$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/247e7628-8aa1-3d54-9913-d48b0ed908ec.roa File: 247e7628-8aa1-3d54-9913-d48b0ed908ec.roa (raw, json) Hash identifier: BsfyQxyAFZ0vDwJ2hL09hkvSdCPvq0xzZA5IayD1JZ4= Subject key identifier: 19:E4:99:A3:B6:D4:83:85:A6:28:20:19:B7:84:3D:50:AB:A5:EB:7B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D1B479D8EE4185FC4D60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/247e7628-8aa1-3d54-9913-d48b0ed908ec.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 209.252.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d1:b4:79:d8:ee:41:85:fc:4d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=033465eb-898c-4b2b-a4bf-8d1d3898f542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e9:78:5d:ab:b3:48:f0:ff:91:9c:d0:85:83: 9b:69:3b:65:d2:d8:21:3f:e6:03:c0:9b:94:d1:38: 4c:3d:45:c5:b9:b3:00:12:11:3f:b8:86:54:19:c2: f8:4b:40:49:bc:0c:bb:05:9f:66:e1:0b:0a:12:7d: 80:4b:ff:7b:04:6d:eb:7b:28:e6:53:c9:69:8d:1d: d4:83:9a:3a:97:7e:f1:ae:5a:95:5f:d0:f2:03:d2: e3:66:8f:d6:0e:f9:f3:17:a3:9f:43:b7:07:36:07: 5a:47:00:ce:16:6a:97:ab:76:66:43:f0:33:19:7e: ec:2c:6f:a1:bc:8d:c7:bf:bc:e0:f7:73:7b:5f:13: 9e:97:62:fd:2c:90:68:c8:5d:e1:aa:61:0d:87:39: 93:94:ab:ce:d4:47:4f:f3:38:ed:13:09:0d:07:d3: 72:1f:e2:7a:ca:3b:f0:27:73:96:21:4b:2d:3a:18: ee:2f:29:2c:6c:41:89:bb:8e:e1:5d:45:80:62:4e: 5f:9f:17:b2:ea:de:d7:10:93:91:9a:fa:72:91:87: e1:2d:53:1b:c9:fc:37:68:d6:23:75:f5:93:4d:84: 1b:27:6f:88:52:03:65:61:d2:d6:02:8a:51:59:23: 1f:c6:2c:b7:02:93:e3:37:7e:8b:8f:ee:58:c6:03: 4f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E4:99:A3:B6:D4:83:85:A6:28:20:19:B7:84:3D:50:AB:A5:EB:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/247e7628-8aa1-3d54-9913-d48b0ed908ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.252.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:80:8f:fb:cb:39:cf:2b:eb:a7:82:5d:09:10:a3:b2:a1:a2: b1:71:8a:d3:c3:a5:5d:4e:fb:e7:4e:a6:f2:61:b4:d2:7d:37: 9c:99:dd:43:24:9d:0f:fc:e1:f1:01:07:52:1d:1c:14:0f:9c: 08:74:3a:2e:8c:0c:dd:bc:a4:5e:74:2d:cc:fa:c4:19:78:80: 3c:6e:d5:05:1e:10:4e:1c:65:94:0c:a2:2b:66:cf:49:fc:69: db:31:dd:ba:b0:64:fe:99:99:55:de:72:98:62:11:19:83:42: 93:a4:b4:50:98:bc:5e:b7:d8:c4:eb:20:65:02:75:e7:c9:45: cc:7a:6b:e2:c2:e1:d9:00:2f:dc:3d:b7:f6:e4:99:ec:99:ba: 94:e9:52:00:52:7b:eb:f1:1e:c9:be:be:e3:45:89:3b:46:7f: d5:9f:ba:9f:27:c7:2b:0d:41:ea:19:f2:ca:3f:fe:28:4b:7d: a0:30:3d:73:b2:1e:ee:46:f0:fd:96:e4:25:1f:29:59:36:a9: a9:50:1d:ef:b2:df:13:19:f9:e6:76:2e:98:47:03:c1:cc:16: e7:7e:6d:ab:c0:9e:d9:30:f0:28:97:ce:c4:7a:48:1e:5a:9d: bc:a8:26:57:99:d6:b5:14:58:f8:37:0e:22:b2:b1:52:b9:ed: 15:9c:4a:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNG0edjuQYX8TWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MDMzNDY1ZWItODk4Yy00YjJiLWE0YmYtOGQxZDM4OThmNTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+l4XauzSPD/kZzQhYObaTtl0tghP+YDwJuU 0ThMPUXFubMAEhE/uIZUGcL4S0BJvAy7BZ9m4QsKEn2AS/97BG3reyjmU8lpjR3U g5o6l37xrlqVX9DyA9LjZo/WDvnzF6OfQ7cHNgdaRwDOFmqXq3ZmQ/AzGX7sLG+h vI3Hv7zg93N7XxOel2L9LJBoyF3hqmENhzmTlKvO1EdP8zjtEwkNB9NyH+J6yjvw J3OWIUstOhjuLyksbEGJu47hXUWAYk5fnxey6t7XEJORmvpykYfhLVMbyfw3aNYj dfWTTYQbJ2+IUgNlYdLWAopRWSMfxiy3ApPjN36Lj+5YxgNPswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnkmaO21IOFpiggGbeEPVCrpet7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjQ3ZTc2MjgtOGFhMS0z ZDU0LTk5MTMtZDQ4YjBlZDkwOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0fz4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6Aj/vLOc8r66eCXQkQo7KhorFxitPDpV1O++dOpvJhtNJ9N5yZ3UMk nQ/84fEBB1IdHBQPnAh0Oi6MDN28pF50Lcz6xBl4gDxu1QUeEE4cZZQMoitmz0n8 adsx3bqwZP6ZmVXecphiERmDQpOktFCYvF632MTrIGUCdefJRcx6a+LC4dkAL9w9 t/bkmeyZupTpUgBSe+vxHsm+vuNFiTtGf9Wfup8nxysNQeoZ8so//ihLfaAwPXOy Hu5G8P2W5CUfKVk2qalQHe+y3xMZ+eZ2LphHA8HMFud+bavAntkw8CiXzsR6SB5a nbyoJleZ1rUUWPg3DiKysVK57RWcSkQ= -----END CERTIFICATE-----Generated at Wed Aug 6 09:36:44 2025 by rpki-client