$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eec145f0-2242-3162-9b24-4c63e4453493.roa File: eec145f0-2242-3162-9b24-4c63e4453493.roa (raw, json) Hash identifier: SLxhbkBDtSAzOJ2cnpx0v+q1USWryh0EjLqPEDtIctI= Subject key identifier: 11:CA:E9:7F:07:AF:6A:DE:BC:BB:22:A7:73:73:7F:9F:87:12:41:33 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0C79541384F980B980B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eec145f0-2242-3162-9b24-4c63e4453493.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 40.128.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:c7:95:41:38:4f:98:0b:98:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=dbfae93b-7832-4873-8646-ff8a940c9a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b5:63:62:95:26:f5:2d:22:e2:73:8c:77:70: ee:17:fa:fd:9b:10:c6:fb:87:c4:71:98:1b:e3:02: 2e:ab:ca:1d:34:ee:a7:71:28:7a:48:ad:6b:4d:dd: d6:31:04:bf:47:02:9f:e1:b7:d9:5a:57:60:63:e9: d7:9c:9b:47:6f:b6:87:17:03:94:41:3b:5d:f4:42: f9:ce:63:63:ce:29:01:7c:5a:54:8a:74:ed:bc:68: 85:e9:c5:ac:99:17:19:f4:50:16:ee:a1:17:14:11: 8a:ba:dc:fd:20:ae:e7:5e:35:af:7a:1f:f7:e0:61: e3:52:10:f7:e2:9c:05:e3:62:bb:de:f5:79:51:4a: d4:02:af:be:09:44:3f:cf:62:05:65:03:f3:0d:0c: 14:96:55:e3:d5:17:4c:a8:0b:f8:5e:98:e9:44:5f: 1a:6f:cf:e0:96:bd:d4:93:70:81:b1:f6:c9:7e:8b: 49:79:37:cb:53:39:b4:a8:69:43:d5:dc:e3:5a:a5: 0c:af:0d:2b:9c:03:3e:98:90:fe:47:bf:09:ae:79: d2:a6:08:5e:52:eb:69:2c:3e:75:eb:d7:d3:5f:50: f8:49:d4:9b:f9:08:4a:13:77:7f:8a:29:e9:58:3e: 66:b6:4f:ff:2e:b1:73:ce:c5:66:29:f8:38:4b:2a: 87:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CA:E9:7F:07:AF:6A:DE:BC:BB:22:A7:73:73:7F:9F:87:12:41:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eec145f0-2242-3162-9b24-4c63e4453493.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.128.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:6a:04:36:c3:48:ed:20:d9:bf:a3:95:c5:2b:71:83:40:a9: 44:35:41:53:cd:c7:c0:8d:71:03:56:a1:11:ee:aa:84:75:1a: 45:14:48:0a:0b:87:7f:03:5c:63:a8:8b:24:98:4d:25:bc:e3: 4e:b3:bb:44:0c:1d:df:74:40:9d:ae:d3:bd:81:bc:74:9e:ef: a9:5a:77:8e:fd:fd:aa:ec:7f:03:b7:72:2a:f4:24:c5:79:c8: de:7b:82:13:d2:0f:aa:64:d5:37:03:b2:37:08:7d:77:d1:f3: ee:68:20:f6:e4:53:52:e7:1c:7b:d8:e7:f8:72:94:0c:44:80: 45:67:42:81:ff:39:c0:06:f6:be:b6:be:65:60:ed:58:9f:6c: 0b:b5:39:1d:07:31:ce:2f:66:ea:5c:5b:55:70:99:cd:57:04: a8:f2:3a:c0:94:f8:6c:d9:66:06:24:57:6f:85:a9:c8:7f:79: c2:5f:21:a5:31:fe:b1:b4:76:33:e0:ce:95:83:1b:69:29:98: 9f:b4:8d:c4:8a:67:7f:2c:d8:cb:dc:65:ab:79:4b:f4:71:ca: 19:28:fa:45:65:0c:7c:33:09:b1:3b:11:17:aa:54:ec:78:b9: 61:a7:81:92:df:2c:df:47:cd:a3:30:02:a3:93:32:ad:a4:32: 3b:4b:35:4d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqQoMeVQThPmAuYCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZGJmYWU5M2ItNzgzMi00ODczLTg2NDYtZmY4YTk0MGM5YTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrVjYpUm9S0i4nOMd3DuF/r9mxDG+4fEcZgb 4wIuq8odNO6ncSh6SK1rTd3WMQS/RwKf4bfZWldgY+nXnJtHb7aHFwOUQTtd9EL5 zmNjzikBfFpUinTtvGiF6cWsmRcZ9FAW7qEXFBGKutz9IK7nXjWveh/34GHjUhD3 4pwF42K73vV5UUrUAq++CUQ/z2IFZQPzDQwUllXj1RdMqAv4XpjpRF8ab8/glr3U k3CBsfbJfotJeTfLUzm0qGlD1dzjWqUMrw0rnAM+mJD+R78JrnnSpgheUutpLD51 69fTX1D4SdSb+QhKE3d/iinpWD5mtk//LrFzzsVmKfg4SyqHTwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBHK6X8Hr2revLsip3Nzf5+HEkEzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWVjMTQ1ZjAtMjI0Mi0z MTYyLTliMjQtNGM2M2U0NDUzNDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCKIAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEARGoENsNI7SDZv6OVxStxg0CpRDVBU83HwI1xA1ahEe6qhHUaRRRICguH fwNcY6iLJJhNJbzjTrO7RAwd33RAna7TvYG8dJ7vqVp3jv39qux/A7dyKvQkxXnI 3nuCE9IPqmTVNwOyNwh9d9Hz7mgg9uRTUucce9jn+HKUDESARWdCgf85wAb2vra+ ZWDtWJ9sC7U5HQcxzi9m6lxbVXCZzVcEqPI6wJT4bNlmBiRXb4WpyH95wl8hpTH+ sbR2M+DOlYMbaSmYn7SNxIpnfyzYy9xlq3lL9HHKGSj6RWUMfDMJsTsRF6pU7Hi5 YaeBkt8s30fNozACo5MyraQyO0s1TQ== -----END CERTIFICATE-----Generated at Thu Aug 7 02:04:47 2025 by rpki-client