$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d329a312-4445-3625-871b-9bf9e11f564f.roa File: d329a312-4445-3625-871b-9bf9e11f564f.roa (raw, json) Hash identifier: 0+Oh6AWmRaWRwNi99UXq3aAB7bmBOPpxR4MJr+/1bJA= Subject key identifier: 30:8E:A0:87:1A:5A:EA:6A:52:CB:71:7F:51:CF:22:DB:1A:AB:9E:30 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A268AC8655878F0418C1A5D88 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d329a312-4445-3625-871b-9bf9e11f564f.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 209.83.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:c8:65:58:78:f0:41:8c:1a:5d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=5ec88f2d-5f91-4cb6-bb34-5f29d2f859c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:82:b6:0d:d7:2d:67:38:d6:47:c3:ca:2a:cb: e5:9a:08:3d:e6:16:7b:6f:8d:e3:40:32:ab:3e:a2: 94:f0:c9:93:9b:55:a5:f4:d8:4c:b2:1a:50:f8:37: 04:71:4d:d7:a5:9e:97:6a:d0:90:6f:22:98:c7:55: 9a:53:8b:2d:97:ba:ff:0b:7b:73:99:28:a8:4a:5d: 6c:6a:9d:a4:b3:ba:fc:0f:d0:26:44:22:a5:7e:db: 24:49:7c:b2:60:5a:26:df:68:63:f3:44:2f:b1:67: 4e:39:05:96:3f:58:26:3d:de:d6:6e:90:f5:c2:11: f5:e8:a1:33:2f:71:39:cf:55:35:f8:b7:ca:de:63: 8c:cb:0a:44:b7:a7:63:31:f6:ea:44:4c:92:f2:cc: fa:7f:d3:d3:64:94:a4:97:71:50:68:8c:d8:87:2a: 24:62:36:74:d0:fe:a9:1b:ec:f4:a0:0e:f2:63:96: 13:ba:09:bf:6c:79:f5:fa:69:9a:c7:1f:3c:ef:ca: f3:1e:02:84:b2:3b:dd:1f:57:82:81:87:93:0f:1d: a2:6b:87:31:14:bf:14:21:a6:69:9b:34:9f:70:92: f5:3b:b8:c6:41:f0:d8:f3:57:3e:c3:7b:e8:35:ec: d9:65:9d:10:77:82:4c:41:73:2c:67:1b:cd:29:d7: 02:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8E:A0:87:1A:5A:EA:6A:52:CB:71:7F:51:CF:22:DB:1A:AB:9E:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d329a312-4445-3625-871b-9bf9e11f564f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.83.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:ab:02:a4:45:ec:57:9b:05:cd:1b:d9:64:ab:08:30:56:19: 83:57:e6:49:7c:55:94:4c:b4:cc:8a:47:51:85:4a:11:54:c4: 4f:a7:83:0f:00:cb:1f:6f:10:b3:30:37:0e:03:0a:6b:29:1a: 2b:f6:29:48:03:62:74:11:bc:d7:f4:51:d8:26:55:0e:8a:79: 2b:38:a1:fb:03:65:7f:0f:3e:b1:43:6c:fe:9a:ec:f8:e2:a2: 4d:84:bf:13:33:50:39:bb:c4:11:a8:20:ce:e4:28:d6:88:e1: 28:8a:74:7f:03:5d:35:b4:40:fe:98:d9:4f:90:67:8d:63:14: 4d:6b:ab:b8:7c:a1:8b:c8:87:d8:68:a6:6b:56:e6:6c:a5:3f: 77:c7:e6:b6:74:77:96:96:dc:86:0e:8f:a6:af:4f:4a:ea:07: 36:bb:92:50:cc:f0:0e:94:e9:29:26:a4:d5:7c:47:cb:82:e8: 06:c3:fb:4e:80:29:cc:89:49:4e:ef:9b:c2:f9:5f:cb:10:c7: c3:fa:af:98:a4:d5:d5:cb:67:18:60:97:2c:7a:f8:8b:67:e5: b5:ad:d6:1b:5f:c7:6a:2e:97:75:a3:ed:99:06:9b:ff:1f:a5: 6b:84:c4:fb:ec:51:2d:60:9b:a9:6e:f5:ef:5c:23:98:63:a1: 7e:61:ff:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomishlWHjwQYwaXYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk NWVjODhmMmQtNWY5MS00Y2I2LWJiMzQtNWYyOWQyZjg1OWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYK2DdctZzjWR8PKKsvlmgg95hZ7b43jQDKr PqKU8MmTm1Wl9NhMshpQ+DcEcU3XpZ6XatCQbyKYx1WaU4stl7r/C3tzmSioSl1s ap2ks7r8D9AmRCKlftskSXyyYFom32hj80QvsWdOOQWWP1gmPd7WbpD1whH16KEz L3E5z1U1+LfK3mOMywpEt6djMfbqREyS8sz6f9PTZJSkl3FQaIzYhyokYjZ00P6p G+z0oA7yY5YTugm/bHn1+mmaxx8878rzHgKEsjvdH1eCgYeTDx2ia4cxFL8UIaZp mzSfcJL1O7jGQfDY81c+w3voNezZZZ0Qd4JMQXMsZxvNKdcCzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCOoIcaWupqUstxf1HPItsaq54wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDMyOWEzMTItNDQ0NS0z NjI1LTg3MWItOWJmOWUxMWY1NjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VMBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+rAqRF7FebBc0b2WSrCDBWGYNX5kl8VZRMtMyKR1GFShFUxE+ngw8A yx9vELMwNw4DCmspGiv2KUgDYnQRvNf0UdgmVQ6KeSs4ofsDZX8PPrFDbP6a7Pji ok2EvxMzUDm7xBGoIM7kKNaI4SiKdH8DXTW0QP6Y2U+QZ41jFE1rq7h8oYvIh9ho pmtW5mylP3fH5rZ0d5aW3IYOj6avT0rqBza7klDM8A6U6SkmpNV8R8uC6AbD+06A KcyJSU7vm8L5X8sQx8P6r5ik1dXLZxhglyx6+Itn5bWt1htfx2oul3Wj7ZkGm/8f pWuExPvsUS1gm6lu9e9cI5hjoX5h/3Q= -----END CERTIFICATE-----Generated at Mon Jun 16 22:07:02 2025 by rpki-client