$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4cb760f-c3bf-3b9c-9a75-5b607160417a.roa File: d4cb760f-c3bf-3b9c-9a75-5b607160417a.roa (raw, json) Hash identifier: NcVN9WxZJqfs2Wt0xImA907KcceXCffw66KuwZUgFqY= Subject key identifier: 6B:99:E4:DB:04:5D:D1:97:E9:64:B4:67:E0:D7:EB:42:98:E4:9E:50 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0F64098EDF81E1B929250 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4cb760f-c3bf-3b9c-9a75-5b607160417a.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 64.16.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:f6:40:98:ed:f8:1e:1b:92:92:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=b6d6f8c3-4744-48e0-aba6-e1676983c23b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b5:32:8c:47:d0:fc:fe:ac:fa:6a:36:99:c5: 90:7d:27:e1:90:7d:05:db:67:20:01:16:d2:a8:34: 5b:4d:43:8b:4d:ed:83:fd:29:73:1d:18:f8:2b:1e: fc:c6:bb:d3:6c:7e:f1:bc:ff:e7:87:7a:5e:25:ee: 64:3f:29:1e:97:04:f4:91:e4:10:97:94:36:27:20: 22:97:c5:b2:50:68:6e:82:44:51:ff:27:0d:2f:e9: 80:55:ed:9e:be:6d:eb:29:aa:b8:c5:f6:02:dd:ed: 37:ac:67:ad:00:ae:9f:2d:7e:c2:75:56:34:a1:f3: 7f:eb:c6:96:6f:ef:a2:ea:09:79:5b:58:d4:32:68: a8:05:49:8b:0b:fe:f9:b9:78:87:f9:99:3b:5f:85: d9:d1:2e:bf:7c:c3:5c:b2:36:20:5e:fe:29:d6:89: 55:79:ac:07:06:5d:25:5b:fc:96:fd:c6:37:bb:b0: af:4f:10:da:b5:06:d3:27:c5:88:ec:be:c6:e1:b4: c7:64:19:29:ae:a4:13:a5:aa:14:16:8c:14:13:ff: 48:7f:02:9e:74:49:90:4f:7e:81:89:cd:4c:70:8c: 2a:da:2a:ae:a9:88:71:64:22:3e:b0:a5:41:92:95: 00:65:7c:07:ab:16:71:b6:52:47:ef:ac:80:e3:37: fb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:99:E4:DB:04:5D:D1:97:E9:64:B4:67:E0:D7:EB:42:98:E4:9E:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4cb760f-c3bf-3b9c-9a75-5b607160417a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.16.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:a2:45:40:89:4e:dc:87:46:71:e2:7f:b1:9f:59:97:5b:48: 62:c6:31:c2:d4:20:1f:0d:99:a9:d6:30:1d:8d:f1:6a:a0:a9: db:e8:68:89:73:4d:1f:d0:3d:eb:26:73:68:19:bc:6c:c7:e5: 33:04:f6:84:c6:fe:9a:15:c1:cf:89:e5:9d:70:34:e9:07:de: 4c:66:7f:fc:8e:0c:ca:bf:e5:32:e3:56:90:d7:31:bc:88:02: 52:55:82:bb:88:d7:f7:89:5f:19:4d:10:d4:00:6e:bd:e0:39: f3:b2:4c:7b:87:f1:b7:b6:85:b2:c9:07:7f:3d:22:88:0a:06: d3:66:2a:b4:1f:22:b3:30:6b:e7:51:7d:68:42:8d:ff:1c:22: aa:9a:c6:21:3b:77:b8:e7:a5:64:28:eb:6c:d2:05:5b:e0:ab: 5f:59:47:6d:5d:e0:d6:80:73:88:b8:df:99:17:f9:13:b8:ba: aa:76:e4:19:46:e2:76:31:5d:32:42:55:fa:3b:4e:02:95:50: af:9f:d7:ab:ae:3c:99:e3:5a:4c:56:d1:4d:66:23:f0:47:92: a0:85:d8:42:a1:e5:2f:37:75:16:4b:af:7d:3e:08:41:e8:72: 72:c9:77:17:1f:cf:a7:6e:34:84:cd:a5:b1:cb:ff:a8:14:cf: 2f:99:cb:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoPZAmO34HhuSklAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YjZkNmY4YzMtNDc0NC00OGUwLWFiYTYtZTE2NzY5ODNjMjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirUyjEfQ/P6s+mo2mcWQfSfhkH0F22cgARbS qDRbTUOLTe2D/SlzHRj4Kx78xrvTbH7xvP/nh3peJe5kPykelwT0keQQl5Q2JyAi l8WyUGhugkRR/ycNL+mAVe2evm3rKaq4xfYC3e03rGetAK6fLX7CdVY0ofN/68aW b++i6gl5W1jUMmioBUmLC/75uXiH+Zk7X4XZ0S6/fMNcsjYgXv4p1olVeawHBl0l W/yW/cY3u7CvTxDatQbTJ8WI7L7G4bTHZBkprqQTpaoUFowUE/9IfwKedEmQT36B ic1McIwq2iquqYhxZCI+sKVBkpUAZXwHqxZxtlJH76yA4zf79QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGuZ5NsEXdGX6WS0Z+DX60KY5J5QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDRjYjc2MGYtYzNiZi0z YjljLTlhNzUtNWI2MDcxNjA0MTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQBCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOiRUCJTtyHRnHif7GfWZdbSGLGMcLUIB8NmanWMB2N8WqgqdvoaIlz TR/QPesmc2gZvGzH5TME9oTG/poVwc+J5Z1wNOkH3kxmf/yODMq/5TLjVpDXMbyI AlJVgruI1/eJXxlNENQAbr3gOfOyTHuH8be2hbLJB389IogKBtNmKrQfIrMwa+dR fWhCjf8cIqqaxiE7d7jnpWQo62zSBVvgq19ZR21d4NaAc4i435kX+RO4uqp25BlG 4nYxXTJCVfo7TgKVUK+f16uuPJnjWkxW0U1mI/BHkqCF2EKh5S83dRZLr30+CEHo cnLJdxcfz6duNITNpbHL/6gUzy+Zy4M= -----END CERTIFICATE-----Generated at Wed Aug 6 09:31:28 2025 by rpki-client