$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2db5701-1c70-34d2-895b-b21eb98770cb.roa File: a2db5701-1c70-34d2-895b-b21eb98770cb.roa (raw, json) Hash identifier: a4wEP2ivLk4EfX2fCoqfkiVnyYeb3tLU/hBdHknyabw= Subject key identifier: 51:98:CC:0F:DA:22:09:69:4E:5C:D0:88:BC:52:9D:06:11:28:E7:F6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0F92D4509F36B00EEDA00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2db5701-1c70-34d2-895b-b21eb98770cb.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 68.143.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:f9:2d:45:09:f3:6b:00:ee:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=7c1d5a0e-01c9-4b17-8124-fded46e64241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3b:8c:a9:7c:82:79:eb:bf:7a:31:ea:01:99: c0:8b:16:8e:93:54:0a:13:d7:6b:ff:9c:c9:d9:9d: c7:a0:38:16:b9:d4:1b:e0:9b:8d:e9:8d:c8:ed:a5: 70:4a:b5:71:1c:37:49:87:b7:79:93:92:01:01:c6: 34:2c:7a:22:3f:ae:a3:f8:fc:27:ef:19:14:8f:57: 6e:99:7a:65:c3:bf:90:c2:7e:f1:bc:70:38:be:2a: 3b:70:21:0d:ae:56:a5:47:7c:50:4c:12:4b:17:0d: 22:5b:da:8b:1b:b6:6f:e5:86:ad:9b:c4:2c:7d:55: 37:05:39:4f:1f:b0:39:91:fe:3d:bf:af:99:0f:e8: b4:63:d9:37:a3:0c:c7:a8:d3:7e:d3:31:b4:7c:a3: 8e:a8:67:72:53:5f:2f:9b:28:17:20:83:88:0c:ac: 9f:76:0e:e6:d8:a9:05:81:e0:bc:c6:50:00:29:41: b6:48:e6:81:26:42:a9:79:48:14:4a:1c:f5:de:56: a7:fa:1d:f9:1b:21:32:68:65:f8:30:55:06:95:e4: 7b:7f:8f:66:27:35:28:a4:8e:1b:9e:1c:90:03:2a: 1c:21:79:0d:9a:84:cc:7c:03:ec:a7:38:7b:06:81: 5e:b4:0d:b7:14:fc:4c:7e:62:8a:79:31:98:cb:0e: f2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:98:CC:0F:DA:22:09:69:4E:5C:D0:88:BC:52:9D:06:11:28:E7:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2db5701-1c70-34d2-895b-b21eb98770cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 68.143.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:17:d9:34:c0:a2:15:03:90:c5:b1:80:35:92:1c:bf:7d:d3: c1:85:c2:27:50:76:72:56:01:17:7f:2a:7c:37:38:fd:66:97: 88:46:14:9a:0a:54:de:d5:3c:36:ab:60:bc:9d:ab:b2:28:79: a1:e1:d1:81:7c:94:45:b7:67:ad:f7:0f:1a:54:5c:b3:95:ca: c0:e3:f3:82:38:08:5f:a7:a2:e1:8e:19:e7:68:33:7b:ae:fc: 33:2e:83:54:39:69:d4:b4:82:40:5c:0a:20:31:52:61:b9:dc: 2b:25:7d:ee:1b:94:ba:da:ee:48:97:da:a5:76:56:39:43:89: 02:d0:2e:db:5c:8b:0f:5b:e0:ac:95:01:bd:91:a7:b5:ab:62: b9:a0:66:d9:55:fa:65:5d:6a:de:6a:b7:85:21:e5:3a:90:df: e1:0a:e0:dc:f9:0e:74:b1:d5:1c:67:7f:e1:5b:b7:f2:b7:df: 53:c9:41:d3:9c:2d:66:5f:90:87:7e:70:5a:ae:fb:48:0f:cb: 81:f6:93:5f:27:e9:75:d9:e7:dd:f2:67:14:09:d2:c3:fc:cd: a8:ea:dd:b8:7a:93:ac:49:f1:80:8d:30:1d:7e:4b:d7:6c:fe: 6e:04:a7:1d:2b:be:cc:94:98:1f:6a:d6:44:95:17:6d:e0:ba: 33:43:46:fc -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqQoPktRQnzawDu2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk N2MxZDVhMGUtMDFjOS00YjE3LTgxMjQtZmRlZDQ2ZTY0MjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTuMqXyCeeu/ejHqAZnAixaOk1QKE9dr/5zJ 2Z3HoDgWudQb4JuN6Y3I7aVwSrVxHDdJh7d5k5IBAcY0LHoiP66j+Pwn7xkUj1du mXplw7+Qwn7xvHA4vio7cCENrlalR3xQTBJLFw0iW9qLG7Zv5Yatm8QsfVU3BTlP H7A5kf49v6+ZD+i0Y9k3owzHqNN+0zG0fKOOqGdyU18vmygXIIOIDKyfdg7m2KkF geC8xlAAKUG2SOaBJkKpeUgUShz13lan+h35GyEyaGX4MFUGleR7f49mJzUopI4b nhyQAyocIXkNmoTMfAPspzh7BoFetA23FPxMfmKKeTGYyw7y3wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFGYzA/aIglpTlzQiLxSnQYRKOf2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTJkYjU3MDEtMWM3MC0z NGQyLTg5NWItYjIxZWI5ODc3MGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARI8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAIhfZNMCiFQOQxbGANZIcv33TwYXCJ1B2clYBF38qfDc4/WaXiEYUmgpU 3tU8NqtgvJ2rsih5oeHRgXyURbdnrfcPGlRcs5XKwOPzgjgIX6ei4Y4Z52gze678 My6DVDlp1LSCQFwKIDFSYbncKyV97huUutruSJfapXZWOUOJAtAu21yLD1vgrJUB vZGntatiuaBm2VX6ZV1q3mq3hSHlOpDf4Qrg3PkOdLHVHGd/4Vu38rffU8lB05wt Zl+Qh35wWq77SA/LgfaTXyfpddnn3fJnFAnSw/zNqOrduHqTrEnxgI0wHX5L12z+ bgSnHSu+zJSYH2rWRJUXbeC6M0NG/A== -----END CERTIFICATE-----Generated at Wed Aug 6 04:04:30 2025 by rpki-client