$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/558b4558-fb3f-3b99-80a8-8a383ad6ad69.roa File: 558b4558-fb3f-3b99-80a8-8a383ad6ad69.roa (raw, json) Hash identifier: JhumA+yKXhpL3yQAFc0g7WXtd1f71MekZSqlsfGazmk= Subject key identifier: C1:7E:F4:1B:6C:4D:49:07:8E:5A:92:A9:E2:E6:0C:E1:9B:5A:5A:70 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D0738C93CD0ADF2427E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/558b4558-fb3f-3b99-80a8-8a383ad6ad69.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 208.101.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d0:73:8c:93:cd:0a:df:24:27:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=a2975344-4906-4c33-baf2-d2255a2be9ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ea:d0:82:74:71:7a:99:e1:c9:da:57:e1:65: 98:9e:e4:bd:f9:0d:ab:27:48:f0:7c:9c:e3:7a:41: 43:9b:d6:1c:e5:63:d0:61:61:8b:6c:9b:17:56:08: af:46:b1:ff:57:d4:ee:00:c1:aa:f4:d4:9b:45:7a: cc:86:02:af:04:dd:61:7a:61:4a:ff:79:96:4e:6e: 5c:21:59:99:e7:ab:cb:1c:8e:06:9b:92:6f:fd:74: da:ef:cd:46:c6:54:c3:c5:03:05:3f:03:05:9a:fa: 85:e5:10:de:a9:db:dc:ac:98:a2:4f:38:a4:62:a4: 6a:f9:2d:ef:b4:23:b1:eb:5d:fe:44:e1:c6:91:fc: 20:35:1d:6e:d1:f5:93:78:b9:6e:f3:fd:00:a8:95: 33:19:04:f0:75:ee:e0:d3:ef:7a:b1:b2:47:db:23: fd:ab:5b:2f:e4:38:7a:b8:ea:85:57:2b:1a:e4:56: 1b:98:43:cf:66:25:cc:ea:b3:6c:1c:23:c9:43:b8: d7:28:02:c8:a5:48:1e:c3:86:d9:f3:ca:85:88:8b: a6:5d:88:bf:98:69:73:79:bd:1c:27:41:92:02:2a: 33:28:3d:20:21:7f:e8:2b:8a:14:d9:c1:d5:6c:db: b7:4b:7f:37:84:c1:1c:26:d2:7e:e6:73:7f:79:10: a5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:7E:F4:1B:6C:4D:49:07:8E:5A:92:A9:E2:E6:0C:E1:9B:5A:5A:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/558b4558-fb3f-3b99-80a8-8a383ad6ad69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 208.101.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:59:4e:33:8c:e2:df:21:f8:fe:c8:c1:6d:02:5e:7c:9a:02: 4e:79:16:96:ab:55:72:a7:ff:f1:43:5a:27:1e:b4:0e:71:d5: 50:f4:a5:17:94:7f:82:4b:88:b1:91:30:a5:0e:c4:f8:52:54: 51:03:a1:ca:5a:97:e8:c1:64:a3:e3:31:62:22:d2:8f:10:cf: 8d:45:a7:74:55:e2:37:5f:19:f5:f5:45:b6:24:b5:47:43:0b: f3:03:66:ce:91:ce:d3:0a:0e:4f:97:bf:c3:6d:a6:8a:01:06: 1d:c7:ab:1e:a1:be:d5:8d:d5:33:45:5d:e9:7e:15:b6:9d:9e: fb:f2:cd:60:d3:83:2f:ad:1a:7d:bc:01:db:4b:33:08:51:b3: 89:3a:cd:d1:f4:f6:59:6a:1f:81:13:88:9d:c8:7e:a1:ca:4a: 07:7a:d2:db:c7:b8:91:dc:88:94:52:23:b5:19:49:6c:e2:cf: 0a:1d:59:6f:04:87:5e:20:79:97:cf:e0:8c:5a:c1:3c:eb:8d: ab:f5:a2:85:0c:89:b8:d4:37:ac:e7:03:a0:71:08:c9:a3:65: 67:a7:08:87:70:8b:47:1f:ca:b7:16:c2:e6:08:d9:29:9d:ba: 05:d4:f6:6a:c4:7e:47:49:88:a0:cb:4c:f6:a2:37:54:e6:96: e9:7e:0f:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNBzjJPNCt8kJ+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YTI5NzUzNDQtNDkwNi00YzMzLWJhZjItZDIyNTVhMmJlOWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArurQgnRxepnhydpX4WWYnuS9+Q2rJ0jwfJzj ekFDm9Yc5WPQYWGLbJsXVgivRrH/V9TuAMGq9NSbRXrMhgKvBN1hemFK/3mWTm5c IVmZ56vLHI4Gm5Jv/XTa781GxlTDxQMFPwMFmvqF5RDeqdvcrJiiTzikYqRq+S3v tCOx613+ROHGkfwgNR1u0fWTeLlu8/0AqJUzGQTwde7g0+96sbJH2yP9q1sv5Dh6 uOqFVysa5FYbmEPPZiXM6rNsHCPJQ7jXKALIpUgew4bZ88qFiIumXYi/mGlzeb0c J0GSAiozKD0gIX/oK4oU2cHVbNu3S383hMEcJtJ+5nN/eRClWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMF+9BtsTUkHjlqSqeLmDOGbWlpwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTU4YjQ1NTgtZmIzZi0z Yjk5LTgwYTgtOGEzODNhZDZhZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0GWOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5ZTjOM4t8h+P7IwW0CXnyaAk55FparVXKn//FDWicetA5x1VD0pReU f4JLiLGRMKUOxPhSVFEDocpal+jBZKPjMWIi0o8Qz41Fp3RV4jdfGfX1RbYktUdD C/MDZs6RztMKDk+Xv8NtpooBBh3Hqx6hvtWN1TNFXel+FbadnvvyzWDTgy+tGn28 AdtLMwhRs4k6zdH09llqH4ETiJ3IfqHKSgd60tvHuJHciJRSI7UZSWzizwodWW8E h14geZfP4IxawTzrjav1ooUMibjUN6znA6BxCMmjZWenCIdwi0cfyrcWwuYI2Smd ugXU9mrEfkdJiKDLTPaiN1Tmlul+D1I= -----END CERTIFICATE-----Generated at Fri Aug 8 00:13:32 2025 by rpki-client