$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5c5491b-02de-3284-8dbf-991476de5e11.roa File: b5c5491b-02de-3284-8dbf-991476de5e11.roa (raw, json) Hash identifier: s69sIt+Cn1gP3RENMaDIaHjCMTDbF2hQzq+0zHfsSSg= Subject key identifier: BD:6D:FB:FD:90:45:11:9C:7A:11:5A:14:53:5B:24:E8:ED:C9:DA:78 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D955AC4B8338A811BC20 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5c5491b-02de-3284-8dbf-991476de5e11.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 27338 IP address blocks: 209.192.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d9:55:ac:4b:83:38:a8:11:bc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=51ba2cb2-2bf1-4c58-a661-893db1081314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e2:7f:74:b4:66:63:1e:f8:13:df:4f:5a:ee: cd:5d:e0:b5:8c:8f:24:4f:b7:67:14:ce:a7:32:1c: f1:a2:ca:68:27:74:36:41:2f:ae:82:a1:6d:34:ee: 94:81:f2:c9:4a:39:f0:d2:6b:06:7d:b5:74:86:51: 47:5b:30:fa:7c:f8:cf:8b:19:3c:cd:ad:9f:51:84: 5c:a9:5d:fb:3b:45:e3:ff:cd:55:9b:94:55:da:95: 36:2b:d3:1f:cf:c4:99:3e:66:52:06:54:98:3e:70: 9a:45:ee:c4:99:81:87:d3:8d:84:8a:db:21:10:95: e9:10:61:18:ab:34:24:49:35:74:6b:1a:e6:c0:50: 3a:83:8e:92:5d:85:9c:5c:99:0d:64:d6:f5:a8:20: ef:7c:7a:1b:9e:46:9c:52:df:36:34:c4:78:85:86: a4:3c:f5:72:93:55:f3:b3:cc:b8:29:ca:ad:7e:63: e7:c7:85:7e:d9:01:a8:b5:dc:ec:2c:bf:a4:61:54: c9:d2:98:d3:0e:9f:ed:12:f0:82:d6:d3:af:be:ce: 67:4c:ac:f0:89:64:6b:a4:bb:83:bf:39:bf:83:c2: e8:f1:f7:bd:45:70:5c:73:27:a7:fc:70:13:2f:6d: d8:d7:c1:c8:08:7e:28:73:0c:58:7a:9a:ec:27:27: 45:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6D:FB:FD:90:45:11:9C:7A:11:5A:14:53:5B:24:E8:ED:C9:DA:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5c5491b-02de-3284-8dbf-991476de5e11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:3a:f2:3b:be:af:5f:ca:f4:13:c8:da:f1:67:ff:39:63:d3: 86:fe:f8:7b:78:12:7b:8d:d6:aa:02:f4:85:f7:18:86:35:81: 74:d3:16:23:ab:49:3b:fd:82:bc:c3:01:22:3e:06:cf:30:0c: 5f:d5:36:2d:49:4b:d5:0e:18:90:b4:c0:4a:64:cd:63:3e:10: 0e:e7:d7:6b:66:91:f2:05:ce:2e:f5:33:31:9a:e9:bd:4d:1a: d6:93:67:07:b2:bf:08:dd:41:da:18:c4:d0:21:0b:f4:24:e7: 6a:56:ce:7c:18:48:87:1e:67:c9:45:3a:0b:34:33:a3:df:29: 9d:e7:2f:ce:31:de:6f:05:8e:9d:2c:89:e3:64:4c:14:02:c0: 9e:8c:76:4f:d7:f9:7e:43:e9:05:3a:99:ee:c3:b5:bf:bc:a3: e6:f6:3f:36:da:4c:48:03:c7:52:3d:4c:c0:29:0d:63:05:c0: f8:10:a7:58:c7:9d:df:ee:4b:f6:ec:26:17:3c:da:13:9a:21: 4f:af:71:90:e2:fe:27:b6:57:74:e3:e0:07:8c:39:9c:59:45: 15:5f:f9:f7:d5:c5:30:f8:49:7f:02:b0:f7:d2:c0:0b:a5:1d: b6:a5:a3:5e:5b:5b:56:d6:da:c9:79:66:13:f4:d3:c0:b6:5f: a6:52:05:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNlVrEuDOKgRvCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NTFiYTJjYjItMmJmMS00YzU4LWE2NjEtODkzZGIxMDgxMzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+J/dLRmYx74E99PWu7NXeC1jI8kT7dnFM6n MhzxospoJ3Q2QS+ugqFtNO6UgfLJSjnw0msGfbV0hlFHWzD6fPjPixk8za2fUYRc qV37O0Xj/81Vm5RV2pU2K9Mfz8SZPmZSBlSYPnCaRe7EmYGH042EitshEJXpEGEY qzQkSTV0axrmwFA6g46SXYWcXJkNZNb1qCDvfHobnkacUt82NMR4hYakPPVyk1Xz s8y4KcqtfmPnx4V+2QGotdzsLL+kYVTJ0pjTDp/tEvCC1tOvvs5nTKzwiWRrpLuD vzm/g8Lo8fe9RXBccyen/HATL23Y18HICH4ocwxYeprsJydFTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1t+/2QRRGcehFaFFNbJOjtydp4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjVjNTQ5MWItMDJkZS0z Mjg0LThkYmYtOTkxNDc2ZGU1ZTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cB9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADI68ju+r1/K9BPI2vFn/zlj04b++Ht4EnuN1qoC9IX3GIY1gXTTFiOr STv9grzDASI+Bs8wDF/VNi1JS9UOGJC0wEpkzWM+EA7n12tmkfIFzi71MzGa6b1N GtaTZweyvwjdQdoYxNAhC/Qk52pWznwYSIceZ8lFOgs0M6PfKZ3nL84x3m8Fjp0s ieNkTBQCwJ6Mdk/X+X5D6QU6me7Dtb+8o+b2PzbaTEgDx1I9TMApDWMFwPgQp1jH nd/uS/bsJhc82hOaIU+vcZDi/ie2V3Tj4AeMOZxZRRVf+ffVxTD4SX8CsPfSwAul Hbalo15bW1bW2sl5ZhP008C2X6ZSBV8= -----END CERTIFICATE-----Generated at Thu Aug 7 03:59:52 2025 by rpki-client