$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d85384b2-fc8f-3f52-8f12-9ccad266f344.roa File: d85384b2-fc8f-3f52-8f12-9ccad266f344.roa (raw, json) Hash identifier: nHi4x3JgD5SK7B4derXiFiKYfinuvgByYAfGLUN6uAQ= Subject key identifier: FE:EF:C0:64:63:43:0E:49:7A:13:7D:84:29:84:69:D4:66:4C:97:D9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E605E3681ECD5A6F3A72E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d85384b2-fc8f-3f52-8f12-9ccad266f344.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 198.14.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:5e:36:81:ec:d5:a6:f3:a7:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=a88edea1-288e-43e4-8642-49761aee9bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4a:07:c6:96:29:fc:2b:9f:71:c1:c2:2e:e3: 1b:99:01:13:28:19:1e:c3:06:da:fa:f5:71:9d:6a: 72:28:ba:5a:bc:2e:86:6f:69:41:bc:42:be:85:35: ea:10:a6:79:91:62:d9:9a:bb:5d:05:c5:85:2d:52: f0:c9:ae:14:f3:1f:8a:f9:c9:55:2b:72:cb:fc:25: 3a:50:b0:81:4b:e7:48:fc:c7:b7:5d:47:86:d8:ea: 73:48:c4:37:bc:7a:39:dd:9c:af:ff:01:4c:c4:47: 6a:24:64:02:98:5d:e7:77:c6:76:ae:89:e1:2e:bf: 19:4f:43:ac:32:9b:e8:2a:7e:0d:fe:7e:bf:06:22: 69:43:b8:e8:e0:d0:b6:00:08:55:ab:99:0d:5a:2b: 8f:35:cb:f7:1d:88:0d:12:df:f4:f9:dc:19:60:3e: a2:e5:25:5e:e0:e6:4d:85:d3:bd:fa:89:a4:4c:05: 8e:ad:43:0f:fe:ea:53:6c:92:86:d0:8a:d6:d6:2c: ca:2e:7f:97:9e:51:05:ac:3a:3b:de:7a:83:89:7b: 73:72:9a:47:5b:8d:9f:27:0e:a1:73:78:ad:02:a5: 36:c0:be:9f:52:cd:14:95:af:8f:a3:c9:3d:40:91: df:74:30:33:bc:07:eb:15:0a:25:9c:62:11:f4:af: c7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:EF:C0:64:63:43:0E:49:7A:13:7D:84:29:84:69:D4:66:4C:97:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d85384b2-fc8f-3f52-8f12-9ccad266f344.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 198.14.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:b7:8f:69:b0:18:c7:a5:2b:30:a5:a5:ff:c0:c3:ed:58:d3: 3b:33:05:02:53:6c:da:42:00:24:85:89:40:a4:7d:3f:f6:92: cf:42:34:2f:63:20:0b:00:fc:84:9c:c1:a0:df:f1:64:4e:e6: 98:fa:07:07:4d:f7:53:12:cb:bb:73:a1:dd:2b:41:60:3d:b5: 81:21:75:b6:73:f9:51:b2:85:c8:f9:31:c0:e6:b8:8d:32:80: bf:3b:85:b4:55:62:2f:e1:40:6a:e7:ee:72:77:d3:5b:05:c6: 6f:6b:c6:0c:b2:56:f3:1e:1e:a4:e6:b3:2a:c4:ac:2f:d0:8b: 2c:d8:78:54:31:c0:7e:98:de:b9:99:fa:2c:da:c8:72:73:08: bc:cd:ff:82:37:e2:79:92:b8:3c:d8:35:78:8c:d9:bb:00:a2: ec:69:ab:97:ed:f0:a3:35:cd:78:82:06:ab:16:3a:91:c9:90: 9e:e9:6a:6c:d5:9f:46:2c:48:ff:a5:37:6e:84:f7:7b:c5:a1: fb:b3:ee:2e:1f:73:3e:bc:46:be:a7:64:9b:24:2a:ba:b1:10: db:d0:5e:b0:ee:77:09:50:4f:f0:a6:04:e1:db:58:c5:a2:73: 07:8f:f7:19:b7:65:33:59:3c:a7:e6:42:5b:30:93:f0:52:c8: d6:30:7a:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYF42gezVpvOnLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk YTg4ZWRlYTEtMjg4ZS00M2U0LTg2NDItNDk3NjFhZWU5YmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0oHxpYp/CufccHCLuMbmQETKBkewwba+vVx nWpyKLpavC6Gb2lBvEK+hTXqEKZ5kWLZmrtdBcWFLVLwya4U8x+K+clVK3LL/CU6 ULCBS+dI/Me3XUeG2OpzSMQ3vHo53Zyv/wFMxEdqJGQCmF3nd8Z2ronhLr8ZT0Os MpvoKn4N/n6/BiJpQ7jo4NC2AAhVq5kNWiuPNcv3HYgNEt/0+dwZYD6i5SVe4OZN hdO9+omkTAWOrUMP/upTbJKG0IrW1izKLn+XnlEFrDo73nqDiXtzcppHW42fJw6h c3itAqU2wL6fUs0Ula+Po8k9QJHfdDAzvAfrFQolnGIR9K/HlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7vwGRjQw5JehN9hCmEadRmTJfZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDg1Mzg0YjItZmM4Zi0z ZjUyLThmMTItOWNjYWQyNjZmMzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExg7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIa3j2mwGMelKzClpf/Aw+1Y0zszBQJTbNpCACSFiUCkfT/2ks9CNC9j IAsA/IScwaDf8WRO5pj6BwdN91MSy7tzod0rQWA9tYEhdbZz+VGyhcj5McDmuI0y gL87hbRVYi/hQGrn7nJ301sFxm9rxgyyVvMeHqTmsyrErC/QiyzYeFQxwH6Y3rmZ +izayHJzCLzN/4I34nmSuDzYNXiM2bsAouxpq5ft8KM1zXiCBqsWOpHJkJ7pamzV n0YsSP+lN26E93vFofuz7i4fcz68Rr6nZJskKrqxENvQXrDudwlQT/CmBOHbWMWi cweP9xm3ZTNZPKfmQlswk/BSyNYwevA= -----END CERTIFICATE-----Generated at Wed Jul 9 13:04:31 2025 by rpki-client