:65:eb:64:1b:5b:b2:76:d2: bd:ab:43:44:27:91:a2:61:5c:29:e8:20:85:61:79: f9:50:56:a1:79:29:a3:e8:1b:6f:48:85:15:65:6d: 25:47:7f:24:d0:a3:f7:bc:a0:0d:2f:0a:bf:b3:77: b1:ca:d3:39:5a:b0:3d:28:2d:ee:d8:b5:40:e1:f2: 68:af:21:e4:b3:f5:f0:9a:3a:ea:fc:06:43:db:5b: bc:89:17:8c:be:de:1f:ba:49:46:72:2f:8c:f3:fb: e6:a4:93:2d:0a:b8:0a:4b:d2:16:9b:3e:c3:da:ab: 17:5a:de:38:1a:f3:10:58:14:1b:86:b0:5f:4d:2f: ce:c9:a8:ca:7e:bf:fa:ba:5c:10:9a:15:66:4f:74: 40:39:6c:36:8a:a8:1d:88:aa:a3:57:b9:4b:5f:af: 6d:54:3e:e2:0a:4d:fe:a4:2a:cf:07:a8:22:64:67: 96:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:65:C2:E1:9C:93:5E:00:AB:63:DA:CB:D9:56:C8:4A:4B:64:8F:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b27eeb9d-cf44-374c-85ac-46bca9d2bece.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.156.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:26:dd:c0:e0:65:d9:2d:c1:39:e7:fd:1b:9c:8e:49:74:a4: c8:9e:ca:70:47:35:8e:d6:de:be:a3:59:f3:e4:ad:49:8a:8a: 62:5b:5d:0a:f7:bd:28:ca:1b:29:89:1f:0e:3e:40:67:32:53: 61:71:3b:0b:7f:02:67:1f:c5:d2:c4:19:9b:b8:b1:fe:fe:6f: a3:ca:d8:5a:b9:c2:33:1c:9b:ef:cd:81:b6:b5:fe:cd:73:26: e0:3a:fe:71:88:db:71:c3:ba:f2:1b:ed:6f:3a:83:7c:00:4f: 81:c0:29:df:4d:b5:b3:9c:6e:f5:86:4d:bc:bc:dd:51:83:77: 6f:7e:fb:3a:f6:2e:6a:3d:b0:a3:60:e1:fe:f7:a3:0d:fb:af: 50:0d:a1:90:db:26:5f:dc:01:97:cc:9f:d4:a0:6f:88:d1:5d: 5e:fe:88:45:14:51:04:7c:a8:bd:1f:dd:34:8d:cc:43:b7:bb: 16:11:f6:95:f7:a1:9a:a2:31:83:2a:97:7b:30:cc:b9:e0:c2: 8f:69:ed:ec:56:05:71:96:f2:81:ff:da:db:ca:ab:1b:45:05: ab:4f:a6:08:53:60:5c:99:5c:73:8d:8e:ce:33:9b:ac:cf:18: f7:c2:35:8c:ef:a1:d7:f9:5f:7f:da:32:5f:e4:2e:e1:f7:9f: cb:57:eb:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoQfEWiM9Fidb7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YWQ3MGQ3YzktNmRlNC00NTcyLWI0ODQtNWIzMTM4MDY1MjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq+mKSx/P22GTRkRvnO3rVK77PeCsI7F29OJ ZLuhne308pSf2H+EC027zsPlpaBAvdsGHVFcZ4Xvk/fIJHttM08fh0hiO9NhFI8G Bd5uSq3aZetkG1uydtK9q0NEJ5GiYVwp6CCFYXn5UFaheSmj6BtvSIUVZW0lR38k 0KP3vKANLwq/s3exytM5WrA9KC3u2LVA4fJoryHks/Xwmjrq/AZD21u8iReMvt4f uklGci+M8/vmpJMtCrgKS9IWmz7D2qsXWt44GvMQWBQbhrBfTS/OyajKfr/6ulwQ mhVmT3RAOWw2iqgdiKqjV7lLX69tVD7iCk3+pCrPB6giZGeWtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9lwuGck14Aq2Pay9lWyEpLZI8hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjI3ZWViOWQtY2Y0NC0z NzRjLTg1YWMtNDZiY2E5ZDJiZWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZzYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYm3cDgZdktwTnn/Rucjkl0pMieynBHNY7W3r6jWfPkrUmKimJbXQr3 vSjKGymJHw4+QGcyU2FxOwt/AmcfxdLEGZu4sf7+b6PK2Fq5wjMcm+/Ngba1/s1z JuA6/nGI23HDuvIb7W86g3wAT4HAKd9NtbOcbvWGTby83VGDd29++zr2Lmo9sKNg 4f73ow37r1ANoZDbJl/cAZfMn9Sgb4jRXV7+iEUUUQR8qL0f3TSNzEO3uxYR9pX3 oZqiMYMql3swzLngwo9p7exWBXGW8oH/2tvKqxtFBatPpghTYFyZXHONjs4zm6zP GPfCNYzvodf5X3/aMl/kLuH3n8tX62Y= -----END CERTIFICATE-----Generated at Thu Aug 7 00:46:56 2025 by rpki-client