$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b49609c0-bf3e-39c7-9416-d3cf19fe8071.roa File: b49609c0-bf3e-39c7-9416-d3cf19fe8071.roa (raw, json) Hash identifier: 2FfczGZHwqTCarCc+i3wJXaOf0OzgTvDV8EVrwdB8MQ= Subject key identifier: 91:06:2C:BC:98:4F:A0:94:8D:21:89:D7:48:7E:BE:05:10:7A:51:EE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD669142C691C5EEFDC99904 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b49609c0-bf3e-39c7-9416-d3cf19fe8071.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 67.141.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:91:42:c6:91:c5:ee:fd:c9:99:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=e33c236f-d23d-4ac2-bd1b-9b89da0c49f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ec:d6:a9:7d:92:47:b3:ca:97:07:06:38:8d: 10:9a:1c:5e:20:fa:45:19:1f:58:9f:93:fa:59:21: 7a:68:b7:35:82:3d:c6:41:11:93:8b:5a:73:3f:5f: 75:1e:f4:4c:1b:15:d8:29:39:77:b2:1f:bc:dc:39: 6e:d6:cb:1f:e0:22:d8:be:f0:8b:15:b0:8d:c8:53: 90:4c:62:b0:e3:c6:81:05:ed:ea:45:87:81:cb:f1: 24:30:96:f3:a3:a8:69:75:64:bb:01:68:c8:15:a5: 94:4d:05:af:01:c1:53:16:7d:b6:2f:5a:44:d7:19: 9f:88:4f:4a:7a:f2:d8:15:49:2e:e1:e8:ac:b8:06: 4e:62:96:6e:73:e0:50:25:c9:ce:31:35:19:94:5c: 13:cc:dd:37:c3:ec:eb:4c:bd:02:8a:bc:ba:16:bb: e2:8a:e6:96:50:fd:05:01:62:59:67:9c:ad:73:d0: 46:c2:46:b1:57:80:94:61:ba:b5:7b:60:8d:85:5b: c1:41:f4:88:1e:15:26:b9:dd:e3:55:b1:67:11:00: df:6c:0f:b5:36:03:03:72:3e:d0:7d:fd:20:83:52: 53:f6:04:76:41:c4:0c:ce:e7:2f:e5:e2:88:be:6c: 5d:90:67:d9:3e:5b:ba:30:47:98:3b:84:a0:3b:ec: b7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:06:2C:BC:98:4F:A0:94:8D:21:89:D7:48:7E:BE:05:10:7A:51:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b49609c0-bf3e-39c7-9416-d3cf19fe8071.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:e4:8b:7d:49:88:a2:c4:fd:fb:32:77:29:c9:ab:19:24:6c: 7e:39:85:af:17:12:ee:12:52:f3:c5:06:e6:b6:90:6a:79:c5: 33:ec:e5:2e:92:cf:2e:82:8b:ee:f4:6c:9a:e4:1d:75:a5:b2: 10:3c:70:67:60:f0:4e:ba:f0:6f:7e:17:9b:30:e5:4f:75:8b: f5:06:38:f3:29:2e:45:a1:f7:89:f7:54:41:4c:a9:e1:53:4a: 3e:f1:4d:1d:c6:b1:01:4e:b5:d7:c7:7a:15:7c:4a:ce:ff:e8: 87:bb:8a:d8:9a:28:3f:25:68:19:3e:d4:d6:e0:92:ce:b0:ed: 41:d8:df:cf:66:f2:cd:a0:02:50:37:28:41:d2:dc:58:77:f7: e3:ac:4e:81:15:32:2d:b5:05:47:c1:cf:66:20:18:3c:38:3c: 91:af:36:c2:ec:b1:74:55:9e:63:48:08:fd:50:ca:c8:29:35: ab:cf:83:2e:0b:df:0c:8c:7a:b6:47:92:86:a5:2d:51:86:29: d2:8b:f7:98:9b:bb:f2:4c:17:c5:ec:c2:c2:1b:d3:b0:29:7e: 50:f2:b5:00:ff:b4:dc:4a:e8:52:28:4e:a0:81:d4:17:e8:5a: 1c:fc:28:40:fb:de:0a:45:ac:d7:ea:43:f7:e6:40:f8:f9:2f: 16:44:92:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZpFCxpHF7v3JmQQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk ZTMzYzIzNmYtZDIzZC00YWMyLWJkMWItOWI4OWRhMGM0OWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+zWqX2SR7PKlwcGOI0QmhxeIPpFGR9Yn5P6 WSF6aLc1gj3GQRGTi1pzP191HvRMGxXYKTl3sh+83Dlu1ssf4CLYvvCLFbCNyFOQ TGKw48aBBe3qRYeBy/EkMJbzo6hpdWS7AWjIFaWUTQWvAcFTFn22L1pE1xmfiE9K evLYFUku4eisuAZOYpZuc+BQJcnOMTUZlFwTzN03w+zrTL0Ciry6FrviiuaWUP0F AWJZZ5ytc9BGwkaxV4CUYbq1e2CNhVvBQfSIHhUmud3jVbFnEQDfbA+1NgMDcj7Q ff0gg1JT9gR2QcQMzucv5eKIvmxdkGfZPlu6MEeYO4SgO+y3LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEGLLyYT6CUjSGJ10h+vgUQelHuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjQ5NjA5YzAtYmYzZS0z OWM3LTk0MTYtZDNjZjE5ZmU4MDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ41XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPki31JiKLE/fsydynJqxkkbH45ha8XEu4SUvPFBua2kGp5xTPs5S6S zy6Ci+70bJrkHXWlshA8cGdg8E668G9+F5sw5U91i/UGOPMpLkWh94n3VEFMqeFT Sj7xTR3GsQFOtdfHehV8Ss7/6Ie7itiaKD8laBk+1Nbgks6w7UHY389m8s2gAlA3 KEHS3Fh39+OsToEVMi21BUfBz2YgGDw4PJGvNsLssXRVnmNICP1QysgpNavPgy4L 3wyMerZHkoalLVGGKdKL95ibu/JMF8XswsIb07ApflDytQD/tNxK6FIoTqCB1Bfo Whz8KED73gpFrNfqQ/fmQPj5LxZEkpk= -----END CERTIFICATE-----Generated at Sat Aug 23 13:23:10 2025 by rpki-client