$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5012a183-6945-305b-9c9c-de9ba51406f9.roa File: 5012a183-6945-305b-9c9c-de9ba51406f9.roa (raw, json) Hash identifier: tkmR0AJKCDI5raEvN/Gv73Qi6aVFx6Vrph/5WEWnl5w= Subject key identifier: 59:CC:38:03:9E:2B:17:1F:83:6B:73:5C:59:D4:4B:99:86:A5:93:3A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A331AFD2E0147A3DF11DDA000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5012a183-6945-305b-9c9c-de9ba51406f9.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 7029 IP address blocks: 209.253.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:fd:2e:01:47:a3:df:11:dd:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=aff9e73d-4f4b-4792-a3bf-576b1af56d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b1:11:7e:35:bd:27:1d:95:3a:4d:29:66:67: 0f:a6:7e:41:fd:49:54:1b:9c:fe:7c:54:98:46:5d: 15:de:f6:7b:00:a5:ad:73:cd:24:50:fd:53:d7:08: c3:3d:e7:d1:f1:ec:c9:90:02:6c:e9:2f:79:4c:4c: 1f:35:47:b5:c9:80:a4:3b:f1:21:fd:9e:dc:02:ae: b0:b9:f0:ae:4a:fc:df:ef:90:dc:a8:1d:f3:ff:49: a5:78:8d:07:70:63:62:75:c8:17:65:8f:42:e8:2a: 45:d1:e0:ca:19:e4:6e:c7:6f:20:e2:e2:23:4f:de: 0f:a4:57:45:77:ed:3f:95:a6:7f:61:88:a9:dc:36: 9a:c7:dd:af:e2:66:ca:23:fc:2d:16:c4:21:94:98: ec:c5:58:a1:16:1f:71:40:28:6b:32:03:a9:b0:5d: f8:47:91:ed:0c:fc:ac:d6:6f:ed:2f:ae:9b:8f:e8: 2f:83:9e:f3:da:fb:4f:bd:5b:20:24:2a:65:37:ac: fc:fc:99:1b:4b:47:9b:a2:b0:c4:e0:31:25:80:53: a1:71:55:b4:d9:dc:ac:04:19:f9:d1:94:c2:ff:dc: a7:b9:07:56:d6:5a:52:87:c2:96:99:43:e0:9e:f8: cc:54:8e:dd:a9:6e:ec:a6:f0:7f:3e:86:eb:e8:b7: 01:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CC:38:03:9E:2B:17:1F:83:6B:73:5C:59:D4:4B:99:86:A5:93:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5012a183-6945-305b-9c9c-de9ba51406f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.253.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:9d:f9:39:53:1d:c5:40:ac:15:6f:f0:24:ec:eb:15:82:19: 5c:1b:84:d1:a3:d0:06:f9:59:bc:ad:15:32:55:c6:99:8c:2e: 66:99:a3:c1:58:ff:47:ff:4a:73:05:c1:eb:36:f6:fd:d9:aa: ac:ad:1d:b5:fa:c6:d1:48:6f:84:be:19:3d:0b:b9:6c:2a:1e: e6:fa:c4:c6:bc:ca:00:68:a5:af:98:c4:df:7e:a2:b3:1b:31: de:d8:dc:6c:cd:9f:0d:df:f1:88:f3:50:31:b0:32:00:a8:55: 6c:0b:1b:f1:3d:f7:ea:18:4a:1a:2f:2d:48:6e:1b:4b:87:58: aa:7f:89:40:b4:3b:1d:2c:da:39:a7:8c:d8:c1:9d:14:e1:14: c5:22:65:ca:b0:fb:1d:5e:94:75:bf:d6:7f:08:dc:f9:b6:92: 7a:98:c5:54:f6:f8:6a:84:d0:37:2e:7c:07:6b:f4:23:de:41: ec:22:85:16:c9:5e:8e:a7:4b:c8:a8:7e:82:35:a1:fe:fa:90: a7:73:6e:2e:8e:ac:2e:07:b7:b2:23:aa:f6:bd:87:9d:07:4e: a9:7b:fb:37:95:a9:04:46:19:36:77:33:2a:be:d0:91:fb:cc: 40:20:e1:78:4e:90:5d:52:fc:99:30:de:ad:38:fa:b4:41:a5: d4:3e:5b:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGv0uAUej3xHdoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk YWZmOWU3M2QtNGY0Yi00NzkyLWEzYmYtNTc2YjFhZjU2ZDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrERfjW9Jx2VOk0pZmcPpn5B/UlUG5z+fFSY Rl0V3vZ7AKWtc80kUP1T1wjDPefR8ezJkAJs6S95TEwfNUe1yYCkO/Eh/Z7cAq6w ufCuSvzf75DcqB3z/0mleI0HcGNidcgXZY9C6CpF0eDKGeRux28g4uIjT94PpFdF d+0/laZ/YYip3Daax92v4mbKI/wtFsQhlJjsxVihFh9xQChrMgOpsF34R5HtDPys 1m/tL66bj+gvg57z2vtPvVsgJCplN6z8/JkbS0eborDE4DElgFOhcVW02dysBBn5 0ZTC/9ynuQdW1lpSh8KWmUPgnvjMVI7dqW7spvB/Pobr6LcBAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnMOAOeKxcfg2tzXFnUS5mGpZM6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTAxMmExODMtNjk0NS0z MDViLTljOWMtZGU5YmE1MTQwNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f2lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqd+TlTHcVArBVv8CTs6xWCGVwbhNGj0Ab5WbytFTJVxpmMLmaZo8FY /0f/SnMFwes29v3ZqqytHbX6xtFIb4S+GT0LuWwqHub6xMa8ygBopa+YxN9+orMb Md7Y3GzNnw3f8YjzUDGwMgCoVWwLG/E99+oYShovLUhuG0uHWKp/iUC0Ox0s2jmn jNjBnRThFMUiZcqw+x1elHW/1n8I3Pm2knqYxVT2+GqE0DcufAdr9CPeQewihRbJ Xo6nS8iofoI1of76kKdzbi6OrC4Ht7Ijqva9h50HTql7+zeVqQRGGTZ3Myq+0JH7 zEAg4XhOkF1S/Jkw3q04+rRBpdQ+W98= -----END CERTIFICATE-----Generated at Mon Jun 30 18:26:35 2025 by rpki-client