$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b508d8e4-48c2-34a6-8dec-287de9c363f1.roa File: b508d8e4-48c2-34a6-8dec-287de9c363f1.roa (raw, json) Hash identifier: dcq6HSP1UR34AP9NWqQQD1hwRoGcbkMqVYL26m6p048= Subject key identifier: 0F:C5:C6:C0:E1:32:AB:15:1C:4E:CA:A7:6D:14:68:9C:02:13:01:A8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D9069080E37F50049D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b508d8e4-48c2-34a6-8dec-287de9c363f1.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 27338 IP address blocks: 209.192.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d9:06:90:80:e3:7f:50:04:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=b8f3c07d-fd0f-4555-b028-d9f7622a48cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:72:32:c9:41:ac:d4:1c:51:b0:c4:51:2a:25: 56:80:d1:4a:5d:84:eb:7a:4f:5c:af:b8:f3:20:61: 01:2a:45:2c:7a:26:81:0f:01:19:7b:75:4c:ba:76: 0f:6e:b2:d1:8d:b5:99:ad:29:f9:ef:9d:bf:22:7d: e9:2a:26:e9:82:fa:df:91:86:bc:69:d3:3f:32:32: dc:2d:4b:e7:78:7b:9b:97:1f:f9:2d:b4:44:3a:ff: 4f:d2:f4:be:74:20:37:a2:96:4f:5d:49:b1:7f:86: 35:0e:c8:b8:b2:fd:e7:30:08:21:31:2a:0b:2e:2c: 7a:01:89:f7:42:1b:a2:09:3d:84:83:f3:6f:7d:60: 7a:1b:89:1f:82:a1:35:e3:b6:48:f8:51:e5:23:8e: 9a:0b:ba:27:3f:54:b7:7d:39:5d:6f:3b:a2:09:74: 00:3e:40:90:a9:7e:47:cc:f1:fe:26:1e:b7:d1:c2: 6b:ca:0f:fa:a7:d7:28:8c:6d:0e:a8:34:fc:36:ba: 64:5b:3f:5c:35:82:cb:dd:7f:d3:5f:8d:ee:74:b4: 0a:6b:e0:d6:44:7d:f1:cf:da:8e:0b:20:18:6c:55: 99:f7:b9:fa:b3:74:5a:39:5c:f1:01:c4:55:25:6f: 1e:20:6d:88:1d:cc:3d:1a:48:10:10:c1:92:22:c6: 84:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C5:C6:C0:E1:32:AB:15:1C:4E:CA:A7:6D:14:68:9C:02:13:01:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b508d8e4-48c2-34a6-8dec-287de9c363f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:75:88:93:f5:9c:41:6a:6c:a4:aa:cf:92:b3:0f:4a:e4:35: 69:dd:c6:44:39:bc:b0:30:2d:4e:03:19:a2:b5:56:09:1e:cd: 51:1a:4c:b2:61:e8:57:6f:10:74:58:cf:da:8e:bd:d9:b5:03: 08:7a:fe:40:e3:84:b0:de:d8:c7:83:a5:70:ce:01:f8:12:29: bb:5b:56:93:5c:70:b6:79:4c:ad:40:be:8d:b7:62:e1:47:01: 51:54:b9:67:2a:7c:d0:8d:84:bf:6c:9e:e8:84:9e:bf:76:ee: 36:d8:8e:3d:57:2a:61:c1:97:9b:b6:b0:e2:05:2b:6e:6a:61: ed:67:79:26:f0:6d:7a:e5:e4:39:79:8b:30:88:78:04:c4:c4: 78:39:9b:0e:85:52:ca:0f:bc:18:59:39:b8:0b:98:b8:47:a9: ab:3b:16:f7:b4:e9:4b:27:0b:f8:26:3c:4e:08:c8:57:9c:6a: 87:17:56:ca:49:2e:50:2d:5e:2a:8a:08:a3:6d:6a:42:57:9b: d8:86:97:f6:b5:0e:ed:4d:cc:17:34:65:39:0a:84:3e:4e:47: b6:d9:34:a5:1e:4b:8f:9a:a4:6e:27:6a:19:18:de:f4:50:29: 33:2d:1f:46:57:d2:4a:5c:cf:31:49:2b:66:d0:a7:46:8d:d2: e7:d3:21:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNkGkIDjf1AEnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YjhmM2MwN2QtZmQwZi00NTU1LWIwMjgtZDlmNzYyMmE0OGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXIyyUGs1BxRsMRRKiVWgNFKXYTrek9cr7jz IGEBKkUseiaBDwEZe3VMunYPbrLRjbWZrSn5752/In3pKibpgvrfkYa8adM/MjLc LUvneHublx/5LbREOv9P0vS+dCA3opZPXUmxf4Y1Dsi4sv3nMAghMSoLLix6AYn3 QhuiCT2Eg/NvfWB6G4kfgqE147ZI+FHlI46aC7onP1S3fTldbzuiCXQAPkCQqX5H zPH+Jh630cJryg/6p9cojG0OqDT8NrpkWz9cNYLL3X/TX43udLQKa+DWRH3xz9qO CyAYbFWZ97n6s3RaOVzxAcRVJW8eIG2IHcw9GkgQEMGSIsaEvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/FxsDhMqsVHE7Kp20UaJwCEwGoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjUwOGQ4ZTQtNDhjMi0z NGE2LThkZWMtMjg3ZGU5YzM2M2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cAnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACt1iJP1nEFqbKSqz5KzD0rkNWndxkQ5vLAwLU4DGaK1VgkezVEaTLJh 6FdvEHRYz9qOvdm1Awh6/kDjhLDe2MeDpXDOAfgSKbtbVpNccLZ5TK1Avo23YuFH AVFUuWcqfNCNhL9snuiEnr927jbYjj1XKmHBl5u2sOIFK25qYe1neSbwbXrl5Dl5 izCIeATExHg5mw6FUsoPvBhZObgLmLhHqas7Fve06UsnC/gmPE4IyFecaocXVspJ LlAtXiqKCKNtakJXm9iGl/a1Du1NzBc0ZTkKhD5OR7bZNKUeS4+apG4nahkY3vRQ KTMtH0ZX0kpczzFJK2bQp0aN0ufTIeE= -----END CERTIFICATE-----Generated at Thu Aug 7 03:20:02 2025 by rpki-client