$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dbe057d5-ccbc-3f87-9174-ad610a0ef3b7.roa File: dbe057d5-ccbc-3f87-9174-ad610a0ef3b7.roa (raw, json) Hash identifier: Iw6PO+/0J7F41tvNKMDiw1pOBz/GZ+SstvIQek5L1YU= Subject key identifier: BF:C3:AC:6A:1D:20:11:22:AC:86:A0:9E:EA:4D:CC:2F:0E:96:A6:DD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A4C3B2851079F7652464808E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dbe057d5-ccbc-3f87-9174-ad610a0ef3b7.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 209.253.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:28:51:07:9f:76:52:46:48:08:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=3c9a8225-2839-4ccc-8891-92f1c6b3618f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:40:25:07:30:4d:c5:1f:9a:46:5c:c7:54:05: 4c:83:30:a9:d0:89:25:b5:60:5d:3d:b7:29:43:28: c8:18:b9:c5:eb:06:12:0e:61:ae:1d:fd:10:61:a0: ee:1b:3c:a6:41:ab:fd:40:da:c9:02:3b:3e:35:7c: 44:46:67:62:9b:03:44:d0:df:9c:1b:71:fd:9b:55: 98:fe:41:34:99:59:b2:66:8b:af:b2:30:da:37:62: 47:19:f8:07:8e:77:ac:4b:3b:1e:57:e8:b8:ff:cb: 8e:97:1b:17:ff:ee:26:15:0a:83:44:9a:9b:d2:0b: a8:a1:33:31:48:57:0c:1a:e9:46:44:4c:0f:38:eb: 18:b5:c0:b3:37:38:52:20:e6:ae:00:ba:fd:3a:a9: 4c:cd:d3:c4:b0:e1:c6:e9:0f:05:49:e3:1e:6c:0a: c5:7e:83:e4:3a:31:cf:0e:87:94:15:74:5c:30:ff: 43:d7:9e:f4:d0:55:b3:90:4c:bd:52:2a:1d:4a:39: 0f:ee:fa:88:33:1b:e4:64:25:df:42:49:bc:9a:41: dc:5d:02:d0:b1:e9:bf:ab:70:7a:db:cc:c1:c8:86: 2c:13:a2:00:80:1b:ef:91:57:1a:d4:bf:e5:f7:a8: fe:10:11:78:ab:54:30:5d:ae:50:55:cb:c8:f8:70: 8e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C3:AC:6A:1D:20:11:22:AC:86:A0:9E:EA:4D:CC:2F:0E:96:A6:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dbe057d5-ccbc-3f87-9174-ad610a0ef3b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.253.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:5a:6d:53:c4:ce:30:fe:a4:27:2d:e8:b8:95:e7:c4:5b:31: 98:c7:21:31:46:f3:40:9e:eb:58:c2:3d:a1:0d:88:85:7b:8b: 9f:66:d6:cc:c5:52:22:88:ae:9f:ca:ff:56:f3:08:10:37:74: a5:ff:20:ac:11:81:26:b6:7e:04:ff:30:da:14:8d:59:9e:ed: 09:cf:e6:73:59:29:3a:cc:71:d8:df:4a:77:c3:61:34:72:08: e5:bd:f3:8c:f3:1c:a1:7e:7b:2d:ab:fa:11:70:52:70:28:2b: 5e:c4:2c:4a:b9:8a:f2:c8:b3:5a:d0:bd:53:d6:b4:2b:ad:52: 7a:4f:47:1f:89:58:d5:ce:cf:c6:97:85:f3:a6:2e:71:43:ae: 10:12:ca:64:d2:78:a7:fe:95:61:79:3a:76:db:b1:78:10:7b: 4d:53:a8:6d:d5:bc:80:8d:f1:10:9d:68:5c:84:a7:ef:93:93: b3:16:4f:0e:02:35:a2:dc:d4:cf:a8:3b:db:c3:fe:69:96:3d: a1:81:2a:d7:bf:6e:22:1f:a1:a3:9d:9b:9c:18:f2:8a:c4:f1: a5:e7:39:76:98:71:59:e0:db:c6:6d:81:2d:1e:ca:52:32:e9: 4e:f8:db:23:4b:f5:e1:2e:08:d3:73:ca:31:5e:07:2e:2f:79: d8:f3:ac:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOyhRB592UkZICOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk M2M5YTgyMjUtMjgzOS00Y2NjLTg4OTEtOTJmMWM2YjM2MThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kAlBzBNxR+aRlzHVAVMgzCp0IkltWBdPbcp QyjIGLnF6wYSDmGuHf0QYaDuGzymQav9QNrJAjs+NXxERmdimwNE0N+cG3H9m1WY /kE0mVmyZouvsjDaN2JHGfgHjnesSzseV+i4/8uOlxsX/+4mFQqDRJqb0guooTMx SFcMGulGREwPOOsYtcCzNzhSIOauALr9OqlMzdPEsOHG6Q8FSeMebArFfoPkOjHP DoeUFXRcMP9D15700FWzkEy9UiodSjkP7vqIMxvkZCXfQkm8mkHcXQLQsem/q3B6 28zByIYsE6IAgBvvkVca1L/l96j+EBF4q1QwXa5QVcvI+HCOjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/DrGodIBEirIagnupNzC8OlqbdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGJlMDU3ZDUtY2NiYy0z Zjg3LTkxNzQtYWQ2MTBhMGVmM2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f3pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVabVPEzjD+pCct6LiV58RbMZjHITFG80Ce61jCPaENiIV7i59m1szF UiKIrp/K/1bzCBA3dKX/IKwRgSa2fgT/MNoUjVme7QnP5nNZKTrMcdjfSnfDYTRy COW984zzHKF+ey2r+hFwUnAoK17ELEq5ivLIs1rQvVPWtCutUnpPRx+JWNXOz8aX hfOmLnFDrhASymTSeKf+lWF5OnbbsXgQe01TqG3VvICN8RCdaFyEp++Tk7MWTw4C NaLc1M+oO9vD/mmWPaGBKte/biIfoaOdm5wY8orE8aXnOXaYcVng28ZtgS0eylIy 6U742yNL9eEuCNNzyjFeBy4vedjzrIw= -----END CERTIFICATE-----Generated at Tue Jul 1 10:31:11 2025 by rpki-client