$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2064d14-b4d1-379e-9450-d4a3260c0758.roa File: d2064d14-b4d1-379e-9450-d4a3260c0758.roa (raw, json) Hash identifier: hVwJxTSjKRD+Tr2qRNC+kIcll0ksPaozPwikQhUjoCM= Subject key identifier: 65:3C:A7:68:E1:45:52:6B:1E:22:E7:05:18:D6:C7:8E:68:AF:79:90 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A101BE0D7292344CAB7C40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2064d14-b4d1-379e-9450-d4a3260c0758.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 216.195.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:01:be:0d:72:92:34:4c:ab:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=f2698548-2f93-4a02-a720-5819ce13169e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:37:4a:2b:63:c2:7e:87:7f:31:87:13:83:0e: b5:67:65:b4:cb:61:d4:f1:ac:2a:05:e6:e7:8d:c4: 30:ed:27:54:6e:19:76:98:03:92:19:02:64:ad:3d: 80:24:ca:f7:9f:90:b9:a6:4f:63:8d:1a:76:da:d4: c2:fc:66:6c:bb:b0:d9:4c:9b:08:03:05:01:c6:55: 49:76:e3:d9:e0:68:ce:38:8d:4a:f5:b6:2e:76:ff: 61:95:ed:c8:61:50:a5:94:6e:3f:a2:28:f2:d3:6d: 88:05:59:95:c8:05:9a:bf:6f:42:10:be:43:e7:7d: 14:c7:f1:30:ad:c2:49:f6:2c:0f:b5:08:04:82:b7: 93:7e:e1:99:d5:6e:5f:e7:54:f6:f8:9a:a2:c8:d6: 84:76:75:38:cf:6f:1e:ba:93:45:82:ae:50:92:c9: 38:b8:1c:31:04:43:60:66:9b:e4:14:a0:74:9f:5b: cb:a4:ff:31:5f:73:82:15:56:1e:79:b0:52:7a:4b: d5:47:c1:3d:0f:53:e9:e3:9e:eb:7a:54:e5:e6:21: 23:e7:3b:e6:78:20:d8:23:4d:b7:c0:ba:f7:49:32: 77:4c:78:39:22:e0:8e:ff:5e:47:2f:09:9c:d2:8b: 88:e0:b3:91:3a:c8:eb:e8:51:1a:82:c2:d0:10:b2: 42:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3C:A7:68:E1:45:52:6B:1E:22:E7:05:18:D6:C7:8E:68:AF:79:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2064d14-b4d1-379e-9450-d4a3260c0758.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.195.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:6f:09:33:e8:09:bf:8c:58:85:70:71:d4:c0:50:1c:6f:ce: 80:4f:6f:ba:7c:eb:09:8a:7c:46:40:bf:08:92:06:45:86:0e: f6:27:48:92:ac:a0:4a:06:3f:db:6e:56:43:3c:a5:3e:91:3b: d7:00:6a:d8:be:ec:bf:0c:c9:14:8d:07:e5:63:37:44:9d:65: 69:c5:20:ac:21:49:6d:a7:c8:bf:71:b5:9b:e3:03:b2:18:ff: 37:f1:85:cd:1d:96:8f:88:a8:f1:9c:af:9c:9f:bb:ff:bc:3f: b2:44:b7:ce:4a:8e:d4:b2:54:65:03:d4:63:8b:e9:09:cd:99: 24:99:e0:89:c9:b5:45:ce:2e:aa:3f:cc:bf:5c:e1:08:21:ed: 50:0e:3f:1f:bc:8f:3c:c0:c8:96:19:a2:55:f1:64:0b:8b:1d: d9:1a:8e:b5:fb:0e:40:07:df:bc:a1:9b:15:de:6f:29:8d:2e: 02:f7:a8:62:15:d7:1e:1b:38:bb:99:f9:11:52:4e:91:eb:51: 61:dc:9a:f6:2d:0d:2c:45:71:69:3a:2c:80:e9:8c:2a:a1:24: 80:bf:5c:25:09:db:bd:37:e5:9d:1b:b9:55:2c:dc:b5:bf:f0: 57:42:6a:c1:16:8b:f1:59:fc:50:61:3a:e2:d7:8d:f1:20:71: 67:70:ff:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoQG+DXKSNEyrfEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZjI2OTg1NDgtMmY5My00YTAyLWE3MjAtNTgxOWNlMTMxNjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDdKK2PCfod/MYcTgw61Z2W0y2HU8awqBebn jcQw7SdUbhl2mAOSGQJkrT2AJMr3n5C5pk9jjRp22tTC/GZsu7DZTJsIAwUBxlVJ duPZ4GjOOI1K9bYudv9hle3IYVCllG4/oijy022IBVmVyAWav29CEL5D530Ux/Ew rcJJ9iwPtQgEgreTfuGZ1W5f51T2+JqiyNaEdnU4z28eupNFgq5Qksk4uBwxBENg ZpvkFKB0n1vLpP8xX3OCFVYeebBSekvVR8E9D1Pp457relTl5iEj5zvmeCDYI023 wLr3STJ3THg5IuCO/15HLwmc0ouI4LOROsjr6FEagsLQELJChQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGU8p2jhRVJrHiLnBRjWx45or3mQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDIwNjRkMTQtYjRkMS0z NzllLTk0NTAtZDRhMzI2MGMwNzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2MPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFvCTPoCb+MWIVwcdTAUBxvzoBPb7p86wmKfEZAvwiSBkWGDvYnSJKs oEoGP9tuVkM8pT6RO9cAati+7L8MyRSNB+VjN0SdZWnFIKwhSW2nyL9xtZvjA7IY /zfxhc0dlo+IqPGcr5yfu/+8P7JEt85KjtSyVGUD1GOL6QnNmSSZ4InJtUXOLqo/ zL9c4Qgh7VAOPx+8jzzAyJYZolXxZAuLHdkajrX7DkAH37yhmxXebymNLgL3qGIV 1x4bOLuZ+RFSTpHrUWHcmvYtDSxFcWk6LIDpjCqhJIC/XCUJ27035Z0buVUs3LW/ 8FdCasEWi/FZ/FBhOuLXjfEgcWdw/6I= -----END CERTIFICATE-----Generated at Wed Aug 6 09:39:05 2025 by rpki-client