$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ddc6366-a9f6-3ab5-83e5-7a7104031ddd.roa File: 1ddc6366-a9f6-3ab5-83e5-7a7104031ddd.roa (raw, json) Hash identifier: /okKNby441YGv6azFXieeh5nwAMuYffiG6VJ5xNyu1E= Subject key identifier: 9D:23:C2:49:EB:C8:5E:D2:F5:42:7B:6C:D6:01:8E:AB:E2:7F:3C:BF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AC60EC4055FD0F13AAB59B068 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ddc6366-a9f6-3ab5-83e5-7a7104031ddd.roa Signing time: Thu 07 Aug 2025 04:20:34 +0000 ROA not before: Thu 07 Aug 2025 04:20:34 +0000 ROA not after: Wed 05 Nov 2025 05:20:34 +0000 asID: 7029 IP address blocks: 209.165.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c6:0e:c4:05:5f:d0:f1:3a:ab:59:b0:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 7 04:20:34 2025 GMT Not After : Nov 5 05:20:34 2025 GMT Subject: CN=6257efbf-9a50-4aa7-b02c-6b0d902b48d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:96:0b:56:a3:6e:f8:1c:48:d8:00:1f:d5:84: 51:41:60:49:e8:57:88:d7:8b:ae:8a:93:e6:e7:70: dd:e8:e1:f2:9d:94:f9:ca:fb:cb:80:d6:28:2d:00: a8:ec:85:bf:00:0f:77:82:dd:35:3a:21:9f:15:d1: 9d:aa:e8:f7:63:71:83:bc:0e:8d:ca:e4:58:99:11: 16:ae:3b:49:49:ca:b6:ed:13:50:4f:0e:6a:61:50: 73:ac:00:db:70:aa:a7:cc:a9:7c:4a:3c:c4:de:ec: 43:07:db:f6:d2:a7:65:9f:68:43:8f:ad:01:a1:a2: 4e:89:fc:b1:a6:91:37:38:ae:89:e1:cd:8e:f1:f2: 0a:1e:aa:1e:4e:10:78:94:c2:f4:c7:11:04:78:bb: b4:f6:4a:a3:70:71:fd:7b:73:6d:41:92:99:03:1d: 99:65:64:34:a7:b8:5c:15:58:b5:04:f8:5c:82:92: d8:7c:ed:ca:e9:14:c1:88:e7:7c:ac:cd:7d:49:b9: 0b:3c:76:a7:12:78:d2:c5:2f:a3:5c:8e:c6:4f:67: b4:5a:f9:c3:0d:e2:01:89:c2:16:0a:d8:15:ad:dd: 48:b6:a2:99:64:5c:45:bf:9f:71:79:9a:2e:0f:60: 1f:ff:a2:71:4a:d6:5c:3a:77:89:b4:14:53:ca:c3: 6f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:23:C2:49:EB:C8:5E:D2:F5:42:7B:6C:D6:01:8E:AB:E2:7F:3C:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ddc6366-a9f6-3ab5-83e5-7a7104031ddd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.165.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:bf:65:01:e3:5a:11:65:80:a8:5d:31:06:c7:5a:47:51:fe: 03:17:4f:a0:3c:d5:86:ed:fc:11:4f:ab:f2:ac:fb:85:f4:b2: 0b:d4:9a:57:2b:fc:ad:32:e0:da:72:b1:8c:8f:24:11:40:e9: 1c:90:9c:50:44:0f:de:8b:e4:76:38:c1:36:27:47:d4:bd:2e: 71:21:72:06:c7:04:76:9b:e5:5a:46:23:1c:af:fd:d5:b2:6b: 4d:33:3f:12:86:cb:d7:f0:7e:7f:16:78:bb:49:41:ef:e5:78: 1f:9b:4d:3e:f1:31:0c:3b:1a:d9:6d:89:38:fe:12:d3:72:b4: 78:4f:92:b8:ac:97:e5:24:43:a9:b6:49:bc:22:4f:60:75:ec: 06:1d:89:9d:cf:6a:15:d1:2e:3e:f4:4f:f7:ed:dc:86:2b:e7: d0:0e:f4:4c:91:fc:d3:5b:73:36:3a:04:f4:ec:6c:47:25:61: fb:99:56:44:45:25:70:3f:a4:9f:7e:e6:e0:6c:da:d4:c5:05: ce:6b:06:80:b1:e2:2f:00:63:22:d3:54:43:12:14:4e:90:0c: ad:2f:ff:b7:50:c2:6d:a1:19:24:fe:95:b7:4f:22:49:83:42: d8:ae:14:e9:61:07:d6:cc:8f:79:64:1f:01:48:66:4d:29:3d: fa:62:49:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErGDsQFX9DxOqtZsGgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgwNzA0MjAzNFoXDTI1MTEwNTA1MjAzNFowLzEtMCsGA1UEAxMk NjI1N2VmYmYtOWE1MC00YWE3LWIwMmMtNmIwZDkwMmI0OGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZYLVqNu+BxI2AAf1YRRQWBJ6FeI14uuipPm 53Dd6OHynZT5yvvLgNYoLQCo7IW/AA93gt01OiGfFdGdquj3Y3GDvA6NyuRYmREW rjtJScq27RNQTw5qYVBzrADbcKqnzKl8SjzE3uxDB9v20qdln2hDj60BoaJOifyx ppE3OK6J4c2O8fIKHqoeThB4lML0xxEEeLu09kqjcHH9e3NtQZKZAx2ZZWQ0p7hc FVi1BPhcgpLYfO3K6RTBiOd8rM19SbkLPHanEnjSxS+jXI7GT2e0WvnDDeIBicIW CtgVrd1ItqKZZFxFv59xeZouD2Af/6JxStZcOneJtBRTysNvNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0jwknryF7S9UJ7bNYBjqvifzy/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWRkYzYzNjYtYTlmNi0z YWI1LTgzZTUtN2E3MTA0MDMxZGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0aUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFu/ZQHjWhFlgKhdMQbHWkdR/gMXT6A81Ybt/BFPq/Ks+4X0sgvUmlcr /K0y4NpysYyPJBFA6RyQnFBED96L5HY4wTYnR9S9LnEhcgbHBHab5VpGIxyv/dWy a00zPxKGy9fwfn8WeLtJQe/leB+bTT7xMQw7GtltiTj+EtNytHhPkrisl+UkQ6m2 SbwiT2B17AYdiZ3PahXRLj70T/ft3IYr59AO9EyR/NNbczY6BPTsbEclYfuZVkRF JXA/pJ9+5uBs2tTFBc5rBoCx4i8AYyLTVEMSFE6QDK0v/7dQwm2hGST+lbdPIkmD QtiuFOlhB9bMj3lkHwFIZk0pPfpiSfw= -----END CERTIFICATE-----Generated at Sat Aug 23 16:16:24 2025 by rpki-client