$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e687d499-0b9f-30f6-ae9c-b7ee3cf38f22.roa File: e687d499-0b9f-30f6-ae9c-b7ee3cf38f22.roa (raw, json) Hash identifier: SVk0H8slXjmqsunQ5vqBNQQRQy/WHGn9BJ5quVk/00Y= Subject key identifier: 50:0A:69:56:F7:33:AB:0E:C2:2A:D6:6B:91:B2:DD:07:C2:61:F8:DD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A268ACA9FA8739D33E9D41F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e687d499-0b9f-30f6-ae9c-b7ee3cf38f22.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 209.83.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:ca:9f:a8:73:9d:33:e9:d4:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=2943c22f-cc8b-4814-8d3e-d65d72bb762b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:05:d3:51:70:6f:04:4c:74:e0:8a:c4:4d:52: 08:9f:cf:b9:f0:2b:b8:e8:ac:99:03:09:e8:a0:06: c2:fb:23:d4:4b:d3:83:20:2a:45:cf:89:9c:ca:5d: fe:09:84:e4:1b:3d:99:23:77:69:09:2e:01:43:05: 2e:b2:29:3c:bd:94:ad:3b:5b:2d:b7:6c:30:92:f2: d4:59:cb:83:2a:6c:4b:4a:0c:80:3f:da:eb:66:0e: 6b:ee:f0:0a:f2:04:98:ce:21:d6:13:8c:d3:26:bf: 26:63:92:45:4e:15:77:ce:b7:72:56:bb:b9:ec:b3: e6:55:8b:1d:69:43:8e:51:51:ac:44:a5:3a:01:4b: 7a:44:12:84:54:b6:df:c2:a5:8d:9f:68:b0:a1:66: 42:fa:d5:bd:e1:ce:e4:6f:bd:ee:ba:56:e8:8a:dc: da:56:0e:ba:13:d7:5e:d8:06:f0:81:95:3d:39:0c: b6:9b:1d:1f:9a:b6:e8:06:3c:92:e2:91:ed:fb:68: 70:4f:58:87:90:16:6e:62:80:c1:a2:b1:18:e7:1d: 7f:72:e9:91:8c:24:0b:9e:1a:d9:64:57:53:5a:49: c7:79:68:aa:12:7e:6b:3c:fa:03:4d:08:23:07:ab: 85:e6:79:ab:c1:46:ba:4f:9e:19:c3:10:65:9c:88: 3a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:0A:69:56:F7:33:AB:0E:C2:2A:D6:6B:91:B2:DD:07:C2:61:F8:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e687d499-0b9f-30f6-ae9c-b7ee3cf38f22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.83.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:91:21:cc:c5:e2:16:50:1d:c8:1d:fd:07:df:cf:ec:28:95: 64:78:d9:8d:8b:04:27:9b:4f:04:0e:31:7f:90:4f:da:ec:0a: 55:19:16:ce:94:1b:c2:d1:c0:6d:a4:4f:8c:f2:99:70:6d:a7: 5d:2b:b8:2a:13:ae:da:af:d2:b6:6d:85:38:6e:20:a6:69:d9: a4:6e:eb:ba:0a:97:47:eb:cb:ab:e7:c1:3b:04:4e:c9:5f:1a: 3c:1d:ec:c2:c0:04:c8:27:eb:83:4b:8a:1f:58:db:e4:31:8c: e2:ef:b2:82:ce:af:29:ff:11:94:f4:37:56:60:79:e1:5f:76: 0d:f7:e9:20:0f:5e:14:69:73:79:27:51:6e:7c:64:d0:2f:db: 87:af:e4:27:01:01:ec:f5:9d:59:56:80:b8:1c:01:ec:4d:5c: 2e:89:fe:4a:51:eb:35:31:98:d7:0b:16:ab:a5:ab:7d:63:11: a5:bc:28:62:bf:f9:64:e8:8c:b2:10:c5:a1:82:a9:d8:ca:23: 75:46:0a:76:b1:1b:0f:ad:7b:cc:1c:69:bd:db:51:1d:96:93: d9:55:0c:ae:36:e9:ed:21:33:89:95:96:6c:04:80:93:ba:8a: 13:29:a2:cc:0c:8f:c9:87:c7:82:56:8a:53:a7:02:ed:76:3c: 07:10:65:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomisqfqHOdM+nUHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk Mjk0M2MyMmYtY2M4Yi00ODE0LThkM2UtZDY1ZDcyYmI3NjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwXTUXBvBEx04IrETVIIn8+58Cu46KyZAwno oAbC+yPUS9ODICpFz4mcyl3+CYTkGz2ZI3dpCS4BQwUusik8vZStO1stt2wwkvLU WcuDKmxLSgyAP9rrZg5r7vAK8gSYziHWE4zTJr8mY5JFThV3zrdyVru57LPmVYsd aUOOUVGsRKU6AUt6RBKEVLbfwqWNn2iwoWZC+tW94c7kb73uulboitzaVg66E9de 2AbwgZU9OQy2mx0fmrboBjyS4pHt+2hwT1iHkBZuYoDBorEY5x1/cumRjCQLnhrZ ZFdTWknHeWiqEn5rPPoDTQgjB6uF5nmrwUa6T54ZwxBlnIg67QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAKaVb3M6sOwirWa5Gy3QfCYfjdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTY4N2Q0OTktMGI5Zi0z MGY2LWFlOWMtYjdlZTNjZjM4ZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VMCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeRIczF4hZQHcgd/Qffz+wolWR42Y2LBCebTwQOMX+QT9rsClUZFs6U G8LRwG2kT4zymXBtp10ruCoTrtqv0rZthThuIKZp2aRu67oKl0fry6vnwTsETslf Gjwd7MLABMgn64NLih9Y2+QxjOLvsoLOryn/EZT0N1ZgeeFfdg336SAPXhRpc3kn UW58ZNAv24ev5CcBAez1nVlWgLgcAexNXC6J/kpR6zUxmNcLFqulq31jEaW8KGK/ +WTojLIQxaGCqdjKI3VGCnaxGw+te8wcab3bUR2Wk9lVDK426e0hM4mVlmwEgJO6 ihMposwMj8mHx4JWilOnAu12PAcQZQU= -----END CERTIFICATE-----Generated at Sun Jun 15 11:46:16 2025 by rpki-client