$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1045ba58-5830-3ed1-a2b0-0f3fde4efdd8.roa File: 1045ba58-5830-3ed1-a2b0-0f3fde4efdd8.roa (raw, json) Hash identifier: uEcevX+2wiRgUTYITtCSpSI4fWocKhnNmjbIai4MOpQ= Subject key identifier: 97:AB:26:E1:B0:1B:67:8C:2B:AE:E3:67:B7:5F:CE:59:E4:CB:10:EF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0F91D03E60335697CA900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1045ba58-5830-3ed1-a2b0-0f3fde4efdd8.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 67.217.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:f9:1d:03:e6:03:35:69:7c:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=243ba9c3-aa8a-41bc-bafe-15981597f909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:96:d6:bb:9b:59:8d:23:35:1b:f3:bf:e1:2a: bc:5d:4e:61:56:12:cf:85:aa:20:20:aa:69:64:7a: 2b:dc:7a:aa:63:90:e3:1e:1d:73:0e:ab:b6:07:5f: 65:8f:92:9c:39:f9:70:9e:2c:46:cb:20:f1:49:e1: e8:78:5a:dd:8f:ff:c7:03:32:28:3f:ff:23:f9:06: e7:83:31:94:1e:9d:96:0f:e3:ba:f3:f1:cd:ac:f6: a1:5b:dc:38:b2:a7:69:51:c1:36:9a:a0:03:4d:ff: fe:24:fe:6c:fb:b8:e4:65:46:49:5f:0d:1d:e5:de: 61:0b:0f:52:96:d7:4c:6e:67:5d:00:5c:a8:02:29: e3:74:b1:6a:1e:e5:9b:c0:a5:51:64:e8:6f:01:61: 4e:35:85:e6:d6:8f:82:2f:01:80:a3:a3:7d:b6:0a: 9e:41:f4:d8:e5:ee:6e:ce:e2:de:9f:e3:a0:24:a3: 5a:15:6e:94:5b:b3:bd:fb:17:f1:8f:f6:a5:99:73: d2:a8:1f:8a:e9:1e:10:80:56:d2:56:68:be:72:8d: fb:d8:24:23:05:9c:9a:ce:9d:2f:fe:bc:4f:de:21: 94:4a:32:17:51:c0:d2:f1:7b:b1:b3:de:08:87:b5: 8f:c3:0a:06:b3:95:ae:fb:21:0e:16:7a:dc:f4:7c: 49:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AB:26:E1:B0:1B:67:8C:2B:AE:E3:67:B7:5F:CE:59:E4:CB:10:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1045ba58-5830-3ed1-a2b0-0f3fde4efdd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.217.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:b6:b2:e9:1a:92:3c:ca:2e:87:69:a6:a7:74:69:64:6b:28: a8:d1:35:d4:e0:5d:0b:59:2f:e8:3c:26:5c:4a:eb:d7:aa:fa: 26:dd:24:98:db:10:db:e4:e8:e7:1b:48:9c:d8:87:e6:76:d3: 1e:ad:c6:d9:c0:c5:38:54:d7:4e:a2:56:01:61:26:50:8f:cc: e6:38:2e:73:a0:8b:9d:9f:56:46:17:41:fe:fa:1f:3d:cd:7e: d0:56:13:92:6a:09:ab:91:57:01:4d:76:da:d2:c5:39:fd:eb: 9c:47:22:ae:6a:70:53:9a:70:73:f6:85:15:75:ac:7b:7d:16: 2d:4d:84:06:69:0d:1d:eb:b3:53:7a:b1:4a:d8:0d:fb:e9:06: c4:69:1c:1d:2a:28:51:04:7e:91:d1:65:eb:ae:cf:d7:2d:fa: 02:67:74:54:c8:2e:7a:08:42:95:62:a0:73:a7:58:12:06:5b: 35:1c:6d:93:56:11:78:88:cd:0a:5f:69:7a:1a:5b:6c:46:0a: c3:bc:46:d0:c7:35:11:6b:1e:d9:1c:c7:b9:9c:8a:62:56:e9: 5c:6c:ca:c8:9b:f8:07:0d:43:9d:f3:1b:34:ef:dd:9b:bb:96: 3a:b9:f6:52:74:b6:dc:5b:a5:a1:bd:cf:6c:c7:ed:d9:e0:c0: 26:3a:7e:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoPkdA+YDNWl8qQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MjQzYmE5YzMtYWE4YS00MWJjLWJhZmUtMTU5ODE1OTdmOTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZbWu5tZjSM1G/O/4Sq8XU5hVhLPhaogIKpp ZHor3HqqY5DjHh1zDqu2B19lj5KcOflwnixGyyDxSeHoeFrdj//HAzIoP/8j+Qbn gzGUHp2WD+O68/HNrPahW9w4sqdpUcE2mqADTf/+JP5s+7jkZUZJXw0d5d5hCw9S ltdMbmddAFyoAinjdLFqHuWbwKVRZOhvAWFONYXm1o+CLwGAo6N9tgqeQfTY5e5u zuLen+OgJKNaFW6UW7O9+xfxj/almXPSqB+K6R4QgFbSVmi+co372CQjBZyazp0v /rxP3iGUSjIXUcDS8Xuxs94Ih7WPwwoGs5Wu+yEOFnrc9HxJ0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJerJuGwG2eMK67jZ7dfzlnkyxDvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTA0NWJhNTgtNTgzMC0z ZWQxLWEyYjAtMGYzZmRlNGVmZGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9mAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIC2sukakjzKLodppqd0aWRrKKjRNdTgXQtZL+g8JlxK69eq+ibdJJjb ENvk6OcbSJzYh+Z20x6txtnAxThU106iVgFhJlCPzOY4LnOgi52fVkYXQf76Hz3N ftBWE5JqCauRVwFNdtrSxTn965xHIq5qcFOacHP2hRV1rHt9Fi1NhAZpDR3rs1N6 sUrYDfvpBsRpHB0qKFEEfpHRZeuuz9ct+gJndFTILnoIQpVioHOnWBIGWzUcbZNW EXiIzQpfaXoaW2xGCsO8RtDHNRFrHtkcx7mcimJW6Vxsysib+AcNQ53zGzTv3Zu7 ljq59lJ0ttxbpaG9z2zH7dngwCY6fik= -----END CERTIFICATE-----Generated at Wed Aug 6 10:18:50 2025 by rpki-client