$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ebdcccb-bc36-3b12-9fb9-dc02a2134594.roa File: 8ebdcccb-bc36-3b12-9fb9-dc02a2134594.roa (raw, json) Hash identifier: j92WfsSJehKxm77Cb02g6WjwQxup0Bb1yHgzhbUdMZo= Subject key identifier: B6:40:38:86:41:DC:12:2D:D4:76:40:25:23:21:C0:8D:1D:F1:D6:46 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A101E96F9DA47B21E5F000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ebdcccb-bc36-3b12-9fb9-dc02a2134594.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 216.205.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:01:e9:6f:9d:a4:7b:21:e5:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=3abb9641-dadb-47e8-bd08-db45a3ec6113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:92:3e:7f:4d:83:64:5c:25:72:a2:49:5d:0b: 69:00:c3:00:88:dc:fa:7d:e7:8e:8c:cf:2b:38:61: b5:31:a9:9a:13:79:28:30:7a:48:4c:9e:39:1e:3f: 98:0f:96:ab:c5:ab:b1:a7:66:4a:a5:3f:1c:06:89: 9e:67:97:23:70:4d:09:a2:ae:64:f8:d2:c1:28:4c: 55:b9:c4:5a:4f:5b:69:6c:00:cc:58:9f:64:47:ba: 2a:c3:f6:9f:30:16:bc:3b:c7:3b:62:9a:6f:f2:a6: 48:a0:9d:5a:b4:b8:c6:35:70:b4:8e:98:70:38:39: 71:7a:ad:a3:7b:eb:0b:83:75:16:b0:80:6e:ac:77: b6:41:52:49:54:b3:1b:49:24:51:ca:65:6d:c6:03: ab:4a:bc:e5:f7:8a:9f:bf:26:76:30:9e:f6:83:22: 30:45:d4:e8:a5:91:23:55:c1:2a:3b:ba:04:5b:a3: 74:74:89:5a:a6:a8:fc:07:57:c7:ca:6b:fa:eb:ef: f6:13:e7:6f:80:51:76:47:64:d5:d8:b5:4f:7c:cc: 5f:96:1c:5d:83:ae:23:9e:a3:bd:fd:dd:67:98:b6: 60:41:a6:33:8c:50:4c:29:39:65:b7:ec:cb:ab:cd: 74:b2:8d:3f:ef:61:cb:43:c3:c6:13:56:7f:f2:93: 36:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:40:38:86:41:DC:12:2D:D4:76:40:25:23:21:C0:8D:1D:F1:D6:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ebdcccb-bc36-3b12-9fb9-dc02a2134594.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.205.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:24:17:4c:b9:7f:99:65:c6:eb:d7:f3:40:01:7f:f1:52:9d: ad:f1:8b:f2:f5:60:c7:55:1d:cb:e2:a0:3f:b9:54:98:55:31: 46:d8:f7:a5:41:92:bb:87:7d:c4:a2:1c:4d:8a:35:f2:d3:d9: 5b:a3:4b:37:4e:37:d1:39:70:f0:9d:5c:9d:f5:c7:3f:90:b2: f8:27:20:68:8d:53:b2:84:04:4f:3a:3b:10:7d:98:38:63:30: 08:be:51:cf:2b:f8:0b:3e:55:a1:f4:7d:4c:30:b3:f9:01:37: d1:f3:38:88:43:30:50:1a:66:6d:79:95:de:83:1a:77:4c:8c: 49:bf:4f:49:1a:44:28:72:dc:f5:e7:05:fc:d1:31:d7:9a:15: b3:df:42:18:74:7d:2f:a8:ad:2f:15:44:8f:6b:60:56:38:2c: 0a:59:85:57:28:cc:fd:8d:09:39:cc:7b:59:5e:9a:6a:b9:fe: 0a:51:96:5b:f7:c8:da:1e:43:06:1b:3c:d4:68:09:38:28:78: 43:4a:1b:df:e8:12:4d:79:99:2b:18:cd:dd:d7:c1:42:83:49: 20:37:36:9a:2d:79:d7:83:7e:b8:54:7a:b3:85:35:b0:90:c2: 02:6c:6f:4f:52:d6:c6:26:90:19:68:f6:6e:a9:e2:40:41:9a: 37:50:b3:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoQHpb52keyHl8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk M2FiYjk2NDEtZGFkYi00N2U4LWJkMDgtZGI0NWEzZWM2MTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZI+f02DZFwlcqJJXQtpAMMAiNz6feeOjM8r OGG1MamaE3koMHpITJ45Hj+YD5arxauxp2ZKpT8cBomeZ5cjcE0Joq5k+NLBKExV ucRaT1tpbADMWJ9kR7oqw/afMBa8O8c7Yppv8qZIoJ1atLjGNXC0jphwODlxeq2j e+sLg3UWsIBurHe2QVJJVLMbSSRRymVtxgOrSrzl94qfvyZ2MJ72gyIwRdTopZEj VcEqO7oEW6N0dIlapqj8B1fHymv66+/2E+dvgFF2R2TV2LVPfMxflhxdg64jnqO9 /d1nmLZgQaYzjFBMKTllt+zLq810so0/72HLQ8PGE1Z/8pM2xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZAOIZB3BIt1HZAJSMhwI0d8dZGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGViZGNjY2ItYmMzNi0z YjEyLTlmYjktZGMwMmEyMTM0NTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2M3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEkF0y5f5llxuvX80ABf/FSna3xi/L1YMdVHcvioD+5VJhVMUbY96VB kruHfcSiHE2KNfLT2VujSzdON9E5cPCdXJ31xz+QsvgnIGiNU7KEBE86OxB9mDhj MAi+Uc8r+As+VaH0fUwws/kBN9HzOIhDMFAaZm15ld6DGndMjEm/T0kaRChy3PXn BfzRMdeaFbPfQhh0fS+orS8VRI9rYFY4LApZhVcozP2NCTnMe1lemmq5/gpRllv3 yNoeQwYbPNRoCTgoeENKG9/oEk15mSsYzd3XwUKDSSA3NpotedeDfrhUerOFNbCQ wgJsb09S1sYmkBlo9m6p4kBBmjdQs9k= -----END CERTIFICATE-----Generated at Wed Aug 6 13:09:57 2025 by rpki-client