$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db9df8ab-2e0e-3ea2-9a79-08488cb001ab.roa File: db9df8ab-2e0e-3ea2-9a79-08488cb001ab.roa (raw, json) Hash identifier: U+lfO/8efN1vGfUKRjsuyFfAEzEAaQofefBe+9lHbe4= Subject key identifier: B2:2D:3B:3A:B2:B9:1D:45:16:DF:2A:3F:17:49:5F:08:9F:C8:99:E3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0CB1BDF099B98F74AAC00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db9df8ab-2e0e-3ea2-9a79-08488cb001ab.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 69.40.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:cb:1b:df:09:9b:98:f7:4a:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=0bd2ea81-96e2-484d-9318-fdb1f0f53d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3e:05:7a:77:68:bc:04:6d:90:3c:5b:da:94: f0:1c:b7:44:65:e0:59:70:fa:22:1e:f5:be:e5:76: aa:f8:4b:7b:98:ab:d6:44:dd:58:17:8f:5a:1b:e7: e9:73:46:bb:e5:4e:cd:43:22:b8:d5:80:1a:b0:55: 90:6c:5d:03:9b:20:38:26:7d:e7:0b:60:12:f5:fa: 46:34:2b:9d:13:f4:16:5a:11:71:1a:06:16:f5:73: ce:ee:a8:ce:da:bf:5d:a9:67:7f:07:56:51:0e:2d: b4:d1:83:aa:6d:1b:47:67:b0:11:2d:50:8b:76:45: 85:2c:e2:da:fe:44:0b:60:bf:c4:dd:92:d7:28:5a: e1:3b:29:32:cd:d1:4a:62:82:38:ba:7a:2c:89:99: 8b:91:bc:21:41:70:ea:bc:dc:b5:26:b7:f6:ca:1a: 03:f5:6f:2e:50:88:d9:a8:90:68:20:71:a4:b7:39: 4e:93:a4:f7:82:97:2b:d1:15:65:7b:78:c8:7b:a7: 87:9b:2e:d6:d4:67:e7:5c:f9:16:dc:24:60:7b:e9: 0c:5f:42:b3:f7:48:99:ff:cd:77:dd:9a:df:a0:bc: d8:06:ea:8f:f6:ba:b2:8f:80:e3:2a:2a:45:bb:66: 27:75:23:69:5a:24:70:ac:27:a1:60:de:4d:1b:38: 47:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2D:3B:3A:B2:B9:1D:45:16:DF:2A:3F:17:49:5F:08:9F:C8:99:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db9df8ab-2e0e-3ea2-9a79-08488cb001ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:f1:6c:f2:f1:fd:d7:3b:02:f0:8d:57:7d:06:70:0c:2c:02: b6:81:ab:fa:47:8b:c6:9b:d0:35:cf:14:2c:ce:a2:54:99:9e: 93:43:01:bb:74:41:96:5f:6d:c5:57:0b:4d:c1:b6:d3:33:8b: e7:ef:b6:fe:7d:68:db:ae:3d:a4:26:5e:fc:2d:ea:9d:82:13: bb:43:fe:27:6b:60:ff:44:e1:2e:ab:f7:5a:77:b4:25:8c:98: e3:4e:68:ed:21:07:38:fc:5c:2e:f9:9f:22:f7:a5:eb:25:0b: 99:cc:e6:f7:d3:21:84:5a:52:2a:a0:0d:56:ab:49:af:4a:06: 42:3d:05:09:cb:87:88:a1:32:09:91:71:37:74:04:89:02:fb: 37:fd:01:f3:1f:c4:e2:3f:b1:28:30:0e:68:bb:70:fd:b2:88: e9:b4:d1:d6:1a:b2:a4:c3:3c:f7:b6:47:c9:63:86:b1:3f:98: 3b:bb:7c:cb:bb:48:c4:dc:43:12:b2:8c:f2:76:14:f1:c3:16: 2e:f3:99:5d:bf:b3:09:48:6d:85:78:15:4a:2d:20:cd:8e:2a: fe:9f:0c:b1:6d:8c:2c:25:ac:0f:2d:b1:ac:66:7f:8a:b4:a5: 16:d4:c8:d0:44:60:39:c1:88:20:bb:01:30:a7:cc:4e:95:7d: 48:29:d2:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoMsb3wmbmPdKrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MGJkMmVhODEtOTZlMi00ODRkLTkzMTgtZmRiMWYwZjUzZDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz4FendovARtkDxb2pTwHLdEZeBZcPoiHvW+ 5Xaq+Et7mKvWRN1YF49aG+fpc0a75U7NQyK41YAasFWQbF0DmyA4Jn3nC2AS9fpG NCudE/QWWhFxGgYW9XPO7qjO2r9dqWd/B1ZRDi200YOqbRtHZ7ARLVCLdkWFLOLa /kQLYL/E3ZLXKFrhOykyzdFKYoI4unosiZmLkbwhQXDqvNy1Jrf2yhoD9W8uUIjZ qJBoIHGktzlOk6T3gpcr0RVle3jIe6eHmy7W1GfnXPkW3CRge+kMX0Kz90iZ/813 3ZrfoLzYBuqP9rqyj4DjKipFu2YndSNpWiRwrCehYN5NGzhHJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLItOzqyuR1FFt8qPxdJXwifyJnjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGI5ZGY4YWItMmUwZS0z ZWEyLTlhNzktMDg0ODhjYjAwMWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRSiQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXxbPLx/dc7AvCNV30GcAwsAraBq/pHi8ab0DXPFCzOolSZnpNDAbt0 QZZfbcVXC03BttMzi+fvtv59aNuuPaQmXvwt6p2CE7tD/idrYP9E4S6r91p3tCWM mONOaO0hBzj8XC75nyL3peslC5nM5vfTIYRaUiqgDVarSa9KBkI9BQnLh4ihMgmR cTd0BIkC+zf9AfMfxOI/sSgwDmi7cP2yiOm00dYasqTDPPe2R8ljhrE/mDu7fMu7 SMTcQxKyjPJ2FPHDFi7zmV2/swlIbYV4FUotIM2OKv6fDLFtjCwlrA8tsaxmf4q0 pRbUyNBEYDnBiCC7ATCnzE6VfUgp0mc= -----END CERTIFICATE-----Generated at Wed Aug 6 00:46:14 2025 by rpki-client