$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a156ed6-dcdf-3258-a7f3-dd59a00b1bdb.roa File: 3a156ed6-dcdf-3258-a7f3-dd59a00b1bdb.roa (raw, json) Hash identifier: zbN1lWtiU7AGSJtAfUSqF3wmX8D+ROnrdiuCKiQzXVc= Subject key identifier: 31:1E:C6:A5:10:01:D1:AB:C6:03:64:81:11:50:F0:59:DC:0B:27:F7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AF2569C7D658EDFB92224C840 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a156ed6-dcdf-3258-a7f3-dd59a00b1bdb.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 7029 IP address blocks: 209.255.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:9c:7d:65:8e:df:b9:22:24:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=f067feb0-faa2-4348-9ba7-7f6f5108090d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d4:81:5a:07:47:b5:1a:c1:22:d3:aa:92:89: bf:78:fe:f2:7d:ac:25:93:ba:a5:23:b5:a9:e8:c5: 39:67:21:76:76:1c:a4:5c:c6:c9:40:43:e0:76:66: d2:22:31:7e:e0:5a:ec:25:a9:b3:27:5d:42:0e:c2: c9:c7:ce:15:9a:24:94:03:89:ed:60:62:e1:f7:8c: 4c:09:3e:91:ce:c0:0e:6f:03:ce:69:40:04:a3:50: b3:b1:30:52:a1:a6:32:d3:cc:7c:75:02:32:74:ec: d1:8c:8a:8e:13:8e:ed:8f:5d:ec:4c:04:5c:ac:c6: 73:83:52:d4:cc:a3:b3:1f:0a:d5:43:26:37:98:8f: 49:68:8e:2a:09:2c:fa:c2:b0:a3:1c:79:18:29:e3: 68:e5:26:6b:3e:6f:c8:77:e5:d3:8d:07:bf:56:f3: e1:38:77:12:59:d9:cf:3b:df:44:2a:82:96:aa:36: 3b:e2:91:c9:2b:48:ce:89:f1:3d:ec:c9:91:f4:92: d6:c5:14:c9:91:e0:0a:bc:54:bb:b4:1e:e1:c5:70: 27:49:05:1e:75:e3:f9:71:23:1e:c0:24:b6:c8:32: e0:8b:6a:29:44:fb:7d:15:c8:72:7a:41:b5:33:7d: 44:9d:8c:3a:3a:9a:12:c8:2a:d9:79:24:ee:e9:1f: 1d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1E:C6:A5:10:01:D1:AB:C6:03:64:81:11:50:F0:59:DC:0B:27:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a156ed6-dcdf-3258-a7f3-dd59a00b1bdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.255.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:d1:7a:f2:6b:b0:27:41:06:b6:03:cf:8e:81:02:b7:de:2d: 39:ca:42:60:4e:ad:61:60:88:1b:61:ae:b3:3e:f6:56:b8:d4: 34:21:b1:8a:84:4d:10:91:1f:fd:15:76:92:5d:13:16:6a:e0: 7d:1b:36:a6:b0:36:35:b9:e7:50:e7:ba:f1:90:fc:59:34:34: 11:66:1b:fe:2a:02:64:bd:71:5a:78:28:03:42:f5:50:48:24: dc:e4:44:ed:9e:f9:ec:1a:01:51:47:93:33:bc:1f:61:f1:ee: 18:99:1e:76:db:59:bc:cf:20:fb:26:d9:8e:c9:f2:c1:20:7b: 8e:09:bb:e2:7f:e2:85:7a:a0:47:a3:4e:8b:b5:5a:e9:93:41: b4:d9:cd:65:0a:d2:36:0d:3c:eb:da:92:be:40:5a:97:db:13: f2:96:0b:6a:4c:a7:cd:24:ea:86:46:99:6a:dd:9d:05:31:d2: 81:f3:3d:3a:31:90:4d:34:ec:ed:81:4e:9f:bf:06:7f:e6:eb: a1:db:b4:d9:11:e2:ea:06:20:4e:3d:b4:cf:e9:b9:36:9a:13: 52:20:3e:29:7d:58:27:6e:20:65:15:19:c2:f5:4a:16:8a:0b: c9:7d:a5:f3:aa:97:86:66:20:d3:3b:5f:c1:6e:e5:0b:1b:13: 05:d9:57:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVpx9ZY7fuSIkyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk ZjA2N2ZlYjAtZmFhMi00MzQ4LTliYTctN2Y2ZjUxMDgwOTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdSBWgdHtRrBItOqkom/eP7yfawlk7qlI7Wp 6MU5ZyF2dhykXMbJQEPgdmbSIjF+4FrsJamzJ11CDsLJx84VmiSUA4ntYGLh94xM CT6RzsAObwPOaUAEo1CzsTBSoaYy08x8dQIydOzRjIqOE47tj13sTARcrMZzg1LU zKOzHwrVQyY3mI9JaI4qCSz6wrCjHHkYKeNo5SZrPm/Id+XTjQe/VvPhOHcSWdnP O99EKoKWqjY74pHJK0jOifE97MmR9JLWxRTJkeAKvFS7tB7hxXAnSQUedeP5cSMe wCS2yDLgi2opRPt9FchyekG1M31EnYw6OpoSyCrZeSTu6R8dwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEexqUQAdGrxgNkgRFQ8FncCyf3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2ExNTZlZDYtZGNkZi0z MjU4LWE3ZjMtZGQ1OWEwMGIxYmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f+hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbRevJrsCdBBrYDz46BArfeLTnKQmBOrWFgiBthrrM+9la41DQhsYqE TRCRH/0VdpJdExZq4H0bNqawNjW551DnuvGQ/Fk0NBFmG/4qAmS9cVp4KANC9VBI JNzkRO2e+ewaAVFHkzO8H2Hx7hiZHnbbWbzPIPsm2Y7J8sEge44Ju+J/4oV6oEej Tou1WumTQbTZzWUK0jYNPOvakr5AWpfbE/KWC2pMp80k6oZGmWrdnQUx0oHzPTox kE007O2BTp+/Bn/m66HbtNkR4uoGIE49tM/puTaaE1IgPil9WCduIGUVGcL1ShaK C8l9pfOql4ZmINM7X8Fu5QsbEwXZV/4= -----END CERTIFICATE-----Generated at Sat Aug 23 15:47:42 2025 by rpki-client