$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37b59c4e-a071-35be-9c7a-4ecb0b1feb77.roa File: 37b59c4e-a071-35be-9c7a-4ecb0b1feb77.roa (raw, json) Hash identifier: /Y0JtM7qNOrmjU///FOS6C7d7ZubXdQZtA0Y+vFHq8M= Subject key identifier: 00:4E:91:F4:22:8C:8B:C1:35:16:1D:3B:60:2F:2D:38:FD:3D:52:B6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A49707CACC3876BEEDC934CB0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37b59c4e-a071-35be-9c7a-4ecb0b1feb77.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 198.14.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:7c:ac:c3:87:6b:ee:dc:93:4c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=387e5a1c-6137-42c9-816c-bcee66bc1274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:53:50:91:00:70:17:5d:b6:38:9d:7a:e1:06: 4f:32:df:88:6e:33:ff:6f:35:4a:b3:ab:0a:73:b8: 74:5a:e6:38:74:32:94:8c:5f:77:c1:51:89:8b:0d: 29:29:8c:a9:37:a9:6c:c7:6f:8a:eb:a1:ea:aa:12: ab:00:27:3f:78:0c:d2:f0:d7:d5:7b:f9:86:68:86: 7d:c5:35:3f:ba:65:35:3b:8c:12:f4:85:73:02:8e: 9b:5a:74:cb:70:b6:9e:74:34:39:83:f6:b2:f4:7c: 4d:a0:81:22:19:1f:4d:4c:e2:e7:05:dc:ea:bf:5a: 55:d4:de:a6:01:e6:61:64:b1:60:08:4a:3d:08:64: 9f:3d:ee:1e:3e:24:b2:fa:ec:6a:fa:49:e9:ec:a3: b9:c3:20:e3:a0:5b:3b:80:63:6c:3c:3f:66:06:ba: c7:ed:ff:22:b2:ae:5c:17:f8:53:73:94:64:f5:3e: fe:5e:01:64:b9:59:e3:57:44:6c:fb:88:6d:2a:91: 68:bd:3e:58:ba:ce:67:94:aa:62:1b:4a:0f:e1:24: 5d:d6:a0:66:89:f1:e8:a9:ed:e6:85:8c:da:e0:be: 3e:6f:17:2b:fc:fb:b7:c0:f7:16:a2:cc:1c:4e:78: d3:c7:3b:70:b8:a6:1a:60:e8:04:c8:20:f2:d2:ce: 33:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4E:91:F4:22:8C:8B:C1:35:16:1D:3B:60:2F:2D:38:FD:3D:52:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37b59c4e-a071-35be-9c7a-4ecb0b1feb77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 198.14.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:7f:4e:4a:47:03:19:ef:82:12:d8:e9:5f:44:92:38:ce:ed: 7f:36:87:4a:66:24:be:f2:40:9d:34:33:aa:99:62:c0:83:7a: fa:fd:99:cd:0c:06:21:6c:76:88:ce:c2:ff:6d:8e:0f:55:ca: df:1d:19:a2:30:fd:62:45:4e:39:90:a8:99:5e:23:46:67:4e: 67:96:1c:aa:cb:74:76:4e:53:d2:45:5c:04:11:52:7b:d4:a4: 76:e7:da:4f:c1:4b:5a:35:11:6d:39:a1:22:19:1b:e4:91:00: d6:40:af:a5:dd:17:0b:5d:1e:a7:c2:94:d0:ab:1f:9e:c3:c6: e8:fb:50:03:41:76:4d:b2:0f:74:b7:ca:72:63:1e:fd:d3:c4: 8a:ef:f8:3f:46:a7:bd:0a:2c:fa:c0:c0:d2:bd:0e:7b:42:05: 9f:3c:0c:36:e7:d9:d4:20:c8:e9:48:56:dc:98:82:36:2d:78: 27:ee:5f:47:64:48:6a:8e:72:8d:72:00:a4:d4:7d:e6:25:1f: a8:00:87:83:fe:24:69:fd:89:41:58:bd:9d:b8:5f:51:69:d8: 40:8d:61:70:2e:70:64:59:b0:0b:4e:c7:dd:a0:32:d8:ad:a5: 51:6c:82:67:8c:5e:78:8f:f7:9e:26:8f:2b:dd:24:b6:44:cf: 16:35:f8:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHysw4dr7tyTTLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk Mzg3ZTVhMWMtNjEzNy00MmM5LTgxNmMtYmNlZTY2YmMxMjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFNQkQBwF122OJ164QZPMt+IbjP/bzVKs6sK c7h0WuY4dDKUjF93wVGJiw0pKYypN6lsx2+K66HqqhKrACc/eAzS8NfVe/mGaIZ9 xTU/umU1O4wS9IVzAo6bWnTLcLaedDQ5g/ay9HxNoIEiGR9NTOLnBdzqv1pV1N6m AeZhZLFgCEo9CGSfPe4ePiSy+uxq+knp7KO5wyDjoFs7gGNsPD9mBrrH7f8isq5c F/hTc5Rk9T7+XgFkuVnjV0Rs+4htKpFovT5Yus5nlKpiG0oP4SRd1qBmifHoqe3m hYza4L4+bxcr/Pu3wPcWoswcTnjTxztwuKYaYOgEyCDy0s4zowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABOkfQijIvBNRYdO2AvLTj9PVK2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzdiNTljNGUtYTA3MS0z NWJlLTljN2EtNGVjYjBiMWZlYjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExg7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJB/TkpHAxnvghLY6V9EkjjO7X82h0pmJL7yQJ00M6qZYsCDevr9mc0M BiFsdojOwv9tjg9Vyt8dGaIw/WJFTjmQqJleI0ZnTmeWHKrLdHZOU9JFXAQRUnvU pHbn2k/BS1o1EW05oSIZG+SRANZAr6XdFwtdHqfClNCrH57Dxuj7UANBdk2yD3S3 ynJjHv3TxIrv+D9Gp70KLPrAwNK9DntCBZ88DDbn2dQgyOlIVtyYgjYteCfuX0dk SGqOco1yAKTUfeYlH6gAh4P+JGn9iUFYvZ24X1Fp2ECNYXAucGRZsAtOx92gMtit pVFsgmeMXniP954mjyvdJLZEzxY1+EE= -----END CERTIFICATE-----Generated at Mon Jun 30 19:27:58 2025 by rpki-client