$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5651a50-5a4c-35cf-8826-87acd8bab02e.roa File: f5651a50-5a4c-35cf-8826-87acd8bab02e.roa (raw, json) Hash identifier: zzApw0twdrKIQgH5I9N/T4SwtYXcSLeg4dtFfDiB8jY= Subject key identifier: 8E:FD:BC:48:F3:7F:64:19:F8:2F:5D:E9:B3:75:1F:1A:29:62:CF:95 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AF7EBE85C8D1C9BC197678F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5651a50-5a4c-35cf-8826-87acd8bab02e.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 0 IP address blocks: 69.8.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:e8:5c:8d:1c:9b:c1:97:67:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=c70f9518-0de5-4a0c-b8b5-3409498b8d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9b:70:6a:14:73:65:19:2f:73:1b:46:a5:84: 6f:f9:79:7c:54:e0:b6:e2:23:ef:11:92:96:d8:c8: ed:3c:e2:b0:80:44:5a:6a:57:32:4f:33:d8:6f:f8: 97:c2:1b:00:0d:8f:38:87:11:29:77:ba:a7:b4:e3: 1f:8b:2d:fa:ba:0c:66:df:66:9f:fe:8e:ed:4a:aa: 57:50:87:8c:79:52:f3:b1:3b:9b:7a:8f:19:80:6a: 2f:3c:83:53:73:5a:6f:32:82:07:0e:6d:59:43:e6: 2b:3e:b5:b2:17:06:7c:29:79:d7:11:c3:01:39:cc: 2b:fd:66:22:b9:09:ee:ef:b7:09:ed:a0:c7:cb:e3: c3:09:82:c7:50:de:df:bd:24:10:ba:8e:c0:c3:44: c7:0d:43:46:c8:89:7a:60:76:a7:97:fc:63:10:85: 48:f0:df:8b:fd:65:2a:9c:f5:cb:58:92:f9:3d:be: 72:44:8c:57:30:78:3e:c5:e6:87:b3:a7:7d:90:b6: 68:2f:7d:01:b1:49:37:a3:be:be:ad:c1:65:90:2e: 61:eb:6f:62:7e:c0:27:3c:00:d3:98:11:50:c3:9a: 56:a8:61:d5:57:b2:8c:66:7f:52:ae:8b:76:f0:cd: 33:30:b1:34:fe:78:5a:5b:7c:3a:d2:50:72:f0:f1: 22:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:FD:BC:48:F3:7F:64:19:F8:2F:5D:E9:B3:75:1F:1A:29:62:CF:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5651a50-5a4c-35cf-8826-87acd8bab02e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.8.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:22:28:df:3f:2b:93:88:70:23:b3:19:e8:b5:9c:a6:9c:f2: 53:a3:ac:f5:a4:34:38:83:cf:ff:86:44:18:0b:86:eb:71:d4: ed:81:aa:21:08:f2:e0:d9:52:e3:09:46:7a:da:50:f3:8d:f0: 64:9a:59:29:2b:9c:a1:54:bc:58:80:01:30:ad:74:8d:73:03: d3:83:cb:95:e5:8f:a0:2a:6c:89:43:4b:3e:e2:85:f0:0e:6e: 73:63:a0:cf:ff:c6:28:63:0a:78:d6:51:52:b0:67:92:cf:92: 23:f9:7f:ee:8f:6c:ea:24:96:d9:2b:15:ec:fb:d1:95:a7:66: 36:4d:fd:8e:f1:5a:66:3d:83:c7:c1:b2:b9:05:e6:b2:d4:cc: 91:f6:0e:4f:85:2d:6f:74:48:21:59:27:7c:8f:67:be:39:7b: 7a:c7:62:45:1d:43:d0:a9:fb:71:cf:ab:54:4c:34:8b:0c:33: d2:be:9a:81:be:ac:9a:89:97:3a:af:c9:04:bf:5c:0a:dc:55: 8d:31:6a:ea:a8:76:df:97:b3:0c:15:97:d9:80:4f:10:3e:a5: c8:0a:15:d4:64:61:d1:32:ce:95:d6:88:05:3c:06:a2:10:c4: 8b:29:4c:0a:6b:3f:12:6c:be:72:74:20:b3:ff:a8:fd:29:8c: 26:eb:be:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr36+hcjRybwZdnjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk YzcwZjk1MTgtMGRlNS00YTBjLWI4YjUtMzQwOTQ5OGI4ZDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqptwahRzZRkvcxtGpYRv+Xl8VOC24iPvEZKW 2MjtPOKwgERaalcyTzPYb/iXwhsADY84hxEpd7qntOMfiy36ugxm32af/o7tSqpX UIeMeVLzsTubeo8ZgGovPINTc1pvMoIHDm1ZQ+YrPrWyFwZ8KXnXEcMBOcwr/WYi uQnu77cJ7aDHy+PDCYLHUN7fvSQQuo7Aw0THDUNGyIl6YHanl/xjEIVI8N+L/WUq nPXLWJL5Pb5yRIxXMHg+xeaHs6d9kLZoL30BsUk3o76+rcFlkC5h629ifsAnPADT mBFQw5pWqGHVV7KMZn9Srot28M0zMLE0/nhaW3w60lBy8PEipQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI79vEjzf2QZ+C9d6bN1HxopYs+VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjU2NTFhNTAtNWE0Yy0z NWNmLTg4MjYtODdhY2Q4YmFiMDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRQiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIiKN8/K5OIcCOzGei1nKac8lOjrPWkNDiDz/+GRBgLhutx1O2BqiEI 8uDZUuMJRnraUPON8GSaWSkrnKFUvFiAATCtdI1zA9ODy5Xlj6AqbIlDSz7ihfAO bnNjoM//xihjCnjWUVKwZ5LPkiP5f+6PbOokltkrFez70ZWnZjZN/Y7xWmY9g8fB srkF5rLUzJH2Dk+FLW90SCFZJ3yPZ745e3rHYkUdQ9Cp+3HPq1RMNIsMM9K+moG+ rJqJlzqvyQS/XArcVY0xauqodt+XswwVl9mATxA+pcgKFdRkYdEyzpXWiAU8BqIQ xIspTAprPxJsvnJ0ILP/qP0pjCbrvlY= -----END CERTIFICATE-----Generated at Tue Nov 4 23:41:10 2025 by rpki-client