$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da9a9401-3f1f-3569-8f05-b7640211ba28.roa File: da9a9401-3f1f-3569-8f05-b7640211ba28.roa (raw, json) Hash identifier: cDksqXdcYNWQ0ezeQ6NrgREYgbxEungK0KcfqCQjnFk= Subject key identifier: 06:03:28:92:02:0C:DF:94:26:58:7A:BE:7B:64:80:77:9F:19:BD:E8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB22172EF9547C383A345C7C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da9a9401-3f1f-3569-8f05-b7640211ba28.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 7029 IP address blocks: 173.184.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:72:ef:95:47:c3:83:a3:45:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=fbe6ee85-af76-4f71-9c77-13495ed629ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4d:e7:1a:7d:18:47:eb:60:bf:73:f4:1e:fc: 75:6c:79:ca:a8:9f:2e:16:7d:5e:be:44:02:b4:4f: e8:56:bd:97:91:62:8a:47:e0:98:6e:7f:0a:9a:45: aa:c6:54:7d:d9:d0:b5:9d:01:6e:63:f0:a3:8c:0f: 92:e1:55:27:b8:3c:dc:cf:2a:49:49:d8:8f:fb:ee: ba:c4:f8:1d:d3:4b:94:2b:90:38:91:44:0f:98:ea: 91:1c:fa:a8:3d:7f:cc:8b:fe:51:a2:35:fd:e3:27: 26:d4:8f:c3:23:79:2b:2a:53:ea:78:39:5c:93:f7: f3:3f:f5:2c:13:1c:77:93:e1:55:3b:98:e7:97:d7: ce:cf:73:f0:4f:93:3e:e5:50:b7:ac:6d:1c:0a:7c: 3f:d0:33:2b:1a:54:4c:1a:79:0b:0c:0c:2e:f8:11: a8:99:b2:90:ad:6d:17:0a:40:a1:02:d6:ae:d4:df: 01:f7:bc:f6:13:56:0f:9d:a5:b8:71:d5:0f:48:39: 75:f5:3a:64:d2:62:e6:43:68:89:14:82:3d:98:12: a1:53:58:cb:d6:c7:f7:d6:a3:c1:8a:3a:5d:6a:ab: 9a:10:5e:de:d1:3d:b2:c8:ac:11:bf:af:76:ff:a4: d6:75:77:61:eb:d0:f6:c4:c8:50:bd:1f:56:84:89: ca:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:03:28:92:02:0C:DF:94:26:58:7A:BE:7B:64:80:77:9F:19:BD:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da9a9401-3f1f-3569-8f05-b7640211ba28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.184.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:2a:b9:2d:4d:7a:ab:c3:35:a5:82:a8:31:de:be:89:ad:2f: a5:d3:8e:15:d7:f0:31:e0:e3:19:10:ae:1b:24:82:2f:fc:42: 1c:bf:96:62:eb:45:e4:c6:aa:88:61:14:85:53:0b:8d:8d:e0: 2c:23:38:54:3c:29:89:e7:c4:46:f0:2e:52:10:46:34:95:0f: e7:d2:f1:c8:21:d2:31:38:5c:89:50:97:82:5b:44:c8:2f:1b: 5f:29:b5:90:d2:36:38:d8:b9:20:96:67:e1:23:86:15:e2:d2: b8:0d:5e:0d:4b:c8:c5:da:8c:99:dc:bf:b6:c6:e1:9f:c6:9f: 78:14:33:00:70:3c:e5:ed:70:f7:a8:4a:20:77:a8:d9:ef:a8: e1:bb:26:8c:f3:77:2a:c4:1e:e5:b5:42:1f:8d:b7:94:f2:75: ee:02:a5:3b:c5:92:20:5e:4c:16:86:7a:48:d7:d2:27:44:54: 33:66:55:14:49:7f:b4:e3:fb:9c:d5:4f:ca:a0:37:d5:cd:b5: f0:1e:05:45:47:74:8a:1b:89:ce:8f:60:b6:78:bc:d9:7b:93: 3c:28:26:ac:6a:e0:2c:72:57:0a:8e:b7:8a:1c:e5:64:f5:50: e3:92:92:5a:5d:53:9b:d2:37:7b:a6:4e:7d:37:d4:f6:8d:d8: 64:06:90:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIXLvlUfDg6NFx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZmJlNmVlODUtYWY3Ni00ZjcxLTljNzctMTM0OTVlZDYyOWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok3nGn0YR+tgv3P0Hvx1bHnKqJ8uFn1evkQC tE/oVr2XkWKKR+CYbn8KmkWqxlR92dC1nQFuY/CjjA+S4VUnuDzczypJSdiP++66 xPgd00uUK5A4kUQPmOqRHPqoPX/Mi/5RojX94ycm1I/DI3krKlPqeDlck/fzP/Us Exx3k+FVO5jnl9fOz3PwT5M+5VC3rG0cCnw/0DMrGlRMGnkLDAwu+BGombKQrW0X CkChAtau1N8B97z2E1YPnaW4cdUPSDl19Tpk0mLmQ2iJFII9mBKhU1jL1sf31qPB ijpdaquaEF7e0T2yyKwRv692/6TWdXdh69D2xMhQvR9WhInKLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYDKJICDN+UJlh6vntkgHefGb3oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGE5YTk0MDEtM2YxZi0z NTY5LThmMDUtYjc2NDAyMTFiYTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbjoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQquS1NeqvDNaWCqDHevomtL6XTjhXX8DHg4xkQrhskgi/8Qhy/lmLr ReTGqohhFIVTC42N4CwjOFQ8KYnnxEbwLlIQRjSVD+fS8cgh0jE4XIlQl4JbRMgv G18ptZDSNjjYuSCWZ+EjhhXi0rgNXg1LyMXajJncv7bG4Z/Gn3gUMwBwPOXtcPeo SiB3qNnvqOG7JozzdyrEHuW1Qh+Nt5Tyde4CpTvFkiBeTBaGekjX0idEVDNmVRRJ f7Tj+5zVT8qgN9XNtfAeBUVHdIobic6PYLZ4vNl7kzwoJqxq4CxyVwqOt4oc5WT1 UOOSklpdU5vSN3umTn031PaN2GQGkP8= -----END CERTIFICATE-----Generated at Wed Aug 6 10:21:38 2025 by rpki-client