$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/76fd3540-0035-3a39-8e55-2a6af0400345.roa File: 76fd3540-0035-3a39-8e55-2a6af0400345.roa (raw, json) Hash identifier: Qnfp6dt9L1akg9eIxEsMZ3NambC4/D1mnR0dzdXk0ys= Subject key identifier: 3E:A7:73:54:4E:EC:85:0F:C6:06:50:C4:47:AE:DD:9E:CF:83:86:2B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A45007063965032836EB1FE00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/76fd3540-0035-3a39-8e55-2a6af0400345.roa Signing time: Sat 21 Jun 2025 22:52:25 +0000 ROA not before: Sat 21 Jun 2025 22:52:25 +0000 ROA not after: Fri 19 Sep 2025 22:52:25 +0000 asID: 33617 IP address blocks: 209.16.224.0/19 maxlen: 24 209.50.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:00:70:63:96:50:32:83:6e:b1:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 21 22:52:25 2025 GMT Not After : Sep 19 22:52:25 2025 GMT Subject: CN=72d8a8a9-fec7-48fb-b59d-17f3ea6bf7ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:92:9f:15:1b:64:b9:7e:2f:25:1d:90:5d:db: aa:4e:73:63:d7:52:10:14:75:04:a7:cd:9c:5d:49: 8e:06:85:e0:de:97:87:da:7d:8c:37:2d:90:69:be: 55:dd:d9:30:f4:44:5a:37:e3:56:80:e5:fb:e7:5a: a3:ec:37:f4:11:0c:a4:e5:c7:46:b6:e0:c9:62:0f: 02:26:f5:c7:68:e8:65:bc:86:c2:20:2e:d1:71:6d: 5b:d9:2c:66:a9:a1:ee:4a:26:69:e6:26:a7:da:d0: e5:37:10:3c:b6:d4:20:06:4b:a3:57:5a:8e:e3:b3: c9:02:42:12:b4:01:f4:87:d0:3b:8d:b6:ea:3c:de: 11:bf:28:1e:57:d7:e0:68:63:b0:2e:ea:06:11:f7: e6:93:2a:be:6e:cd:14:9f:b7:c1:68:bb:11:60:47: 16:29:b3:20:87:4a:6e:d8:82:4a:a7:68:f3:41:de: cf:15:66:1b:0b:61:e5:b9:b2:58:b1:cb:e9:5c:4c: 5c:6e:32:07:a6:c7:f6:2c:77:be:7b:2f:63:d5:f8: 2c:00:5d:ec:cc:62:06:d1:0a:c7:71:59:df:ec:db: 77:01:99:83:20:8e:b4:2c:4e:2b:37:2a:6d:3a:79: 26:f5:40:5e:96:21:33:e0:47:17:a3:2a:d6:1b:b3: 4f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A7:73:54:4E:EC:85:0F:C6:06:50:C4:47:AE:DD:9E:CF:83:86:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/76fd3540-0035-3a39-8e55-2a6af0400345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.16.224.0/19 209.50.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:2a:3a:98:80:6f:5e:04:9d:c1:a6:79:23:14:34:80:04:e0: 5d:64:26:06:19:f5:9b:24:52:99:9a:9d:c4:0e:11:c9:eb:95: 94:e4:a5:98:1e:5e:d0:de:0f:bd:7b:7b:98:0f:ea:67:60:92: e7:db:c8:1c:0b:74:df:e8:f4:30:d2:c6:75:77:cf:3f:45:c1: dc:60:b1:07:65:a8:eb:15:63:6b:72:ff:90:a2:71:87:5a:ca: 75:a0:13:ec:d3:fe:dd:34:0b:6e:5d:ce:2b:22:a1:96:18:81: 2e:10:d2:57:20:9c:5f:18:14:8a:15:9b:d2:0b:55:4c:d5:41: 26:5e:f3:43:8b:8a:62:6b:6f:39:d2:7a:f4:8b:2b:be:e1:16: ad:77:de:ba:66:42:32:3a:84:54:5b:2e:ac:e9:a7:ae:fa:3e: 14:6c:8a:81:2a:fa:81:d1:78:ac:8b:bf:5e:9a:d1:2c:31:72: 94:08:b6:66:8d:cb:db:f2:f8:1a:38:40:41:89:5d:bd:e7:4e: 7e:cb:48:29:ca:b4:d6:4f:f9:ea:91:fb:ab:5d:5e:4d:86:81: dd:c0:7a:8c:71:c9:d5:42:9a:c7:f1:84:6e:20:06:70:50:19: 15:46:8b:b8:bb:09:83:2f:44:0a:62:93:86:4f:0f:ef:14:82: 18:b5:2b:6d -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEpFAHBjllAyg26x/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMTIyNTIyNVoXDTI1MDkxOTIyNTIyNVowLzEtMCsGA1UEAxMk NzJkOGE4YTktZmVjNy00OGZiLWI1OWQtMTdmM2VhNmJmN2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJKfFRtkuX4vJR2QXduqTnNj11IQFHUEp82c XUmOBoXg3peH2n2MNy2Qab5V3dkw9ERaN+NWgOX751qj7Df0EQyk5cdGtuDJYg8C JvXHaOhlvIbCIC7RcW1b2SxmqaHuSiZp5ian2tDlNxA8ttQgBkujV1qO47PJAkIS tAH0h9A7jbbqPN4RvygeV9fgaGOwLuoGEffmkyq+bs0Un7fBaLsRYEcWKbMgh0pu 2IJKp2jzQd7PFWYbC2HlubJYscvpXExcbjIHpsf2LHe+ey9j1fgsAF3szGIG0QrH cVnf7Nt3AZmDII60LE4rNyptOnkm9UBeliEz4EcXoyrWG7NPdQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFD6nc1RO7IUPxgZQxEeu3Z7Pg4YrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzZmZDM1NDAtMDAzNS0z YTM5LThlNTUtMmE2YWYwNDAwMzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQF0RDgAwQF 0TJgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEEqOpiAb14EncGmeSMUNIAE4F1kJgYZ9ZskUpmancQOEcnr lZTkpZgeXtDeD717e5gP6mdgkufbyBwLdN/o9DDSxnV3zz9FwdxgsQdlqOsVY2ty /5CicYdaynWgE+zT/t00C25dzisioZYYgS4Q0lcgnF8YFIoVm9ILVUzVQSZe80OL imJrbznSevSLK77hFq133rpmQjI6hFRbLqzpp676PhRsioEq+oHReKyLv16a0Swx cpQItmaNy9vy+Bo4QEGJXb3nTn7LSCnKtNZP+eqR+6tdXk2Ggd3AeoxxydVCmsfx hG4gBnBQGRVGi7i7CYMvRApik4ZPD+8Ughi1K20= -----END CERTIFICATE-----Generated at Wed Jul 2 15:17:41 2025 by rpki-client