$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e0125d0-b517-3612-9f37-c35c35e9e3e6.roa File: 7e0125d0-b517-3612-9f37-c35c35e9e3e6.roa (raw, json) Hash identifier: +TDktKRsbNyDqM1BlkI5mit80fq6iTO7OTvtwXkJl7I= Subject key identifier: D4:7B:20:F0:26:B3:B2:08:F6:18:D2:8F:B3:DC:16:24:C3:62:5F:1C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0FA5316EE9882E122BB80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e0125d0-b517-3612-9f37-c35c35e9e3e6.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 72.25.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:fa:53:16:ee:98:82:e1:22:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=5865f93d-536a-497c-b589-98bb6686f26a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a4:27:f1:55:6b:83:df:cd:dc:47:47:e2:00: 62:d7:8d:ee:09:c2:4c:fd:aa:6d:d7:3c:0c:f5:bd: 8e:dd:e6:f5:cf:b8:97:7e:15:7d:d5:07:44:81:22: a9:7c:09:74:05:38:15:ff:62:f9:10:1f:7a:44:4d: d6:be:58:f8:10:1c:48:a9:c7:7f:9a:57:1b:e3:4a: 02:a2:a9:0e:53:33:bb:80:7f:62:eb:10:c9:aa:a5: 50:47:c0:d5:7d:d8:8a:d2:fa:1a:cb:bb:37:e4:cb: e1:b0:9d:6e:b3:6e:9b:2e:30:56:d5:96:3e:d0:33: 50:1c:32:be:9d:54:34:ff:a7:28:e7:59:4d:9e:b7: cd:e5:2d:09:fc:82:9b:c2:c5:0a:87:07:37:2a:7f: 36:d8:79:c6:16:06:77:be:45:76:ad:05:fe:a2:5b: a3:92:7d:d3:44:00:4c:df:0e:83:a1:de:2f:b5:ab: d7:79:4e:94:89:c7:51:d8:eb:c8:28:5f:c9:14:61: 84:3b:84:29:ce:69:b6:e0:ed:26:9c:91:3f:9c:95: fb:27:51:11:20:6c:e4:17:4f:db:4e:5f:72:cd:32: 16:c7:87:fa:75:6e:25:da:2c:e5:1b:86:bd:92:4e: 7e:02:04:a8:04:2b:29:1c:ff:d8:cc:17:4d:bc:11: c8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7B:20:F0:26:B3:B2:08:F6:18:D2:8F:B3:DC:16:24:C3:62:5F:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e0125d0-b517-3612-9f37-c35c35e9e3e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.25.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:a2:e4:61:67:b7:d0:a7:e8:5b:4f:5f:68:fa:54:f1:d6:f2: db:71:53:06:0d:71:80:f4:a0:0b:f6:9f:19:71:fd:04:b2:df: 4b:39:69:b1:29:cb:3a:12:0b:90:07:e3:bd:89:0b:65:31:3b: 98:06:4e:56:5d:10:50:36:78:1b:61:da:5b:6c:78:9e:52:56: 6b:1e:c3:7a:77:56:2b:f4:11:89:a6:ce:0f:39:87:65:bf:a5: bf:ac:49:ec:98:36:b5:a2:22:b2:d9:93:d2:6b:1d:f3:c9:9e: a9:e6:a7:6d:e0:0a:73:e1:8f:45:47:10:2c:5d:50:9d:59:77: cb:a1:30:4b:72:bb:ac:22:91:3f:cc:4c:c9:42:9a:9b:a1:aa: 87:8a:0d:35:a9:1f:f2:e2:17:5e:85:31:97:c3:90:25:81:ab: ad:6f:0c:30:a6:cc:73:f7:91:b8:4f:38:a0:e2:cf:6b:d2:e0: 2e:63:4e:21:ae:94:52:35:d4:1a:f7:e9:8a:09:8d:a8:ec:01: 30:56:27:35:15:ca:70:0e:ca:4d:d1:ec:ed:4d:26:74:f1:93: 5b:43:a0:2b:33:cf:4a:17:d3:39:6c:19:9a:19:cd:fe:12:66: e7:81:61:ee:ac:c2:40:f8:bd:c4:af:f3:fa:2c:ac:64:80:c2: 3d:f1:46:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoPpTFu6YguEiu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NTg2NWY5M2QtNTM2YS00OTdjLWI1ODktOThiYjY2ODZmMjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6Qn8VVrg9/N3EdH4gBi143uCcJM/apt1zwM 9b2O3eb1z7iXfhV91QdEgSKpfAl0BTgV/2L5EB96RE3Wvlj4EBxIqcd/mlcb40oC oqkOUzO7gH9i6xDJqqVQR8DVfdiK0voay7s35MvhsJ1us26bLjBW1ZY+0DNQHDK+ nVQ0/6co51lNnrfN5S0J/IKbwsUKhwc3Kn822HnGFgZ3vkV2rQX+olujkn3TRABM 3w6Dod4vtavXeU6UicdR2OvIKF/JFGGEO4Qpzmm24O0mnJE/nJX7J1ERIGzkF0/b Tl9yzTIWx4f6dW4l2izlG4a9kk5+AgSoBCspHP/YzBdNvBHItwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNR7IPAms7II9hjSj7PcFiTDYl8cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2UwMTI1ZDAtYjUxNy0z NjEyLTlmMzctYzM1YzM1ZTllM2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSBkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADai5GFnt9Cn6FtPX2j6VPHW8ttxUwYNcYD0oAv2nxlx/QSy30s5abEp yzoSC5AH472JC2UxO5gGTlZdEFA2eBth2ltseJ5SVmsew3p3Viv0EYmmzg85h2W/ pb+sSeyYNrWiIrLZk9JrHfPJnqnmp23gCnPhj0VHECxdUJ1Zd8uhMEtyu6wikT/M TMlCmpuhqoeKDTWpH/LiF16FMZfDkCWBq61vDDCmzHP3kbhPOKDiz2vS4C5jTiGu lFI11Br36YoJjajsATBWJzUVynAOyk3R7O1NJnTxk1tDoCszz0oX0zlsGZoZzf4S ZueBYe6swkD4vcSv8/osrGSAwj3xRtI= -----END CERTIFICATE-----Generated at Wed Aug 6 07:54:30 2025 by rpki-client