$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ef01a4-f6bc-372e-94e6-7036094f5449.roa File: 08ef01a4-f6bc-372e-94e6-7036094f5449.roa (raw, json) Hash identifier: X+ODep0C/9jldq06titj9HF8i+BYutcrOot0FNZyZFo= Subject key identifier: DC:CD:F2:F3:68:47:46:63:25:39:20:14:98:20:36:50:23:A7:4F:1C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0FA730C0F82AAC2C3D380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ef01a4-f6bc-372e-94e6-7036094f5449.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 72.248.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:fa:73:0c:0f:82:aa:c2:c3:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=0d54a81f-7097-4034-b8b5-dc2d5f652259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:48:1f:e4:6e:81:9e:9f:f8:a6:bb:20:0d:04: 32:56:67:2f:7b:ea:aa:b5:cd:d8:77:5b:3e:3d:f5: 95:be:bd:dd:26:5b:8b:11:75:53:1c:93:8f:3c:8f: aa:87:40:79:b7:be:39:76:73:66:9e:f5:de:48:3d: 54:e3:6a:2e:29:36:3d:15:3d:b9:d2:5d:90:57:a1: db:37:e4:7f:b9:43:1e:7f:b1:b2:df:16:a3:c6:5f: 68:9e:06:23:20:22:19:51:4f:ee:e7:ec:3c:59:84: 84:cb:a9:9e:1a:85:c7:e3:fd:66:b9:8b:4c:d6:ae: 81:07:bc:d2:99:b9:02:ab:3b:fe:1f:7e:7b:bd:09: 77:a2:0c:56:52:d7:90:99:62:34:8b:74:5a:f7:8a: fa:08:7e:2d:31:08:da:6f:62:c1:83:e2:d8:0d:e2: 66:6f:3d:6b:e8:ad:b6:3d:e2:2b:05:22:a3:9d:5c: 29:16:b5:a4:8f:b2:52:4f:15:4d:50:e7:48:7d:d6: 13:88:a9:14:36:47:6a:36:1b:dc:a2:25:f2:fb:74: 98:19:a4:43:e7:67:47:6c:79:a2:1b:62:46:ad:bc: a8:d0:21:d6:2a:53:0f:cc:4c:60:9a:7c:0b:ca:c0: 12:b0:07:f8:80:dd:1d:d5:40:49:48:70:53:b2:bf: 49:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:CD:F2:F3:68:47:46:63:25:39:20:14:98:20:36:50:23:A7:4F:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ef01a4-f6bc-372e-94e6-7036094f5449.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.248.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:57:a2:58:af:df:48:0e:e3:ec:41:f0:1f:c7:a3:ad:52:d7: bb:52:bf:3e:19:2a:dc:c1:1d:df:d7:51:35:38:58:6c:64:ce: d2:14:45:08:8f:ec:2d:e3:a2:c0:96:fa:04:a0:59:67:48:0a: e9:17:33:09:4c:38:c2:bf:3d:56:cb:e0:0e:ca:21:d1:b4:41: f0:7c:8a:00:37:25:a2:3b:ae:63:f3:f5:5d:a2:bf:86:9c:1a: 0f:2c:8f:b6:8b:17:d7:1e:51:f2:18:c5:e4:0a:de:59:f9:0a: c2:b1:61:e5:4f:47:66:7c:de:d7:0c:df:fa:65:29:6a:cf:85: 92:31:a3:ee:2f:1e:8e:51:83:d2:a1:34:c4:5a:aa:df:f5:27: 31:f8:df:bf:d0:a6:0a:70:3e:86:97:60:8b:db:5f:ab:36:0e: 1d:86:bd:fc:13:5d:10:f3:ec:ea:d6:6f:6b:fd:c4:ed:d5:f2: 4c:64:e8:0e:cb:38:37:91:61:7a:4b:df:28:43:36:21:42:5d: 64:2f:d7:79:9e:be:4a:de:cc:e8:b4:38:f4:ec:f2:28:7a:9a: 6b:52:72:1d:05:15:08:15:a0:ac:ae:d0:e6:8a:a1:cb:f0:a7: e7:15:7f:5d:82:51:e1:55:de:a3:0f:1d:40:af:1b:4b:8a:6c: 32:6a:78:8f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqQoPpzDA+CqsLD04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MGQ1NGE4MWYtNzA5Ny00MDM0LWI4YjUtZGMyZDVmNjUyMjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0gf5G6Bnp/4prsgDQQyVmcve+qqtc3Yd1s+ PfWVvr3dJluLEXVTHJOPPI+qh0B5t745dnNmnvXeSD1U42ouKTY9FT250l2QV6Hb N+R/uUMef7Gy3xajxl9ongYjICIZUU/u5+w8WYSEy6meGoXH4/1muYtM1q6BB7zS mbkCqzv+H357vQl3ogxWUteQmWI0i3Ra94r6CH4tMQjab2LBg+LYDeJmbz1r6K22 PeIrBSKjnVwpFrWkj7JSTxVNUOdIfdYTiKkUNkdqNhvcoiXy+3SYGaRD52dHbHmi G2JGrbyo0CHWKlMPzExgmnwLysASsAf4gN0d1UBJSHBTsr9JywIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNzN8vNoR0ZjJTkgFJggNlAjp08cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDhlZjAxYTQtZjZiYy0z NzJlLTk0ZTYtNzAzNjA5NGY1NDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMASPgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAfleiWK/fSA7j7EHwH8ejrVLXu1K/Phkq3MEd39dRNThYbGTO0hRFCI/s LeOiwJb6BKBZZ0gK6RczCUw4wr89VsvgDsoh0bRB8HyKADclojuuY/P1XaK/hpwa DyyPtosX1x5R8hjF5AreWfkKwrFh5U9HZnze1wzf+mUpas+FkjGj7i8ejlGD0qE0 xFqq3/UnMfjfv9CmCnA+hpdgi9tfqzYOHYa9/BNdEPPs6tZva/3E7dXyTGToDss4 N5FhekvfKEM2IUJdZC/XeZ6+St7M6LQ49OzyKHqaa1JyHQUVCBWgrK7Q5oqhy/Cn 5xV/XYJR4VXeow8dQK8bS4psMmp4jw== -----END CERTIFICATE-----Generated at Wed Aug 6 00:38:28 2025 by rpki-client