$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d00a28f1-230a-3255-a993-48c56b482c51.roa File: d00a28f1-230a-3255-a993-48c56b482c51.roa (raw, json) Hash identifier: NRigs5fyhiuzwIizf1+MLUceY75xb2/O2PuIpgDnIac= Subject key identifier: 8A:08:C6:CB:95:B3:7D:67:67:FB:4B:CB:E8:2E:8C:D2:C3:ED:A6:57 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D8FA0E2E1272F07845C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d00a28f1-230a-3255-a993-48c56b482c51.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 27338 IP address blocks: 209.192.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d8:fa:0e:2e:12:72:f0:78:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=03d8d0e2-1ff5-4e41-98eb-2ee7aaeccec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3e:d3:24:02:36:fe:6f:ca:61:ac:c0:48:7f: 81:e7:be:cc:0f:ff:70:bb:74:17:99:4b:c5:f1:72: 69:ba:2d:95:4c:d1:2e:58:14:22:aa:32:0a:35:3a: 1f:6b:45:35:d6:eb:34:b1:0a:2a:6b:43:bc:ea:77: 28:75:0e:c5:cb:29:d6:b5:5f:ef:cf:86:07:5d:50: 3e:8e:b1:8f:f1:e0:40:42:e8:13:40:d2:90:5d:ad: 10:d8:01:0f:cc:fb:38:43:c6:ce:07:7d:12:31:34: a5:b6:0e:39:c1:01:d1:75:9c:a0:42:78:16:d5:ff: d6:82:77:92:0f:e7:fa:1d:4a:dc:07:fe:5b:8a:23: 28:c9:5a:8c:d7:86:f6:08:4d:5d:24:c9:17:cd:22: 8e:62:95:ce:72:e2:05:1e:d9:f3:27:2d:f3:ab:3c: 63:27:a3:9b:0b:89:f6:d2:9e:d4:b6:e5:20:a1:e1: a4:bf:e9:66:d3:24:82:c6:8c:4d:68:bc:bc:fe:89: a9:ee:94:b2:ba:2f:06:e3:f2:34:06:da:2b:50:5a: cc:f8:ea:d5:92:dc:da:fa:da:85:03:db:1b:28:42: d6:c2:ed:cc:37:2f:83:f7:1e:b1:c3:13:a9:cd:e7: 02:aa:b0:4d:d2:53:a1:4e:7a:5c:a9:52:fa:f8:c2: 4a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:08:C6:CB:95:B3:7D:67:67:FB:4B:CB:E8:2E:8C:D2:C3:ED:A6:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d00a28f1-230a-3255-a993-48c56b482c51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:17:6a:a6:61:a5:7a:96:c0:8e:7d:4f:a3:fe:34:02:8b:76: 50:4a:39:9a:39:87:e1:92:55:2a:bd:de:17:03:5b:ad:22:60: ae:b7:8b:a9:a2:21:74:07:7a:c5:b7:cc:a4:f9:56:53:8d:19: a2:cc:30:ff:ab:fd:4c:65:a0:0c:32:27:b1:4a:dd:b8:45:03: 1f:e7:f7:2e:4d:49:ea:67:54:a8:d8:d6:a0:97:09:46:9a:fd: 00:c2:49:27:6d:8a:9d:6f:8e:9c:9b:fa:b4:10:e2:5f:a3:8e: 24:90:e3:72:3d:21:6f:01:76:ce:0c:9b:cf:9c:e5:eb:94:83: c6:11:90:f9:e2:36:73:3e:f8:07:3a:a6:78:20:4b:ef:7e:12: 74:ae:18:b1:c6:8d:5d:e5:1f:f6:44:61:21:02:8d:65:4a:0c: 22:d8:8c:b7:b6:f8:16:b4:97:8b:52:0e:a9:01:95:b8:b5:b1: 8f:2f:88:58:ce:4d:a5:12:3b:ac:30:e7:22:26:53:68:13:72: 7c:b2:67:53:c9:95:66:c7:39:9f:ca:b4:af:82:35:2c:51:a3: ad:fb:b2:3e:f7:06:ec:cc:d7:58:58:2e:d7:1a:7b:67:05:6a: 15:c0:a1:69:d2:ce:56:16:43:67:2b:a7:c8:80:1c:5c:bd:7f: c9:45:ec:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNj6Di4ScvB4RcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MDNkOGQwZTItMWZmNS00ZTQxLTk4ZWItMmVlN2FhZWNjZWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT7TJAI2/m/KYazASH+B577MD/9wu3QXmUvF 8XJpui2VTNEuWBQiqjIKNTofa0U11us0sQoqa0O86ncodQ7FyynWtV/vz4YHXVA+ jrGP8eBAQugTQNKQXa0Q2AEPzPs4Q8bOB30SMTSltg45wQHRdZygQngW1f/WgneS D+f6HUrcB/5biiMoyVqM14b2CE1dJMkXzSKOYpXOcuIFHtnzJy3zqzxjJ6ObC4n2 0p7UtuUgoeGkv+lm0ySCxoxNaLy8/omp7pSyui8G4/I0BtorUFrM+OrVktza+tqF A9sbKELWwu3MNy+D9x6xwxOpzecCqrBN0lOhTnpcqVL6+MJK0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoIxsuVs31nZ/tLy+gujNLD7aZXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDAwYTI4ZjEtMjMwYS0z MjU1LWE5OTMtNDhjNTZiNDgyYzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsXaqZhpXqWwI59T6P+NAKLdlBKOZo5h+GSVSq93hcDW60iYK63i6mi IXQHesW3zKT5VlONGaLMMP+r/UxloAwyJ7FK3bhFAx/n9y5NSepnVKjY1qCXCUaa /QDCSSdtip1vjpyb+rQQ4l+jjiSQ43I9IW8Bds4Mm8+c5euUg8YRkPniNnM++Ac6 pnggS+9+EnSuGLHGjV3lH/ZEYSECjWVKDCLYjLe2+Ba0l4tSDqkBlbi1sY8viFjO TaUSO6ww5yImU2gTcnyyZ1PJlWbHOZ/KtK+CNSxRo637sj73BuzM11hYLtcae2cF ahXAoWnSzlYWQ2crp8iAHFy9f8lF7Ng= -----END CERTIFICATE-----Generated at Thu Aug 7 02:00:53 2025 by rpki-client