$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d85e26cd-0a08-3417-8770-e4857474bcf4.roa File: d85e26cd-0a08-3417-8770-e4857474bcf4.roa (raw, json) Hash identifier: uDl3fu9I9hnIgT+xO1h6e8CXVOc7xeny/3n0gGtAbS0= Subject key identifier: D8:FB:45:AF:3B:6D:3B:C1:14:90:ED:BC:43:11:77:2B:CE:4D:EB:91 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D13B9CEF0E0BB4ADD900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d85e26cd-0a08-3417-8770-e4857474bcf4.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 209.165.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d1:3b:9c:ef:0e:0b:b4:ad:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=db76547c-63f3-40d4-b167-e2ae26bf0fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:11:91:e4:e7:b3:02:de:32:b8:91:34:f1:c1: a6:f3:53:bf:0f:b3:c5:0b:f7:06:b5:ae:b8:50:ae: 19:8f:ba:7a:3a:1c:2f:08:7a:d3:ef:d7:43:7c:1b: 94:f4:dd:b4:8e:93:a6:f0:6e:45:af:7d:59:2e:5a: ea:61:5e:bf:12:36:54:34:3e:d5:45:d0:b2:5c:40: 22:c2:f2:b7:40:f0:53:f2:84:c6:9a:c0:77:ce:e9: b6:fc:63:2d:74:b3:75:a4:b7:bc:53:f1:76:b9:81: 23:37:8c:42:b5:bc:14:f5:39:d2:28:ae:c2:41:a7: c7:52:e6:53:96:8f:24:23:5d:62:0f:75:93:ca:37: 25:de:e2:df:8b:6a:1d:95:89:67:95:a7:41:e6:2f: d5:43:49:b3:a4:ac:3a:ac:c4:cd:f8:f9:d8:90:19: f5:35:80:68:e2:d0:f7:3a:ec:22:5f:27:87:0b:11: c1:a7:95:da:08:56:e7:6a:06:60:37:6c:32:ea:53: cd:c2:5d:9c:9b:da:e3:63:c9:e5:fb:fd:8a:3a:4a: 30:4d:ac:4f:80:f9:4e:b0:75:5c:64:1c:c6:ce:8c: 77:10:6e:d8:c1:8f:40:85:b9:86:dd:d5:a1:2f:72: c3:4d:bf:c7:82:52:98:7f:7f:5a:3a:60:c0:50:95: bb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FB:45:AF:3B:6D:3B:C1:14:90:ED:BC:43:11:77:2B:CE:4D:EB:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d85e26cd-0a08-3417-8770-e4857474bcf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.165.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:53:83:19:28:80:d9:f5:4d:28:a8:ff:ac:02:12:f8:68:a7: 3c:7d:90:13:af:a1:51:76:54:b0:c3:50:7a:64:f9:d6:33:22: 18:8c:ff:0c:28:03:72:5d:2a:ba:75:18:d1:8d:8e:19:f9:55: 76:05:89:04:8b:84:34:bd:b5:22:7e:e9:f4:b8:3e:e5:d3:e5: b5:c0:b7:0a:22:dc:42:0b:22:e4:7a:4a:28:d1:a8:18:21:a7: 55:d2:d9:a4:11:ee:da:b9:ad:e1:36:08:31:85:db:cf:dc:05: 1f:f3:5c:17:a2:c8:fb:30:af:5d:b2:4b:f3:0d:40:a6:b5:01: dc:c4:28:c5:99:68:27:1f:61:98:7e:41:f4:2c:97:f9:9d:00: d8:62:f2:5b:79:ea:98:e3:7c:7f:2a:1c:e1:7d:26:ca:c0:66: 7a:9e:e6:79:6f:e8:fc:6a:c6:f3:bf:bd:c9:25:31:7e:6a:8a: 13:bd:72:4a:e5:66:77:37:d7:df:9f:2e:d5:5d:ed:e5:29:63: 1c:75:6b:ba:be:33:2d:11:7b:7f:0b:6e:c4:ba:fc:95:51:c2: c1:0e:5c:91:7a:e4:56:c5:ea:79:61:f0:d5:c7:7d:2f:02:7f: 69:54:b9:bb:78:eb:64:89:26:11:80:bf:6f:f0:73:80:fb:7b: a4:f2:bf:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNE7nO8OC7St2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZGI3NjU0N2MtNjNmMy00MGQ0LWIxNjctZTJhZTI2YmYwZmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBGR5OezAt4yuJE08cGm81O/D7PFC/cGta64 UK4Zj7p6OhwvCHrT79dDfBuU9N20jpOm8G5Fr31ZLlrqYV6/EjZUND7VRdCyXEAi wvK3QPBT8oTGmsB3zum2/GMtdLN1pLe8U/F2uYEjN4xCtbwU9TnSKK7CQafHUuZT lo8kI11iD3WTyjcl3uLfi2odlYlnladB5i/VQ0mzpKw6rMTN+PnYkBn1NYBo4tD3 OuwiXyeHCxHBp5XaCFbnagZgN2wy6lPNwl2cm9rjY8nl+/2KOkowTaxPgPlOsHVc ZBzGzox3EG7YwY9AhbmG3dWhL3LDTb/HglKYf39aOmDAUJW7HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNj7Ra87bTvBFJDtvEMRdyvOTeuRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDg1ZTI2Y2QtMGEwOC0z NDE3LTg3NzAtZTQ4NTc0NzRiY2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aUCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBTgxkogNn1TSio/6wCEvhopzx9kBOvoVF2VLDDUHpk+dYzIhiM/wwo A3JdKrp1GNGNjhn5VXYFiQSLhDS9tSJ+6fS4PuXT5bXAtwoi3EILIuR6SijRqBgh p1XS2aQR7tq5reE2CDGF28/cBR/zXBeiyPswr12yS/MNQKa1AdzEKMWZaCcfYZh+ QfQsl/mdANhi8lt56pjjfH8qHOF9JsrAZnqe5nlv6PxqxvO/vcklMX5qihO9ckrl Znc319+fLtVd7eUpYxx1a7q+My0Re38LbsS6/JVRwsEOXJF65FbF6nlh8NXHfS8C f2lUubt462SJJhGAv2/wc4D7e6Tyv6E= -----END CERTIFICATE-----Generated at Wed Aug 6 00:34:08 2025 by rpki-client