$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b034b285-5373-34b9-838f-174cb0c76488.roa File: b034b285-5373-34b9-838f-174cb0c76488.roa (raw, json) Hash identifier: qEllf9gOWNxNBla/dgc/Mh4ey36guPmX3DHKCtIpt6g= Subject key identifier: E6:B6:51:40:D4:F5:EC:6C:BE:91:89:45:E5:31:B5:F0:08:4F:E6:75 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D1D2D5E34A4C8417B900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b034b285-5373-34b9-838f-174cb0c76488.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 209.253.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d1:d2:d5:e3:4a:4c:84:17:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=812135b4-e139-4e7c-99ca-fbeef7486f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f9:3c:9d:2f:94:72:92:4d:60:f6:c5:a5:7d: 09:d7:39:0a:3e:e6:75:3f:c3:7f:82:13:62:7b:c4: ab:cc:31:15:32:c6:4b:6f:5d:43:90:96:dc:f2:4a: b8:35:d2:e7:a0:ee:5d:ee:35:85:50:57:c8:d8:fd: 6e:f6:34:00:bd:9b:ff:14:93:e7:c9:99:41:dc:70: 6c:dd:da:f9:fe:6a:65:11:6e:6a:95:ba:c1:57:6c: 73:7d:1b:fd:11:d0:cb:ef:71:4c:f1:8e:5a:e5:45: 4a:0a:5a:58:4a:b4:fc:07:d3:e4:3e:5f:9e:37:01: 7a:30:94:46:02:87:ef:44:2a:2d:f1:97:cf:de:37: 04:cb:92:4a:94:41:90:d7:82:56:53:4d:d4:71:8e: 16:8b:fe:10:07:fc:99:39:ed:c6:4e:72:15:e6:c0: 18:db:fb:62:dd:80:98:a0:52:bf:1d:bf:ac:0a:86: b5:c1:2a:9e:57:c0:4a:46:64:85:ce:db:a3:9b:1a: 25:2f:50:28:34:ae:e6:60:fb:78:82:fe:1a:18:88: e7:1f:6f:4e:f4:23:e8:66:4a:4b:05:02:64:f9:f0: d7:b7:3f:1b:f8:6f:96:fb:ab:c2:e5:2d:f6:2c:fb: 41:2f:fe:8b:9c:3b:61:a7:37:bb:56:74:06:b1:ee: c8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B6:51:40:D4:F5:EC:6C:BE:91:89:45:E5:31:B5:F0:08:4F:E6:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b034b285-5373-34b9-838f-174cb0c76488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.253.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:bd:79:31:a2:84:fb:6a:30:7a:98:7b:98:a0:17:d5:8a:7d: b3:d1:f1:e5:6a:76:91:78:b7:2a:0c:91:43:f1:22:da:98:21: b8:ed:9a:25:d6:3f:a5:88:0e:2d:6f:10:b0:c9:ce:7c:97:67: 23:53:f3:82:31:65:25:67:cd:4f:94:e6:81:81:8b:46:7b:ee: 53:2f:4e:9d:68:41:03:ad:4f:81:fa:c6:03:9c:db:42:dc:ca: 1a:b3:de:60:74:65:30:31:c9:5d:bb:44:c6:f9:72:40:18:98: f1:38:a0:9a:51:e5:56:79:93:1c:f2:66:b1:bd:1c:4d:58:3f: ef:2b:9b:e5:f2:28:2d:96:1f:2d:21:08:41:30:f3:d3:d5:e8: 47:02:12:35:7e:b0:f6:19:90:ee:14:df:7d:57:85:2b:5e:67: 89:50:e4:64:39:2e:77:3a:8b:0e:d7:b8:ee:91:bf:6e:0f:4a: e3:00:09:d3:66:de:92:18:94:8e:bd:ab:2a:bb:ce:da:2d:bf: d7:73:22:22:75:ea:06:57:4d:56:8c:84:67:d3:c4:1f:17:71: 03:25:17:f4:04:48:63:2f:c7:50:c1:ef:e8:88:a8:42:d0:81: 94:10:6a:86:fc:a9:3f:41:1b:32:02:cd:62:68:d4:ab:41:25: 27:4a:c7:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNHS1eNKTIQXuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ODEyMTM1YjQtZTEzOS00ZTdjLTk5Y2EtZmJlZWY3NDg2Zjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPk8nS+UcpJNYPbFpX0J1zkKPuZ1P8N/ghNi e8SrzDEVMsZLb11DkJbc8kq4NdLnoO5d7jWFUFfI2P1u9jQAvZv/FJPnyZlB3HBs 3dr5/mplEW5qlbrBV2xzfRv9EdDL73FM8Y5a5UVKClpYSrT8B9PkPl+eNwF6MJRG AofvRCot8ZfP3jcEy5JKlEGQ14JWU03UcY4Wi/4QB/yZOe3GTnIV5sAY2/ti3YCY oFK/Hb+sCoa1wSqeV8BKRmSFztujmxolL1AoNK7mYPt4gv4aGIjnH29O9CPoZkpL BQJk+fDXtz8b+G+W+6vC5S32LPtBL/6LnDthpze7VnQGse7IswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOa2UUDU9exsvpGJReUxtfAIT+Z1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjAzNGIyODUtNTM3My0z NGI5LTgzOGYtMTc0Y2IwYzc2NDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f2dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACG9eTGihPtqMHqYe5igF9WKfbPR8eVqdpF4tyoMkUPxItqYIbjtmiXW P6WIDi1vELDJznyXZyNT84IxZSVnzU+U5oGBi0Z77lMvTp1oQQOtT4H6xgOc20Lc yhqz3mB0ZTAxyV27RMb5ckAYmPE4oJpR5VZ5kxzyZrG9HE1YP+8rm+XyKC2WHy0h CEEw89PV6EcCEjV+sPYZkO4U331XhSteZ4lQ5GQ5Lnc6iw7XuO6Rv24PSuMACdNm 3pIYlI69qyq7ztotv9dzIiJ16gZXTVaMhGfTxB8XcQMlF/QESGMvx1DB7+iIqELQ gZQQaob8qT9BGzICzWJo1KtBJSdKx1s= -----END CERTIFICATE-----Generated at Wed Aug 6 13:01:56 2025 by rpki-client