$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afc215d6-7c7c-393d-93eb-45b64ff471bb.roa File: afc215d6-7c7c-393d-93eb-45b64ff471bb.roa (raw, json) Hash identifier: Qar5nn1GVJRirGflvMgo0bcNe9aBUU6XvXLl1HFn6o8= Subject key identifier: 34:FA:D4:62:1A:91:DA:DB:43:B2:23:F5:89:5E:E9:99:31:B9:BF:59 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A1806C6607EC6D2EBBD87E820 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afc215d6-7c7c-393d-93eb-45b64ff471bb.roa Signing time: Thu 05 Jun 2025 20:13:49 +0000 ROA not before: Thu 05 Jun 2025 20:13:49 +0000 ROA not after: Wed 03 Sep 2025 20:13:49 +0000 asID: 0 IP address blocks: 209.177.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:06:c6:60:7e:c6:d2:eb:bd:87:e8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 5 20:13:49 2025 GMT Not After : Sep 3 20:13:49 2025 GMT Subject: CN=3ab1eba4-9815-4b63-b8fd-411917118bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:bc:a5:4b:b3:3b:8d:78:c8:cb:c9:bb:a2:d6: 80:ec:1f:9f:c7:ae:be:bc:01:47:e7:c7:13:04:dc: f7:12:77:1c:e5:46:84:63:76:28:f2:d4:40:42:33: ae:8c:e1:13:70:fd:aa:f0:83:9d:95:48:61:b5:e4: 63:58:ac:ab:dd:d7:cf:3f:9e:bd:1c:5a:a1:62:33: 17:4d:4f:71:7c:b1:a3:bf:71:17:08:3c:91:bd:78: 1e:4a:f8:11:e9:9f:3a:d3:f8:4f:6a:6c:53:f3:37: 34:70:86:e2:f3:77:da:c8:f8:58:1a:ed:1d:b4:44: 39:58:fd:11:d6:8c:fd:fd:97:c8:e0:1f:de:53:c6: fd:bc:9c:30:30:4b:48:ce:68:a4:51:82:e4:e4:49: c9:21:da:c7:6b:40:9d:de:14:e0:37:53:dc:86:24: c6:a5:35:58:84:20:f1:de:18:53:cc:d1:26:78:2d: c0:15:18:17:61:14:7c:65:84:21:9e:4f:ce:35:37: 68:d1:1c:37:1e:b9:c0:1b:e5:c0:b5:a4:2e:af:11: 14:fe:2f:67:35:d2:5d:a2:da:d6:c1:9c:e9:5e:db: 07:64:60:64:a1:b4:a7:00:fc:96:2d:e4:bd:6a:d5: 00:9c:a4:83:03:ff:f2:c6:13:cc:de:58:c6:b4:15: 19:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:FA:D4:62:1A:91:DA:DB:43:B2:23:F5:89:5E:E9:99:31:B9:BF:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afc215d6-7c7c-393d-93eb-45b64ff471bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.177.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:06:e0:5d:02:86:9d:2c:7e:9e:a8:71:75:b2:ef:71:92:b4: de:a1:8c:ee:ec:09:4a:7b:0d:79:61:55:ce:44:d0:6e:39:b6: 34:d7:24:9c:02:14:21:60:72:81:42:6b:49:e8:9e:f9:94:f9: 88:e5:4b:95:6c:d9:b5:30:d0:7d:d5:2d:fc:f2:f4:0a:46:81: 19:4c:5a:77:b7:98:89:a0:64:78:50:7c:c8:65:47:d7:11:8c: 3f:c0:bc:28:22:86:15:3f:4a:95:32:50:22:6e:17:c0:2a:f8: 0e:be:ff:c9:36:3c:47:26:0b:6f:25:bb:7f:5d:ce:6b:aa:d4: ec:2b:9f:7a:8f:ba:25:03:45:68:4a:7a:7e:47:4b:ab:24:66: dd:e4:52:b6:7e:9b:84:26:07:37:ca:48:d5:5a:e1:b6:1d:63: 44:24:b2:96:95:05:6e:db:25:cb:03:b2:ae:13:0c:25:c7:0b: 5a:8b:7a:e4:92:cf:fe:aa:9a:8c:53:35:33:53:e7:76:ce:41: 42:be:d7:90:82:8b:8a:e4:d9:03:ca:d8:09:5e:6a:97:c4:9a: 77:a5:c3:97:c2:c6:06:a0:aa:8d:b4:7d:22:09:21:5e:45:d0: 5a:19:38:79:e0:2d:df:d3:34:7c:cf:7f:7c:8f:df:17:a5:5d: 66:73:6a:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYBsZgfsbS672H6CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYwNTIwMTM0OVoXDTI1MDkwMzIwMTM0OVowLzEtMCsGA1UEAxMk M2FiMWViYTQtOTgxNS00YjYzLWI4ZmQtNDExOTE3MTE4YmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bylS7M7jXjIy8m7otaA7B+fx66+vAFH58cT BNz3Encc5UaEY3Yo8tRAQjOujOETcP2q8IOdlUhhteRjWKyr3dfPP569HFqhYjMX TU9xfLGjv3EXCDyRvXgeSvgR6Z860/hPamxT8zc0cIbi83fayPhYGu0dtEQ5WP0R 1oz9/ZfI4B/eU8b9vJwwMEtIzmikUYLk5EnJIdrHa0Cd3hTgN1PchiTGpTVYhCDx 3hhTzNEmeC3AFRgXYRR8ZYQhnk/ONTdo0Rw3HrnAG+XAtaQurxEU/i9nNdJdotrW wZzpXtsHZGBkobSnAPyWLeS9atUAnKSDA//yxhPM3ljGtBUZuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDT61GIakdrbQ7Ij9Yle6Zkxub9ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWZjMjE1ZDYtN2M3Yy0z OTNkLTkzZWItNDViNjRmZjQ3MWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0bHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAG4F0Chp0sfp6ocXWy73GStN6hjO7sCUp7DXlhVc5E0G45tjTXJJwC FCFgcoFCa0nonvmU+YjlS5Vs2bUw0H3VLfzy9ApGgRlMWne3mImgZHhQfMhlR9cR jD/AvCgihhU/SpUyUCJuF8Aq+A6+/8k2PEcmC28lu39dzmuq1Owrn3qPuiUDRWhK en5HS6skZt3kUrZ+m4QmBzfKSNVa4bYdY0QkspaVBW7bJcsDsq4TDCXHC1qLeuSS z/6qmoxTNTNT53bOQUK+15CCi4rk2QPK2AleapfEmnelw5fCxgagqo20fSIJIV5F 0FoZOHngLd/TNHzPf3yP3xelXWZzagQ= -----END CERTIFICATE-----Generated at Sun Jun 15 13:10:19 2025 by rpki-client