$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5295be43-da7d-3253-8b1e-ad11e7eb36d4.roa File: 5295be43-da7d-3253-8b1e-ad11e7eb36d4.roa (raw, json) Hash identifier: wHYA4B0rKzxdsAaWPkf7zWErKN0nr2QZ2OxSMi9gKGg= Subject key identifier: A9:7F:BF:32:AB:CC:ED:DD:92:FD:7B:9D:CE:C4:19:74:1E:65:E1:08 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0C8DD3AD6A96D3497A480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5295be43-da7d-3253-8b1e-ad11e7eb36d4.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 64.119.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:c8:dd:3a:d6:a9:6d:34:97:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=981b0a1a-b6e1-4080-b088-61c0004ba5ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cc:90:fd:67:0a:55:e7:ea:14:d9:da:dc:cb: 87:bc:96:4c:2a:a8:3d:60:bf:3d:5f:cb:68:4a:69: ac:98:87:1f:c5:fa:e8:b1:d6:b9:9f:6c:0f:a7:b3: b6:9f:1c:d9:b7:af:09:eb:d0:df:5e:c2:ef:fd:86: 30:41:d3:73:d0:80:e6:3b:ec:8f:04:8f:69:40:67: a6:d2:c0:94:b3:92:3c:bb:d1:2d:89:49:75:e1:36: a7:cb:0f:0e:4a:55:11:ef:07:f1:d6:d4:06:6e:b1: 1d:2b:fb:9f:08:bf:10:7d:02:3c:98:76:80:a5:df: d1:a3:0a:2a:2e:9d:33:33:1e:f4:9e:6e:ec:e5:2e: 3b:1a:bd:c4:63:05:08:ec:1e:c2:68:43:c3:7d:28: eb:96:77:8c:2a:b2:b9:8b:52:31:ef:28:da:48:5f: 9f:15:e9:3b:f7:78:1d:de:fa:ce:93:a0:fc:2a:f9: b2:8f:a7:7a:3e:94:d2:43:7d:e0:cd:80:bc:e0:9c: d6:51:57:fd:d9:5f:94:98:11:59:81:14:d8:cf:17: e0:c0:fc:fb:28:8b:dd:37:96:60:34:fd:3a:5e:04: fe:2b:9b:4a:91:6f:68:c2:9f:3e:5d:36:8c:27:e2: ab:74:38:c4:7a:1a:83:57:e5:24:07:f3:ba:b4:05: 15:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7F:BF:32:AB:CC:ED:DD:92:FD:7B:9D:CE:C4:19:74:1E:65:E1:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5295be43-da7d-3253-8b1e-ad11e7eb36d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.119.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:5c:71:99:12:ae:b5:10:39:c8:3d:59:ee:88:06:13:fc:21: f1:32:01:46:9e:9b:15:d7:4f:43:36:a8:41:12:85:0b:f8:67: b6:64:99:17:a9:7b:fe:05:bb:d0:5a:d7:72:1d:7b:9b:29:9e: c3:de:f4:41:de:3c:e1:a8:d5:53:92:7c:81:f1:4f:66:38:c4: 8f:1e:ae:90:b8:c3:df:ca:0e:e9:04:d3:52:6c:bb:a8:7b:6a: 57:ab:4b:ad:bd:ba:e9:93:60:75:63:80:73:1f:85:4e:42:92: c2:97:48:a1:42:95:cd:24:88:11:e9:cd:2e:49:31:ad:23:a3: bc:d3:ed:a2:a1:da:8b:a7:3e:20:e0:fa:23:af:bd:88:6e:1d: 10:4c:46:da:f8:cf:20:e5:fb:47:9e:81:12:c9:c8:23:61:bd: a7:84:08:39:b5:be:75:92:c2:6f:fc:c4:aa:71:e4:b3:d8:21: f5:fd:d5:12:ca:77:62:77:fb:d5:77:06:52:a0:29:0a:71:37: 15:2f:8f:fe:96:8a:a6:44:37:46:7e:75:4a:75:29:00:61:76: 5c:dc:6a:a5:17:9e:36:cd:1f:4e:7d:d4:26:ef:4a:cc:4a:00: 72:8b:26:c7:f3:68:12:7f:bc:d4:85:b6:6d:2f:6b:86:ac:e3: 99:86:ca:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoMjdOtapbTSXpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk OTgxYjBhMWEtYjZlMS00MDgwLWIwODgtNjFjMDAwNGJhNWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8yQ/WcKVefqFNna3MuHvJZMKqg9YL89X8to SmmsmIcfxfrosda5n2wPp7O2nxzZt68J69DfXsLv/YYwQdNz0IDmO+yPBI9pQGem 0sCUs5I8u9EtiUl14Tanyw8OSlUR7wfx1tQGbrEdK/ufCL8QfQI8mHaApd/Rowoq Lp0zMx70nm7s5S47Gr3EYwUI7B7CaEPDfSjrlneMKrK5i1Ix7yjaSF+fFek793gd 3vrOk6D8Kvmyj6d6PpTSQ33gzYC84JzWUVf92V+UmBFZgRTYzxfgwPz7KIvdN5Zg NP06XgT+K5tKkW9owp8+XTaMJ+KrdDjEehqDV+UkB/O6tAUVwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKl/vzKrzO3dkv17nc7EGXQeZeEIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTI5NWJlNDMtZGE3ZC0z MjUzLThiMWUtYWQxMWU3ZWIzNmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQHdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBccZkSrrUQOcg9We6IBhP8IfEyAUaemxXXT0M2qEEShQv4Z7ZkmRep e/4Fu9Ba13Ide5spnsPe9EHePOGo1VOSfIHxT2Y4xI8erpC4w9/KDukE01Jsu6h7 alerS629uumTYHVjgHMfhU5CksKXSKFClc0kiBHpzS5JMa0jo7zT7aKh2ounPiDg +iOvvYhuHRBMRtr4zyDl+0eegRLJyCNhvaeECDm1vnWSwm/8xKpx5LPYIfX91RLK d2J3+9V3BlKgKQpxNxUvj/6WiqZEN0Z+dUp1KQBhdlzcaqUXnjbNH0591CbvSsxK AHKLJsfzaBJ/vNSFtm0va4as45mGyg4= -----END CERTIFICATE-----Generated at Thu Aug 7 04:43:46 2025 by rpki-client