$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99ba8f0c-ae4b-39ce-ad7b-1811926fb054.roa File: 99ba8f0c-ae4b-39ce-ad7b-1811926fb054.roa (raw, json) Hash identifier: pNR3qExYG4TeLjWLhlsa0NNFLhhNDPwCTasqfEu8K4M= Subject key identifier: 1D:02:FB:BF:80:A4:EB:BA:B4:96:01:EF:A3:B8:9A:35:37:3F:F4:07 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A480AED6729DB71CDFE6D5460 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99ba8f0c-ae4b-39ce-ad7b-1811926fb054.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 27338 IP address blocks: 74.8.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:ed:67:29:db:71:cd:fe:6d:54:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=44c7444e-a02e-4acb-9baa-ae2f29587902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fe:0e:d9:7d:78:95:19:3c:9b:3c:e4:e0:49: 47:fa:e8:ed:2c:15:13:46:66:00:f7:49:21:ee:58: 60:2b:e9:7d:c2:6d:03:ca:be:1a:29:de:a1:e2:5c: 0f:97:a1:1c:70:47:66:af:cc:2b:b7:c9:b8:4e:44: 1b:3f:d5:1b:bc:ac:8c:32:2f:94:d2:ea:57:15:c9: 85:ea:37:44:91:e4:55:aa:4d:b5:9c:15:e8:d6:c1: 60:95:da:35:6c:f1:af:86:71:7c:94:27:c6:ef:15: a1:09:01:3f:4e:26:19:3e:17:df:63:89:28:f3:9d: ed:90:e9:15:8f:a0:f4:f5:97:ec:8b:9b:0b:82:39: 9c:6f:cc:43:a9:8f:50:ac:21:e6:f6:48:a7:79:c1: 08:3e:45:e9:55:0f:21:3c:38:53:7b:a9:23:7c:b8: 88:a1:b8:36:a7:f5:11:e2:cb:2c:89:03:ec:fd:9f: 1a:e5:a3:b2:4b:e9:1f:c8:b0:65:d9:d8:ac:06:5e: 43:c6:7e:9b:b4:1a:a7:2d:db:dd:75:a7:bf:fc:46: 1e:36:a7:b4:1a:78:11:23:ca:03:53:be:eb:52:f1: 1a:4a:fc:a4:40:9c:48:69:98:e4:41:61:4c:c4:7a: 50:b0:fb:40:6c:e3:38:c5:a5:c3:34:20:51:ed:76: bb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:02:FB:BF:80:A4:EB:BA:B4:96:01:EF:A3:B8:9A:35:37:3F:F4:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99ba8f0c-ae4b-39ce-ad7b-1811926fb054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.8.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ea:bf:07:cc:76:f7:af:ce:26:63:c5:43:d6:25:93:4a:66: cb:ba:a0:11:bd:20:fb:83:db:88:b1:a1:40:81:07:66:91:92: 4a:83:65:33:bf:08:82:b7:43:9e:3b:6e:95:0c:67:27:d5:67: dd:2d:d8:55:40:8f:3a:5d:3c:90:c1:fe:17:e5:a3:d7:fa:28: b0:a7:bf:c0:5d:f1:94:34:20:2b:f7:46:5c:ec:1b:d3:4a:48: 54:3d:69:48:af:94:d6:89:f9:27:58:de:6e:47:16:67:6a:9e: f8:6c:45:2b:c5:23:2d:e3:82:de:c2:ab:51:7a:a6:a5:fd:42: d6:b4:8a:e5:cb:00:20:8f:23:cc:ad:14:c0:cd:65:b7:e0:c6: 0f:36:98:a8:e0:99:99:2d:c4:91:10:34:95:07:59:82:f8:4b: 16:b6:0f:52:91:03:3f:b0:36:ee:7f:f6:8a:9a:94:5c:64:c7: c0:35:f9:9c:50:e7:b5:ce:a0:de:83:62:40:0f:2b:5f:1c:7a: fd:2c:72:6e:7d:2a:b4:e0:30:0e:04:c5:e6:00:ca:82:0b:95: 0d:f0:c4:cf:dd:e1:13:e8:13:e0:90:f9:67:6b:ab:14:ed:5b: f9:cf:c2:48:1a:ee:25:a2:c5:f4:33:6c:04:b0:12:f0:23:32: 97:9a:32:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICu1nKdtxzf5tVGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk NDRjNzQ0NGUtYTAyZS00YWNiLTliYWEtYWUyZjI5NTg3OTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/4O2X14lRk8mzzk4ElH+ujtLBUTRmYA90kh 7lhgK+l9wm0Dyr4aKd6h4lwPl6EccEdmr8wrt8m4TkQbP9UbvKyMMi+U0upXFcmF 6jdEkeRVqk21nBXo1sFgldo1bPGvhnF8lCfG7xWhCQE/TiYZPhffY4ko853tkOkV j6D09Zfsi5sLgjmcb8xDqY9QrCHm9kinecEIPkXpVQ8hPDhTe6kjfLiIobg2p/UR 4sssiQPs/Z8a5aOyS+kfyLBl2disBl5Dxn6btBqnLdvddae//EYeNqe0GngRI8oD U77rUvEaSvykQJxIaZjkQWFMxHpQsPtAbOM4xaXDNCBR7Xa75wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0C+7+ApOu6tJYB76O4mjU3P/QHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTliYThmMGMtYWU0Yi0z OWNlLWFkN2ItMTgxMTkyNmZiMDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgiIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3qvwfMdvevziZjxUPWJZNKZsu6oBG9IPuD24ixoUCBB2aRkkqDZTO/ CIK3Q547bpUMZyfVZ90t2FVAjzpdPJDB/hflo9f6KLCnv8Bd8ZQ0ICv3RlzsG9NK SFQ9aUivlNaJ+SdY3m5HFmdqnvhsRSvFIy3jgt7Cq1F6pqX9Qta0iuXLACCPI8yt FMDNZbfgxg82mKjgmZktxJEQNJUHWYL4Sxa2D1KRAz+wNu5/9oqalFxkx8A1+ZxQ 57XOoN6DYkAPK18cev0scm59KrTgMA4ExeYAyoILlQ3wxM/d4RPoE+CQ+WdrqxTt W/nPwkga7iWixfQzbASwEvAjMpeaMpU= -----END CERTIFICATE-----Generated at Mon Jun 30 12:45:46 2025 by rpki-client