$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ead3d4a-2a10-3ed7-89a3-122452749973.roa File: 9ead3d4a-2a10-3ed7-89a3-122452749973.roa (raw, json) Hash identifier: cF40UzRaNBzIi9zjEYJyhMq72iw/XYIbvzXGv8Yp0ps= Subject key identifier: 0B:09:99:0F:A7:0C:C3:8E:FB:B2:24:2B:0B:14:C8:CA:38:B1:70:3E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A52A2E2D3C9075DEE3E065A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ead3d4a-2a10-3ed7-89a3-122452749973.roa Signing time: Thu 26 Jun 2025 20:05:15 +0000 ROA not before: Thu 26 Jun 2025 20:05:15 +0000 ROA not after: Wed 24 Sep 2025 20:05:15 +0000 asID: 7029 IP address blocks: 67.140.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:52:a2:e2:d3:c9:07:5d:ee:3e:06:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 26 20:05:15 2025 GMT Not After : Sep 24 20:05:15 2025 GMT Subject: CN=96e8233b-fb06-4bad-ab33-57e0a7a82e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:db:59:5f:90:f1:73:49:af:c9:8e:8c:62:93: f7:8f:3b:4a:f5:f3:cd:e9:eb:45:92:81:81:30:72: 30:8a:a8:c1:82:ca:bd:c3:a1:4c:27:4a:02:c6:51: dc:b4:8c:ac:10:9e:43:41:de:52:ca:a6:fc:a1:be: 31:7f:ac:2d:8f:53:02:81:63:01:1e:51:ff:9e:71: 71:18:42:ee:9f:49:ae:7c:f8:3a:38:3d:66:d4:93: 73:66:1e:bd:3f:78:f3:7a:ca:5d:51:94:f4:e5:77: aa:6b:1c:3c:9c:5d:d9:50:e0:83:9a:2e:19:2f:b9: 1c:3e:c1:5e:48:ff:04:26:a8:9c:ff:49:73:54:bb: c6:86:fd:fa:b9:6e:34:7a:99:b7:1c:35:25:2c:f5: be:6c:b9:b2:4a:7f:d2:32:a9:2a:e5:d1:14:d2:ec: 91:d5:5c:4b:2b:86:3e:ba:2c:9c:5c:b4:95:d3:fd: 87:37:5e:44:b2:c1:67:bd:fc:50:f7:2e:1e:1c:f5: b1:d6:d4:a2:43:85:9a:74:51:a2:d3:e8:88:08:75: a8:43:be:8e:8f:81:6e:25:96:23:35:f3:4e:f3:ea: e6:ef:5a:f4:75:b3:31:33:42:2b:0c:76:f8:5d:70: ed:25:a6:26:61:74:88:63:7f:a5:0f:2c:35:81:39: ee:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:09:99:0F:A7:0C:C3:8E:FB:B2:24:2B:0B:14:C8:CA:38:B1:70:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ead3d4a-2a10-3ed7-89a3-122452749973.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.30.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:38:8b:e8:3c:09:71:b1:69:5a:29:76:2c:6f:60:86:d0:87: 69:11:2a:3a:47:d6:a7:84:4f:13:a7:9a:10:07:a5:97:a1:dd: 6c:42:b0:f4:13:97:19:bd:23:ce:99:fb:4c:78:da:78:89:48: 82:64:f2:2f:5e:c3:cb:80:00:55:12:b5:a0:18:04:8d:91:a2: f6:c7:54:27:d7:20:a0:78:00:bd:1a:70:dc:a6:a4:92:c4:54: af:8a:2f:c5:5e:1b:c2:24:84:59:0e:fe:15:d4:83:c0:52:19: d5:7f:ac:2e:45:3b:96:82:5b:82:d9:25:98:27:23:2c:b8:2e: 9b:57:05:77:28:61:92:2e:f7:d5:14:0e:92:71:28:82:11:07: 3c:e0:87:1c:4a:f0:51:43:14:0d:ed:1e:58:e6:5e:a3:7f:78: 00:c9:38:8f:43:ea:1f:3d:c9:5a:07:e0:64:bf:d3:97:16:95: d0:04:98:a7:8b:eb:8f:5a:57:5b:47:2e:ff:b9:ab:83:d2:81: 15:ff:03:16:26:89:32:1a:68:03:a1:3e:0d:08:10:fe:3a:20: a9:23:bf:46:18:40:95:f1:94:16:51:d8:04:14:4f:35:a2:22: 53:19:89:f8:ea:5d:ab:78:fb:ba:dd:6a:b1:57:e0:a8:9d:a0: 2a:3d:25:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpSouLTyQdd7j4GWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyNjIwMDUxNVoXDTI1MDkyNDIwMDUxNVowLzEtMCsGA1UEAxMk OTZlODIzM2ItZmIwNi00YmFkLWFiMzMtNTdlMGE3YTgyZTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAittZX5Dxc0mvyY6MYpP3jztK9fPN6etFkoGB MHIwiqjBgsq9w6FMJ0oCxlHctIysEJ5DQd5Syqb8ob4xf6wtj1MCgWMBHlH/nnFx GELun0mufPg6OD1m1JNzZh69P3jzespdUZT05Xeqaxw8nF3ZUOCDmi4ZL7kcPsFe SP8EJqic/0lzVLvGhv36uW40epm3HDUlLPW+bLmySn/SMqkq5dEU0uyR1VxLK4Y+ uiycXLSV0/2HN15EssFnvfxQ9y4eHPWx1tSiQ4WadFGi0+iICHWoQ76Oj4FuJZYj NfNO8+rm71r0dbMxM0IrDHb4XXDtJaYmYXSIY3+lDyw1gTnu2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsJmQ+nDMOO+7IkKwsUyMo4sXA+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWVhZDNkNGEtMmExMC0z ZWQ3LTg5YTMtMTIyNDUyNzQ5OTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ4weMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADI4i+g8CXGxaVopdixvYIbQh2kRKjpH1qeETxOnmhAHpZeh3WxCsPQT lxm9I86Z+0x42niJSIJk8i9ew8uAAFUStaAYBI2RovbHVCfXIKB4AL0acNympJLE VK+KL8VeG8IkhFkO/hXUg8BSGdV/rC5FO5aCW4LZJZgnIyy4LptXBXcoYZIu99UU DpJxKIIRBzzghxxK8FFDFA3tHljmXqN/eADJOI9D6h89yVoH4GS/05cWldAEmKeL 649aV1tHLv+5q4PSgRX/AxYmiTIaaAOhPg0IEP46IKkjv0YYQJXxlBZR2AQUTzWi IlMZifjqXat4+7rdarFX4KidoCo9JT8= -----END CERTIFICATE-----Generated at Tue Jul 1 12:55:35 2025 by rpki-client