$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b43e0704-5fd9-36d6-bb1d-c29135157f29.roa File: b43e0704-5fd9-36d6-bb1d-c29135157f29.roa (raw, json) Hash identifier: YsjRJ9quHfp55nDRdDBKC+InvVMIibsvSLCxhKzH0ac= Subject key identifier: CE:AA:E8:FF:13:A7:3C:4D:76:FB:6C:94:8A:AF:40:B8:9F:1E:28:86 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D105675A1BF9E1FA3780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b43e0704-5fd9-36d6-bb1d-c29135157f29.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 209.162.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d1:05:67:5a:1b:f9:e1:fa:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=0d809bf8-78c5-4dca-8c2c-93daa26a27e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d2:e2:e5:61:d1:41:6f:cb:79:15:9f:98:ee: e8:69:f3:45:7a:81:bb:71:db:72:44:85:46:6d:92: 5e:58:19:e6:78:a4:ff:bb:b9:e7:7c:21:76:54:a2: 69:38:9c:3f:44:74:dd:4b:76:53:25:8e:68:68:a7: 1b:63:6f:ee:1c:7a:79:bd:3e:05:48:4b:40:b2:e6: a3:04:18:22:52:c4:e9:12:ef:b5:32:72:1e:e1:30: a6:12:c3:44:92:ec:90:2d:52:31:3d:68:4e:8e:70: f7:b5:f4:c5:7e:9a:6d:08:af:ae:dd:5b:9d:ef:c9: cb:b9:de:a1:1a:37:cb:2c:cd:7c:84:00:ed:f7:f5: f3:84:ad:4a:04:4d:f1:b1:ed:e2:d1:e8:18:95:39: e0:b6:82:ce:13:39:da:26:4e:be:f7:23:20:f4:14: 90:b2:3d:9f:a6:76:93:54:63:2e:08:ca:27:20:cb: d7:fb:e4:d9:41:08:13:bb:d7:4d:3a:6f:fa:ed:af: 81:13:64:1b:2e:3d:8e:14:e0:79:72:59:c3:7d:c2: 63:6a:7f:21:20:54:1f:69:6e:eb:ea:a4:d6:26:0e: 39:4c:bd:1b:55:9f:77:98:e4:c3:10:0c:65:2a:f2: 91:16:7d:c8:85:c1:31:45:95:49:57:4a:17:10:d9: 3a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AA:E8:FF:13:A7:3C:4D:76:FB:6C:94:8A:AF:40:B8:9F:1E:28:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b43e0704-5fd9-36d6-bb1d-c29135157f29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.162.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:de:a4:a8:d8:0a:f9:48:f5:43:9b:2f:06:6f:81:d0:bc:d9: a1:31:77:60:64:19:08:97:57:b6:26:c2:d5:f6:25:ad:91:9d: b1:8b:1c:d0:60:f1:6d:b4:af:bf:de:71:28:98:9d:95:b2:87: 85:a1:88:6a:47:ac:68:46:5e:45:84:24:90:b2:6e:0a:60:0a: 37:76:a8:d0:72:84:41:79:bf:d3:30:0a:ec:05:a8:e7:3f:d4: e1:76:87:8c:8b:3a:ad:d7:e6:c3:df:bd:bf:d5:71:bb:e7:ac: b5:8c:f6:e6:67:fd:de:f3:45:23:0f:01:58:85:b1:6b:7b:6e: 2e:c4:6c:07:d1:47:e8:3f:45:67:8b:4a:94:97:70:0b:b0:a4: 23:1d:03:82:f3:3c:3d:fb:84:cd:24:f0:ac:75:a4:7d:21:f5: 47:6b:ae:a8:05:89:aa:1f:24:5b:cd:6f:bd:cc:14:78:14:63: bb:b8:92:1a:82:e1:17:a5:e2:62:e4:77:45:37:e1:28:d2:3c: 7d:2b:69:c8:f3:17:07:1e:b5:66:1e:5e:3d:63:89:3b:11:4e: d5:24:1b:51:9c:84:5b:dd:ea:76:bf:fc:87:f0:5b:68:a9:fe: 89:07:8e:ed:3b:ad:88:04:93:81:8c:da:a2:c9:35:39:fe:fc: 1d:6a:03:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNEFZ1ob+eH6N4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MGQ4MDliZjgtNzhjNS00ZGNhLThjMmMtOTNkYWEyNmEyN2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9Li5WHRQW/LeRWfmO7oafNFeoG7cdtyRIVG bZJeWBnmeKT/u7nnfCF2VKJpOJw/RHTdS3ZTJY5oaKcbY2/uHHp5vT4FSEtAsuaj BBgiUsTpEu+1MnIe4TCmEsNEkuyQLVIxPWhOjnD3tfTFfpptCK+u3Vud78nLud6h GjfLLM18hADt9/XzhK1KBE3xse3i0egYlTngtoLOEznaJk6+9yMg9BSQsj2fpnaT VGMuCMonIMvX++TZQQgTu9dNOm/67a+BE2QbLj2OFOB5clnDfcJjan8hIFQfaW7r 6qTWJg45TL0bVZ93mOTDEAxlKvKRFn3IhcExRZVJV0oXENk69wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6q6P8TpzxNdvtslIqvQLifHiiGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjQzZTA3MDQtNWZkOS0z NmQ2LWJiMWQtYzI5MTM1MTU3ZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0aIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLepKjYCvlI9UObLwZvgdC82aExd2BkGQiXV7YmwtX2Ja2RnbGLHNBg 8W20r7/ecSiYnZWyh4WhiGpHrGhGXkWEJJCybgpgCjd2qNByhEF5v9MwCuwFqOc/ 1OF2h4yLOq3X5sPfvb/VcbvnrLWM9uZn/d7zRSMPAViFsWt7bi7EbAfRR+g/RWeL SpSXcAuwpCMdA4LzPD37hM0k8Kx1pH0h9UdrrqgFiaofJFvNb73MFHgUY7u4khqC 4Rel4mLkd0U34SjSPH0racjzFwcetWYeXj1jiTsRTtUkG1GchFvd6na//IfwW2ip /okHju07rYgEk4GM2qLJNTn+/B1qA8I= -----END CERTIFICATE-----Generated at Wed Aug 6 14:22:55 2025 by rpki-client