$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7029d70-d556-3ba1-983d-457b97a89e40.roa File: a7029d70-d556-3ba1-983d-457b97a89e40.roa (raw, json) Hash identifier: ZSntVEIztT6KMcnbwFDdi6ZZIPLcWpyCP/AO+HF5e0k= Subject key identifier: 1C:AC:A2:CF:C4:2B:DD:35:1F:66:9A:7C:23:BB:9F:7C:4A:7D:99:F7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A480AED53ACC6B9E44DDB1680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7029d70-d556-3ba1-983d-457b97a89e40.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 27338 IP address blocks: 74.8.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:ed:53:ac:c6:b9:e4:4d:db:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=a3bcf453-46c9-44f9-b846-899bc7afec78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b1:10:c6:00:52:17:2c:c6:77:4e:18:ea:a2: f4:62:1f:b9:de:7c:c9:d0:48:69:69:2e:2f:18:2e: 18:f2:18:e7:e6:d8:5f:88:2b:36:42:a4:a0:a4:59: 2c:68:85:23:eb:29:f7:7c:fe:43:1b:68:7d:af:fe: 15:66:a7:e8:26:03:a0:cb:27:be:6a:21:82:54:d7: 7c:ad:a1:89:32:d1:5b:97:b4:93:8c:92:a1:52:2b: ef:2f:e6:84:71:66:e4:45:44:1a:3e:64:66:f1:39: 29:54:88:f3:ae:33:24:20:e5:65:b7:5b:fd:ee:04: a3:dc:e8:cf:5e:1a:2c:b4:f0:d3:5f:51:fe:63:41: 45:0f:3c:91:02:b5:97:22:94:ac:3a:68:b7:7e:42: b7:fd:dd:19:00:b3:59:5c:78:96:ab:9f:1c:9d:bb: 57:df:b5:55:23:08:75:97:80:d2:5e:61:a0:7d:40: 90:6d:02:4f:0f:cf:ba:27:1c:69:38:8c:68:c9:ce: 6f:9c:67:03:95:56:53:9c:7a:f1:9a:a8:6e:f8:ff: 8b:33:8d:80:48:06:4c:64:0f:e5:32:58:55:b3:b8: 0f:b7:11:d9:7b:8f:d2:3a:b5:80:0d:91:5e:56:e7: 51:95:3f:55:71:91:f2:4f:6e:a7:dd:c1:ed:44:d2: f0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AC:A2:CF:C4:2B:DD:35:1F:66:9A:7C:23:BB:9F:7C:4A:7D:99:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7029d70-d556-3ba1-983d-457b97a89e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.8.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:a3:ee:26:5d:bc:4d:74:41:bf:72:92:45:49:8f:06:2b:a8: 92:25:0d:76:ff:88:a0:2e:b7:b3:25:c8:f1:fc:30:ff:e3:11: ba:df:94:52:36:4e:58:f6:31:0d:d6:de:9d:5c:b3:6e:d9:5b: 82:98:f8:f1:99:c2:7b:1b:e4:10:ae:1b:13:14:5a:4d:be:ec: 79:ca:5e:86:ad:ed:b4:ee:3b:4c:b9:2f:76:ce:ed:54:6b:3b: de:b2:c5:e8:9a:c3:50:8f:29:9f:fe:a9:a7:26:35:90:14:02: bd:2f:a4:5e:f4:b3:fd:32:b9:d2:76:c5:8c:48:27:1e:b4:0e: e9:1c:c8:85:50:48:ec:64:c3:6e:2e:7f:c4:34:92:4e:dc:83: 56:7e:d7:72:81:25:ea:f5:23:dc:18:51:43:a5:81:4c:7b:d8: 63:a0:12:5d:b7:fb:ac:64:85:0c:ae:84:fa:15:19:8d:b2:76: 85:7b:bb:ba:e5:0c:65:d0:9b:96:41:d9:71:40:1b:ef:20:73: 43:4a:75:ba:f3:3b:e9:62:81:65:2d:33:c3:9b:f8:29:e6:d1: 98:df:7c:b2:70:bd:e1:af:a8:95:d4:08:1e:af:bf:5f:7e:b9: 9d:eb:dc:00:df:9a:72:fb:65:7e:fb:86:f8:73:1d:73:93:a6: 02:91:63:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICu1TrMa55E3bFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk YTNiY2Y0NTMtNDZjOS00NGY5LWI4NDYtODk5YmM3YWZlYzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrEQxgBSFyzGd04Y6qL0Yh+53nzJ0EhpaS4v GC4Y8hjn5thfiCs2QqSgpFksaIUj6yn3fP5DG2h9r/4VZqfoJgOgyye+aiGCVNd8 raGJMtFbl7STjJKhUivvL+aEcWbkRUQaPmRm8TkpVIjzrjMkIOVlt1v97gSj3OjP XhostPDTX1H+Y0FFDzyRArWXIpSsOmi3fkK3/d0ZALNZXHiWq58cnbtX37VVIwh1 l4DSXmGgfUCQbQJPD8+6JxxpOIxoyc5vnGcDlVZTnHrxmqhu+P+LM42ASAZMZA/l MlhVs7gPtxHZe4/SOrWADZFeVudRlT9VcZHyT26n3cHtRNLwxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBysos/EK901H2aafCO7n3xKfZn3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTcwMjlkNzAtZDU1Ni0z YmExLTk4M2QtNDU3Yjk3YTg5ZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgheMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJej7iZdvE10Qb9ykkVJjwYrqJIlDXb/iKAut7MlyPH8MP/jEbrflFI2 Tlj2MQ3W3p1cs27ZW4KY+PGZwnsb5BCuGxMUWk2+7HnKXoat7bTuO0y5L3bO7VRr O96yxeiaw1CPKZ/+qacmNZAUAr0vpF70s/0yudJ2xYxIJx60DukcyIVQSOxkw24u f8Q0kk7cg1Z+13KBJer1I9wYUUOlgUx72GOgEl23+6xkhQyuhPoVGY2ydoV7u7rl DGXQm5ZB2XFAG+8gc0NKdbrzO+ligWUtM8Ob+Cnm0ZjffLJwveGvqJXUCB6vv19+ uZ3r3ADfmnL7ZX77hvhzHXOTpgKRY4Q= -----END CERTIFICATE-----Generated at Sun Jun 29 15:59:05 2025 by rpki-client