$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf762eaa-fcc3-3ecb-8e18-e62c7ce0ec7e.roa File: cf762eaa-fcc3-3ecb-8e18-e62c7ce0ec7e.roa (raw, json) Hash identifier: +cRP6bUj05qo4W+l6liCwGMDGpGVt16E+M6l1H0VxSA= Subject key identifier: 4D:9A:17:34:49:B8:5B:EF:71:A2:8A:41:32:BB:94:30:A0:E2:37:E2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D16AC56165F0FDB04580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf762eaa-fcc3-3ecb-8e18-e62c7ce0ec7e.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 209.192.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d1:6a:c5:61:65:f0:fd:b0:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=7b7a9236-e63c-4dc6-a3a8-aa66fc6501e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f8:90:0c:7b:19:e0:8f:a5:55:3c:04:ee:b6: 70:cf:b1:d2:58:6a:b7:ff:fe:8c:72:7b:63:71:61: 94:d9:85:ce:b9:68:9d:99:89:d9:2c:79:4a:2e:18: 62:08:3b:36:13:8a:56:50:49:de:0b:6b:4a:18:ac: 53:05:c1:db:e9:6e:d8:82:7f:1a:d8:3e:8f:f4:89: ef:62:fc:25:90:68:48:55:4d:03:fa:78:21:f2:08: 13:40:49:45:6e:4b:77:fc:fb:d5:4d:58:89:48:22: 7e:e5:42:f0:b5:c7:70:13:7a:51:db:ae:09:a0:41: 0e:12:4a:77:14:07:37:79:1a:1f:88:16:09:01:54: 9d:ec:d3:fe:80:62:d3:82:42:44:13:1e:2a:22:46: f9:9b:07:79:c3:84:19:2a:5c:01:19:d4:48:e7:c7: bf:45:e4:57:a3:7b:a8:e7:05:42:ab:b2:84:1b:d6: 97:33:91:92:c6:03:cd:a9:2d:b7:3f:62:cb:97:8f: 02:22:50:e3:0c:75:c1:0b:7f:f2:1b:b5:c5:9d:90: 2f:47:92:a3:d9:25:1a:33:86:37:8f:08:f1:ce:d3: 2f:bf:0c:22:d8:ce:51:24:a4:52:0a:bf:49:32:6b: 70:13:d4:e2:2a:53:2d:27:d2:1f:5d:9d:19:cc:cd: 55:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9A:17:34:49:B8:5B:EF:71:A2:8A:41:32:BB:94:30:A0:E2:37:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf762eaa-fcc3-3ecb-8e18-e62c7ce0ec7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:48:93:47:aa:a1:12:be:98:12:18:14:20:5a:fd:9f:c0:de: a8:80:47:7c:9e:28:83:f9:ee:8a:3c:6f:73:9d:d5:b4:f8:62: 22:a3:ef:0c:3b:8a:e0:b2:bb:75:7c:73:ac:50:17:5b:2a:91: 87:a7:79:84:41:02:ef:36:4b:bb:47:ff:70:57:89:39:6e:4b: 9d:44:e3:fd:3b:88:9a:80:a8:5b:d9:c3:e7:04:f5:de:fb:3a: 73:ee:1a:2e:6e:38:c7:a9:50:e5:5d:29:42:c6:42:d6:0e:54: 5a:93:69:54:eb:8d:56:3e:bb:97:87:d4:cf:64:cd:19:5c:f8: b4:aa:d6:d8:36:a0:47:09:b5:93:a9:43:e9:0a:b1:ea:12:46: 7d:28:9f:a6:c5:00:94:fd:6e:d6:65:e2:2c:3f:fd:a1:f5:bc: 0a:7e:cb:48:5c:86:2c:6e:13:9f:60:a4:7d:6a:c7:8b:c1:23: 3a:a4:c7:9a:72:bd:c4:e1:fa:21:88:83:4a:22:92:7e:21:de: a1:31:96:2e:09:f5:98:09:8c:15:21:4c:eb:0d:9d:df:bf:cf: 2f:6e:48:70:7d:44:21:e3:ed:1b:7a:54:55:5d:fd:af:2c:0f: 58:c1:30:21:de:d5:fb:d4:78:4e:bd:91:c4:71:ff:3f:b0:a2: 66:fa:82:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNFqxWFl8P2wRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk N2I3YTkyMzYtZTYzYy00ZGM2LWEzYTgtYWE2NmZjNjUwMWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPiQDHsZ4I+lVTwE7rZwz7HSWGq3//6Mcntj cWGU2YXOuWidmYnZLHlKLhhiCDs2E4pWUEneC2tKGKxTBcHb6W7Ygn8a2D6P9Inv YvwlkGhIVU0D+ngh8ggTQElFbkt3/PvVTViJSCJ+5ULwtcdwE3pR264JoEEOEkp3 FAc3eRofiBYJAVSd7NP+gGLTgkJEEx4qIkb5mwd5w4QZKlwBGdRI58e/ReRXo3uo 5wVCq7KEG9aXM5GSxgPNqS23P2LLl48CIlDjDHXBC3/yG7XFnZAvR5Kj2SUaM4Y3 jwjxztMvvwwi2M5RJKRSCr9JMmtwE9TiKlMtJ9IfXZ0ZzM1VCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2aFzRJuFvvcaKKQTK7lDCg4jfiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2Y3NjJlYWEtZmNjMy0z ZWNiLThlMTgtZTYyYzdjZTBlYzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0cAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1Ik0eqoRK+mBIYFCBa/Z/A3qiAR3yeKIP57oo8b3Od1bT4YiKj7ww7 iuCyu3V8c6xQF1sqkYeneYRBAu82S7tH/3BXiTluS51E4/07iJqAqFvZw+cE9d77 OnPuGi5uOMepUOVdKULGQtYOVFqTaVTrjVY+u5eH1M9kzRlc+LSq1tg2oEcJtZOp Q+kKseoSRn0on6bFAJT9btZl4iw//aH1vAp+y0hchixuE59gpH1qx4vBIzqkx5py vcTh+iGIg0oikn4h3qExli4J9ZgJjBUhTOsNnd+/zy9uSHB9RCHj7Rt6VFVd/a8s D1jBMCHe1fvUeE69kcRx/z+womb6gkY= -----END CERTIFICATE-----Generated at Mon Aug 4 16:01:19 2025 by rpki-client