$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27e533f4-79bc-3c7f-8af9-11456e61ff1e.roa File: 27e533f4-79bc-3c7f-8af9-11456e61ff1e.roa (raw, json) Hash identifier: nEYUVg6bn5CW/iAIVo0A19vNFOPkU1D8QQR+5WbAQko= Subject key identifier: 83:F7:87:CB:2B:00:AC:B8:6D:B1:5E:BF:03:16:CB:20:6E:A3:F4:38 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0FAC82D1CE29C320AEE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27e533f4-79bc-3c7f-8af9-11456e61ff1e.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 74.223.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:fa:c8:2d:1c:e2:9c:32:0a:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=5a49e2a3-b8f5-4f35-8aec-7a54e4703547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:56:db:a0:1a:1a:ed:3d:f6:07:ce:47:e6:34: c5:22:70:bd:b0:94:f7:a4:ff:61:fc:4d:e1:90:5c: f7:cc:16:1e:74:14:d2:cf:8e:fc:c5:4a:af:43:65: ff:7f:55:ee:a1:38:08:cc:a7:e7:a6:4c:48:b7:75: 5f:16:95:a8:b6:a4:e1:66:c2:13:7b:6c:fd:28:f1: 72:2b:a4:e4:74:ab:5d:f1:23:e3:9e:a7:41:99:2f: 94:d0:b8:19:cb:6c:bf:b4:0f:ab:a1:31:7b:f5:fd: ee:71:cf:c8:bf:d0:3a:03:c8:58:c3:24:48:89:66: 33:5e:d9:69:54:a0:50:71:49:0e:2b:7d:96:93:93: c1:d1:49:7f:a7:8d:62:4c:9d:53:0f:8a:b2:2a:41: ea:f9:78:51:64:bc:cf:f3:8c:38:28:17:d0:44:09: 26:ec:b3:31:c4:d0:1e:3b:a7:47:d3:dc:87:0b:93: 15:98:df:08:99:a5:85:26:79:0d:d2:d3:f2:d4:02: 9d:4d:01:2b:8d:d3:71:a7:d2:2c:a4:2b:9a:12:a6: 03:2e:1b:02:08:ed:e0:79:07:b9:15:5a:28:60:c5: 5f:c0:78:c2:76:10:36:ff:33:f7:e6:94:6b:b4:42: 38:72:88:f8:16:79:d4:22:66:81:92:4d:47:f1:4f: 26:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F7:87:CB:2B:00:AC:B8:6D:B1:5E:BF:03:16:CB:20:6E:A3:F4:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27e533f4-79bc-3c7f-8af9-11456e61ff1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.223.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:f6:6e:06:72:47:21:7a:fd:d1:64:d1:6d:1e:de:f2:1f:7e: 59:86:e0:73:ee:e6:c0:48:3f:cf:05:b3:cb:8d:10:76:aa:ca: 5a:ff:dd:04:27:3e:98:62:c7:65:65:1c:6d:ba:bc:27:3d:55: fd:b6:12:a5:f3:a0:f0:9d:e8:bc:91:65:fc:97:f2:86:09:17: 62:9f:73:a3:9d:3b:38:60:64:4b:93:1d:a2:9b:2c:48:3a:37: 35:0b:4b:48:92:b3:8a:82:4b:38:1d:d5:a2:ae:a8:81:c9:c0: 2f:f6:4e:d6:c6:de:d7:e3:d7:34:f5:0d:09:0f:41:d1:e6:e6: d8:93:cf:6b:68:a8:76:4b:96:5a:a4:23:27:7a:67:36:d5:78: d5:6c:96:63:71:6e:85:78:b9:4c:10:4f:9f:a5:39:ce:0c:8b: ac:f9:6e:9f:fc:3f:eb:3a:11:b6:57:b6:de:da:68:65:85:b6: 2c:a6:b3:bd:2e:ea:2e:e3:4d:e1:38:44:2c:1d:ab:64:8e:cf: 8b:cf:c9:c5:b2:30:34:73:3c:84:f2:ee:8d:cc:8f:50:de:26: 29:b9:99:2d:57:43:6c:36:ae:28:6e:1d:f6:77:47:3a:58:66: f2:62:0a:98:fd:b0:4a:a1:e1:b8:d4:60:c1:76:9b:53:94:e9: 33:a1:94:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoPrILRzinDIK7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NWE0OWUyYTMtYjhmNS00ZjM1LThhZWMtN2E1NGU0NzAzNTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlbboBoa7T32B85H5jTFInC9sJT3pP9h/E3h kFz3zBYedBTSz478xUqvQ2X/f1XuoTgIzKfnpkxIt3VfFpWotqThZsITe2z9KPFy K6TkdKtd8SPjnqdBmS+U0LgZy2y/tA+roTF79f3ucc/Iv9A6A8hYwyRIiWYzXtlp VKBQcUkOK32Wk5PB0Ul/p41iTJ1TD4qyKkHq+XhRZLzP84w4KBfQRAkm7LMxxNAe O6dH09yHC5MVmN8ImaWFJnkN0tPy1AKdTQErjdNxp9IspCuaEqYDLhsCCO3geQe5 FVooYMVfwHjCdhA2/zP35pRrtEI4coj4FnnUImaBkk1H8U8mRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIP3h8srAKy4bbFevwMWyyBuo/Q4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjdlNTMzZjQtNzliYy0z YzdmLThhZjktMTE0NTZlNjFmZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASt+VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACH2bgZyRyF6/dFk0W0e3vIfflmG4HPu5sBIP88Fs8uNEHaqylr/3QQn Pphix2VlHG26vCc9Vf22EqXzoPCd6LyRZfyX8oYJF2Kfc6OdOzhgZEuTHaKbLEg6 NzULS0iSs4qCSzgd1aKuqIHJwC/2TtbG3tfj1zT1DQkPQdHm5tiTz2toqHZLllqk Iyd6ZzbVeNVslmNxboV4uUwQT5+lOc4Mi6z5bp/8P+s6EbZXtt7aaGWFtiyms70u 6i7jTeE4RCwdq2SOz4vPycWyMDRzPITy7o3Mj1DeJim5mS1XQ2w2rihuHfZ3RzpY ZvJiCpj9sEqh4bjUYMF2m1OU6TOhlL4= -----END CERTIFICATE-----Generated at Wed Aug 6 11:20:53 2025 by rpki-client