$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a48c4031-9001-3dda-aefc-539842bcaa83.roa File: a48c4031-9001-3dda-aefc-539842bcaa83.roa (raw, json) Hash identifier: r2GgX1wSmFkrIdI8cFRJ6LeaLovBp+45n4DRLhRm0xY= Subject key identifier: 53:3C:FD:7C:F2:75:A3:CD:27:9D:4A:E6:41:B7:A5:60:7D:43:05:92 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A10930120ED82C7CB70B40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a48c4031-9001-3dda-aefc-539842bcaa83.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 54120 IP address blocks: 64.206.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:09:30:12:0e:d8:2c:7c:b7:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=f8d161b9-b4fb-4a9f-b67c-3185a3f9d6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:40:f4:d7:d2:3e:60:cd:aa:b5:57:05:f9:78: fb:50:ba:04:c7:53:72:50:0d:57:3f:17:f0:de:cc: 67:1c:c2:bd:ed:88:34:bf:2b:67:b4:80:46:cc:1e: c1:90:72:d7:a1:4e:e5:f0:20:05:33:70:d3:bb:d6: 2d:a7:2c:50:22:87:4e:dd:92:bf:44:67:88:48:79: d5:86:c5:72:a4:82:fa:81:d8:9d:7e:29:51:a9:fc: 95:a6:0d:5d:bb:19:4e:fe:cc:57:1c:39:1d:66:9e: 3d:28:46:8a:22:3e:67:17:7e:a3:ad:61:12:1f:c3: fa:bd:49:67:83:b7:b3:c1:70:5b:cd:f9:5a:18:8d: 3c:b2:7e:a5:9f:38:56:95:03:55:86:06:ae:46:5b: a5:d1:0e:66:a2:e2:63:35:25:a1:9f:26:57:52:53: aa:34:b4:d6:ae:ff:68:9a:f7:96:16:27:9a:19:54: f2:f9:20:b5:e4:ad:6b:a6:67:c2:ed:31:e5:2b:80: cb:7b:57:c3:12:6a:6f:f9:98:57:a1:eb:6f:bf:3d: a1:8a:38:17:c4:92:cd:96:70:f4:c9:32:e5:50:08: a6:58:c6:0c:16:e7:89:f9:fe:9c:19:4d:1b:58:de: 74:b2:0c:f0:bb:fd:83:c7:65:62:35:11:ed:35:68: 8e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:3C:FD:7C:F2:75:A3:CD:27:9D:4A:E6:41:B7:A5:60:7D:43:05:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a48c4031-9001-3dda-aefc-539842bcaa83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.206.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:02:d2:aa:d2:30:29:ce:a3:7d:40:f1:a8:d8:d4:5c:19:72: 00:60:82:c9:ca:5c:64:b6:b3:33:b4:19:d8:15:d8:38:86:b7: 24:f1:80:f2:9b:46:f2:b1:1b:c0:6a:68:1c:e6:49:87:26:74: a0:68:46:a9:26:cd:79:51:e8:c3:6d:06:f8:9c:a2:fe:4d:f9: 5a:03:2a:61:e9:fc:0f:73:0c:50:14:23:85:0d:f3:ab:eb:ba: d0:fd:61:37:97:0c:6a:34:a2:9b:e7:e4:90:5c:9f:0c:f9:26: 49:2c:30:a2:d1:9d:7c:f6:d3:88:f9:8b:db:62:a2:e0:c9:b5: f2:03:85:44:b7:c7:09:af:b8:7a:04:f7:49:69:b5:45:0e:45: 4a:b0:47:1f:66:c9:78:c0:5b:04:e5:27:35:68:36:81:ad:16: f0:55:54:40:9d:bd:8b:41:ab:e7:c9:25:6e:31:73:76:47:71: 67:4b:c4:1a:12:c4:a3:e2:cd:a3:3d:1e:b2:55:7a:ae:d6:4a: 53:a9:e4:18:f5:7b:34:2c:6c:65:73:ed:81:a4:f5:42:df:2c: ba:97:95:df:63:ba:46:89:ff:59:57:26:38:dc:9a:f6:7d:f6: c2:2f:9c:cb:63:ba:d5:96:f2:64:80:c6:89:6b:d9:5f:18:2d: 2b:8c:fa:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoQkwEg7YLHy3C0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZjhkMTYxYjktYjRmYi00YTlmLWI2N2MtMzE4NWEzZjlkNmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0D019I+YM2qtVcF+Xj7ULoEx1NyUA1XPxfw 3sxnHMK97Yg0vytntIBGzB7BkHLXoU7l8CAFM3DTu9YtpyxQIodO3ZK/RGeISHnV hsVypIL6gdidfilRqfyVpg1duxlO/sxXHDkdZp49KEaKIj5nF36jrWESH8P6vUln g7ezwXBbzflaGI08sn6lnzhWlQNVhgauRlul0Q5mouJjNSWhnyZXUlOqNLTWrv9o mveWFieaGVTy+SC15K1rpmfC7THlK4DLe1fDEmpv+ZhXoetvvz2hijgXxJLNlnD0 yTLlUAimWMYMFueJ+f6cGU0bWN50sgzwu/2Dx2ViNRHtNWiObQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFM8/XzydaPNJ51K5kG3pWB9QwWSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTQ4YzQwMzEtOTAwMS0z ZGRhLWFlZmMtNTM5ODQyYmNhYTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQM4nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkC0qrSMCnOo31A8ajY1FwZcgBggsnKXGS2szO0GdgV2DiGtyTxgPKb RvKxG8BqaBzmSYcmdKBoRqkmzXlR6MNtBvicov5N+VoDKmHp/A9zDFAUI4UN86vr utD9YTeXDGo0opvn5JBcnwz5JkksMKLRnXz204j5i9tiouDJtfIDhUS3xwmvuHoE 90lptUUORUqwRx9myXjAWwTlJzVoNoGtFvBVVECdvYtBq+fJJW4xc3ZHcWdLxBoS xKPizaM9HrJVeq7WSlOp5Bj1ezQsbGVz7YGk9ULfLLqXld9jukaJ/1lXJjjcmvZ9 9sIvnMtjutWW8mSAxolr2V8YLSuM+sw= -----END CERTIFICATE-----Generated at Sat Aug 23 16:03:09 2025 by rpki-client