$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08f9e3af-a77c-300b-90ce-7f032359dcfa.roa File: 08f9e3af-a77c-300b-90ce-7f032359dcfa.roa (raw, json) Hash identifier: SP/xc3DW5mkQ0GJbsLX9zMQI17Z3r0X06RifmK8jA6Q= Subject key identifier: B1:37:43:11:C4:60:5C:6D:64:5F:C6:1E:52:E7:8F:79:10:71:32:02 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8C70DD09C22595AAFDB9CC00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08f9e3af-a77c-300b-90ce-7f032359dcfa.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 151.213.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:dd:09:c2:25:95:aa:fd:b9:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=771485bd-4a12-4417-b0ce-66397d02b670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:56:16:38:25:1a:c2:8a:d1:fe:0a:93:4c:e6: bc:26:75:f0:13:05:bc:df:20:0d:e9:13:7f:7c:2e: 82:01:ce:d2:49:a1:fc:df:89:e1:ea:31:9c:df:22: ee:2c:f8:f0:a1:4f:4f:55:5a:c3:bf:75:9a:69:e3: 73:21:5b:d6:92:8e:62:bf:cf:1e:37:07:02:2c:4c: 43:09:eb:70:2e:c6:a0:87:95:8d:02:06:44:64:c4: 4b:93:94:35:4b:d1:10:40:dd:3a:8d:9d:a2:d7:fa: 2f:5d:d5:8c:f8:6c:29:85:7a:27:00:b7:46:63:79: de:79:b8:11:58:88:57:6b:41:46:69:b8:35:ac:5e: 6d:03:e7:e3:8f:6e:9f:cb:44:76:ce:eb:2b:72:85: 49:de:47:3f:a7:ce:6e:36:8b:cd:ae:33:9f:10:0c: fd:12:24:16:66:e6:f2:4c:e2:8f:21:de:06:c7:3d: 83:fa:fb:a2:bb:17:a2:9c:94:9a:b1:e2:bf:57:5a: 1a:77:93:4b:5d:73:c1:64:59:e6:1f:2b:cc:bd:07: d5:52:01:67:22:a3:21:f7:eb:c4:37:79:3c:f9:ba: 7f:68:c6:c9:b0:44:2d:2b:0d:24:8b:d4:8c:28:8f: 2a:d6:77:fc:ac:c8:63:8a:93:fa:af:87:a4:24:26: 4c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:37:43:11:C4:60:5C:6D:64:5F:C6:1E:52:E7:8F:79:10:71:32:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08f9e3af-a77c-300b-90ce-7f032359dcfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:ec:20:5f:1d:ba:23:19:3f:e6:e2:44:c9:82:41:c1:62:df: a1:81:e1:8a:24:49:0e:54:10:e6:87:31:c9:61:21:13:2a:f7: 61:28:28:70:b3:89:f1:78:49:b2:ac:58:27:42:89:41:c9:d9: ee:68:bf:6a:22:c7:ce:83:d9:d8:1b:b6:ef:f9:99:b1:7b:8d: 4a:cd:d1:b8:1e:8e:4d:34:fa:fe:fe:d7:53:a1:68:b2:85:80: 1e:b5:32:7f:70:af:dc:69:06:30:24:05:84:f9:22:36:f0:cc: 8f:5f:8c:3d:fe:aa:9c:1c:31:5f:71:94:12:90:7a:35:9c:66: 70:19:aa:eb:fa:97:3b:df:0d:d5:de:31:c1:b0:d6:7b:87:86: 6d:08:2e:80:3e:de:55:9c:c3:d4:f2:a0:6d:59:bd:b8:56:3b: fa:53:fb:e4:5b:ae:a0:8d:e6:80:f7:81:f8:b1:aa:40:2d:45: d8:7f:ce:15:a0:ca:fb:26:51:bc:b1:d6:67:51:2a:eb:a6:19: 73:95:19:a0:2c:89:f4:0e:6f:70:5c:7e:9b:08:c8:16:0e:68: 0d:77:2d:5f:3f:d7:b2:ea:f7:0a:dd:12:c2:cd:c3:0e:ea:49: 7d:a9:24:26:c2:21:09:c6:93:9d:a3:ae:2f:3f:64:95:78:e7: 3b:0a:d6:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcN0JwiWVqv25zAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk NzcxNDg1YmQtNGExMi00NDE3LWIwY2UtNjYzOTdkMDJiNjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVYWOCUaworR/gqTTOa8JnXwEwW83yAN6RN/ fC6CAc7SSaH834nh6jGc3yLuLPjwoU9PVVrDv3WaaeNzIVvWko5iv88eNwcCLExD CetwLsagh5WNAgZEZMRLk5Q1S9EQQN06jZ2i1/ovXdWM+GwphXonALdGY3neebgR WIhXa0FGabg1rF5tA+fjj26fy0R2zusrcoVJ3kc/p85uNovNrjOfEAz9EiQWZuby TOKPId4Gxz2D+vuiuxeinJSaseK/V1oad5NLXXPBZFnmHyvMvQfVUgFnIqMh9+vE N3k8+bp/aMbJsEQtKw0ki9SMKI8q1nf8rMhjipP6r4ekJCZMBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLE3QxHEYFxtZF/GHlLnj3kQcTICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDhmOWUzYWYtYTc3Yy0z MDBiLTkwY2UtN2YwMzIzNTlkY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl9VYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLsIF8duiMZP+biRMmCQcFi36GB4YokSQ5UEOaHMclhIRMq92EoKHCz ifF4SbKsWCdCiUHJ2e5ov2oix86D2dgbtu/5mbF7jUrN0bgejk00+v7+11OhaLKF gB61Mn9wr9xpBjAkBYT5IjbwzI9fjD3+qpwcMV9xlBKQejWcZnAZquv6lzvfDdXe McGw1nuHhm0ILoA+3lWcw9TyoG1ZvbhWO/pT++RbrqCN5oD3gfixqkAtRdh/zhWg yvsmUbyx1mdRKuumGXOVGaAsifQOb3BcfpsIyBYOaA13LV8/17Lq9wrdEsLNww7q SX2pJCbCIQnGk52jri8/ZJV45zsK1pY= -----END CERTIFICATE-----Generated at Wed Aug 6 10:20:44 2025 by rpki-client