$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0423614b-9ba5-3454-9f69-13330d5e26bc.roa File: 0423614b-9ba5-3454-9f69-13330d5e26bc.roa (raw, json) Hash identifier: I7NWpA5QzeLg30ZbG5nxnCK/77kn7KMFrRJ+sa/gj8k= Subject key identifier: 6E:C3:46:50:2E:99:A4:F8:C5:37:0E:61:21:A3:A5:4E:AE:92:DC:62 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB2217172813D52CCF6786400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0423614b-9ba5-3454-9f69-13330d5e26bc.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 7029 IP address blocks: 67.141.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:71:72:81:3d:52:cc:f6:78:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=dc1a19e6-8ec3-42a7-8c39-ca72553ceefe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:53:4a:fb:5c:bd:9b:a2:6e:50:32:ef:f6:87: 68:8a:fc:46:61:f1:16:5b:45:93:69:80:04:cd:24: b4:1d:b2:83:3f:7d:f5:2a:b2:95:39:4e:90:23:fd: 80:71:56:93:27:2a:bf:09:63:b9:d9:fe:21:72:44: f3:b9:e2:23:a7:ce:04:0d:f4:b3:18:6e:b5:41:6c: 58:e5:18:b6:b3:de:f8:57:19:d5:73:e5:6d:6c:fb: e1:e8:28:34:45:fd:fb:98:4d:ab:ae:de:f6:5f:6e: c8:e7:04:89:c7:8f:76:da:20:70:78:78:5c:59:a0: 89:7a:e1:2d:a8:c9:0d:2f:59:b1:1e:ff:48:bd:81: 37:37:b9:b3:25:04:53:0b:15:3f:f9:75:89:b9:d4: a3:9d:1c:de:87:bc:94:f6:9b:7e:86:80:3c:ac:bb: bf:9d:16:b3:39:ea:84:51:4e:a5:28:31:d0:5e:03: e6:26:d0:63:11:13:05:93:08:90:3a:b7:9a:c5:f5: c4:f0:7e:4b:a1:90:32:32:72:43:e1:c0:2d:41:7d: 2b:7d:b5:5b:da:71:59:3a:88:b2:3e:fe:e4:62:07: 9c:e1:52:ec:05:04:0b:f4:7a:fd:f6:3a:9a:78:8f: 39:5d:f6:7e:8e:7c:1c:92:14:64:97:a0:b8:89:37: ab:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C3:46:50:2E:99:A4:F8:C5:37:0E:61:21:A3:A5:4E:AE:92:DC:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0423614b-9ba5-3454-9f69-13330d5e26bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:3f:05:11:a7:8b:9d:c3:50:a5:4e:03:7d:a7:29:41:0e:92: c9:0c:aa:be:3f:d7:91:e3:64:26:ae:28:61:ab:b6:63:9b:17: 27:c4:80:9d:df:0c:87:23:73:d5:28:a5:b6:d1:c2:11:59:bb: 42:14:23:4b:d8:8f:1e:0a:f8:63:ab:ce:4b:f7:34:33:bb:29: 99:49:19:39:90:a4:54:02:02:f7:33:f4:eb:ce:13:0c:e0:fd: be:38:a3:63:5e:1b:68:01:32:1d:f1:d6:6e:b2:1c:58:2c:d1: 58:b6:d2:1f:5b:0a:e5:5c:13:23:d5:45:af:07:6d:1b:a4:0b: 15:c8:e5:01:e3:29:8a:61:8e:b4:ee:fd:b4:6d:33:fb:0e:43: 7a:be:a7:13:29:4b:89:85:c5:f9:b0:54:4a:fa:56:08:0d:42: ec:2d:8d:c0:45:3c:32:ba:ea:42:3e:69:bb:fc:4f:68:d9:4b: ce:9d:5a:47:f8:24:8b:5c:f4:40:42:e5:16:27:2c:c3:d8:59: d1:d6:5b:4a:cd:65:19:43:5c:cb:26:7f:39:55:4a:10:aa:c6: f7:68:bf:34:5b:9d:a5:90:11:c6:eb:af:72:be:2d:e0:2e:42: 2a:9d:2f:c9:66:8e:f6:2e:c9:34:d3:2f:7c:10:a2:a1:75:ab: c9:7c:93:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIXFygT1SzPZ4ZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZGMxYTE5ZTYtOGVjMy00MmE3LThjMzktY2E3MjU1M2NlZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVNK+1y9m6JuUDLv9odoivxGYfEWW0WTaYAE zSS0HbKDP331KrKVOU6QI/2AcVaTJyq/CWO52f4hckTzueIjp84EDfSzGG61QWxY 5Ri2s974VxnVc+VtbPvh6Cg0Rf37mE2rrt72X27I5wSJx4922iBweHhcWaCJeuEt qMkNL1mxHv9IvYE3N7mzJQRTCxU/+XWJudSjnRzeh7yU9pt+hoA8rLu/nRazOeqE UU6lKDHQXgPmJtBjERMFkwiQOreaxfXE8H5LoZAyMnJD4cAtQX0rfbVb2nFZOoiy Pv7kYgec4VLsBQQL9Hr99jqaeI85XfZ+jnwckhRkl6C4iTerPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7DRlAumaT4xTcOYSGjpU6uktxiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDQyMzYxNGItOWJhNS0z NDU0LTlmNjktMTMzMzBkNWUyNmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ41kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQ/BRGni53DUKVOA32nKUEOkskMqr4/15HjZCauKGGrtmObFyfEgJ3f DIcjc9UopbbRwhFZu0IUI0vYjx4K+GOrzkv3NDO7KZlJGTmQpFQCAvcz9OvOEwzg /b44o2NeG2gBMh3x1m6yHFgs0Vi20h9bCuVcEyPVRa8HbRukCxXI5QHjKYphjrTu /bRtM/sOQ3q+pxMpS4mFxfmwVEr6VggNQuwtjcBFPDK66kI+abv8T2jZS86dWkf4 JItc9EBC5RYnLMPYWdHWW0rNZRlDXMsmfzlVShCqxvdovzRbnaWQEcbrr3K+LeAu QiqdL8lmjvYuyTTTL3wQoqF1q8l8kxM= -----END CERTIFICATE-----Generated at Wed Aug 6 09:37:08 2025 by rpki-client