$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8aada01-f195-3c39-b506-9b9140b28ba2.roa File: d8aada01-f195-3c39-b506-9b9140b28ba2.roa (raw, json) Hash identifier: ILuONBawaNmIfy2Zzzr+vTuyV3qA4KHuEML73xY4bLo= Subject key identifier: 86:7D:8E:5F:79:3A:64:02:24:9B:EF:E5:4B:B7:C6:6D:75:C7:4A:E1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A106B31989D618F0446EA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8aada01-f195-3c39-b506-9b9140b28ba2.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 22773 IP address blocks: 151.213.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:06:b3:19:89:d6:18:f0:44:6e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=a4419138-c823-4dec-9688-3df71dae97cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d7:29:b2:81:e4:28:b2:fa:55:31:8b:3c:1e: 8f:20:93:f6:48:b8:ac:e2:67:8d:bd:9e:1d:ad:f9: cc:73:40:9b:f1:f6:44:e4:9f:a0:3f:83:da:dc:a5: c9:a0:5e:44:9d:45:c5:f3:ec:6f:57:1a:60:45:c5: b5:4b:dd:5b:0d:60:2a:c0:58:1f:bd:b2:87:bc:fa: 49:c2:88:88:a1:87:18:61:3f:58:16:b8:56:ce:25: 6d:61:88:7e:c8:09:85:21:27:54:c3:2c:d7:68:3d: 55:b1:d0:5a:3b:5d:4e:a0:2f:38:71:fe:39:ba:7f: c4:dc:3c:a4:98:ea:ed:a3:28:5a:53:cb:04:96:ff: 83:db:23:29:3f:dc:0f:d6:cc:9a:48:be:b9:71:cc: 4b:06:15:56:a2:66:d7:89:51:99:2d:07:66:8b:b9: 8c:c7:7a:74:8a:e2:3d:49:46:9a:7a:69:77:71:49: 69:6e:5b:d1:53:b9:dd:16:50:ed:3f:f0:f1:64:0a: 76:56:4f:87:fd:1f:8b:d1:de:81:8f:e6:34:d9:c8: 22:f7:68:f2:1a:24:a2:6c:eb:46:3b:d9:8d:ff:21: 85:4b:11:16:bc:f4:26:bb:0b:9b:97:89:35:dd:63: 6f:63:2c:eb:1b:db:27:af:b1:38:69:e5:1d:8c:b1: 36:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:7D:8E:5F:79:3A:64:02:24:9B:EF:E5:4B:B7:C6:6D:75:C7:4A:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8aada01-f195-3c39-b506-9b9140b28ba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:a5:e2:cf:12:a9:fd:58:59:4d:01:38:13:32:51:2e:84:12: 5b:01:7f:80:e3:d4:82:b1:94:3c:91:4a:15:51:37:49:85:6b: b4:ec:28:78:96:11:f5:f0:bd:c5:54:68:d3:f9:99:49:3a:e3: 47:41:49:a6:ec:1d:b3:0f:ba:1c:37:13:69:34:81:98:f6:94: de:5c:c2:12:3c:9f:89:02:9c:a1:04:6a:0c:7b:e7:9f:22:d3: 39:ba:71:48:b8:d4:40:ec:48:af:3c:90:5b:ee:c8:e7:d3:3e: 74:5e:3e:5a:4b:9a:8e:1c:03:82:91:9f:55:09:1f:e7:38:8a: d8:f2:71:c0:6e:99:d3:0c:0b:0c:94:23:d5:f9:cf:5b:b6:6a: f9:29:3b:03:d5:28:2f:68:c5:5b:af:76:08:10:df:05:21:e5: 6b:b3:8d:28:d7:13:e1:93:05:c6:54:dc:12:3d:6b:92:5a:9c: 21:f3:b1:c5:59:97:62:81:7c:5d:40:54:2d:a6:7c:6f:9b:78: 88:7c:85:86:ce:6d:46:b4:09:bc:b2:87:5e:6a:3a:b8:8b:94: d6:d2:f8:a2:3c:c2:a5:be:dd:c5:ea:06:45:e4:e0:be:a6:c6: 69:89:bf:a6:5d:43:4b:44:19:5a:98:23:9b:55:cb:48:30:48: bc:9f:bf:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoQazGYnWGPBEbqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YTQ0MTkxMzgtYzgyMy00ZGVjLTk2ODgtM2RmNzFkYWU5N2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNcpsoHkKLL6VTGLPB6PIJP2SLis4meNvZ4d rfnMc0Cb8fZE5J+gP4Pa3KXJoF5EnUXF8+xvVxpgRcW1S91bDWAqwFgfvbKHvPpJ woiIoYcYYT9YFrhWziVtYYh+yAmFISdUwyzXaD1VsdBaO11OoC84cf45un/E3Dyk mOrtoyhaU8sElv+D2yMpP9wP1syaSL65ccxLBhVWombXiVGZLQdmi7mMx3p0iuI9 SUaaeml3cUlpblvRU7ndFlDtP/DxZAp2Vk+H/R+L0d6Bj+Y02cgi92jyGiSibOtG O9mN/yGFSxEWvPQmuwubl4k13WNvYyzrG9snr7E4aeUdjLE2gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZ9jl95OmQCJJvv5Uu3xm11x0rhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDhhYWRhMDEtZjE5NS0z YzM5LWI1MDYtOWI5MTQwYjI4YmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl9V+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOl4s8Sqf1YWU0BOBMyUS6EElsBf4Dj1IKxlDyRShVRN0mFa7TsKHiW EfXwvcVUaNP5mUk640dBSabsHbMPuhw3E2k0gZj2lN5cwhI8n4kCnKEEagx7558i 0zm6cUi41EDsSK88kFvuyOfTPnRePlpLmo4cA4KRn1UJH+c4itjyccBumdMMCwyU I9X5z1u2avkpOwPVKC9oxVuvdggQ3wUh5WuzjSjXE+GTBcZU3BI9a5JanCHzscVZ l2KBfF1AVC2mfG+beIh8hYbObUa0Cbyyh15qOriLlNbS+KI8wqW+3cXqBkXk4L6m xmmJv6ZdQ0tEGVqYI5tVy0gwSLyfv88= -----END CERTIFICATE-----Generated at Wed Aug 6 13:17:03 2025 by rpki-client