$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8d8b215-6277-34f5-b33f-56bc6afdf2fe.roa File: c8d8b215-6277-34f5-b33f-56bc6afdf2fe.roa (raw, json) Hash identifier: K6BsZAL4xtWyMI17hpbEJXXdx8AaSNIXExpWPMD6x9U= Subject key identifier: B4:60:56:C8:B1:D1:0D:70:80:9A:93:9A:61:07:64:D0:82:AB:D3:6A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A497076468F657EFEB2220D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8d8b215-6277-34f5-b33f-56bc6afdf2fe.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 69.46.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:76:46:8f:65:7e:fe:b2:22:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=7758869c-5589-433a-a3a2-520b1784aa34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c3:c4:7d:44:8e:6a:58:81:c8:d3:10:14:62: 1c:dd:07:d7:09:48:ed:3b:84:fa:f5:1f:26:00:68: c5:eb:c4:de:25:3e:a0:27:5a:cd:ad:aa:10:ed:9f: 98:db:07:3d:ae:f1:20:2c:a3:3a:e5:f5:1a:a3:a4: fa:4e:0f:dd:22:dc:35:5d:59:60:3d:ae:ec:be:02: 46:72:1e:50:14:f2:5f:1f:f4:5d:13:60:f2:0b:ad: 54:f9:ee:be:3a:cf:05:03:50:20:e0:ff:4a:60:32: 2a:33:b1:b2:49:60:c2:ef:06:bc:1d:2b:1c:2e:99: da:34:99:98:c6:e1:3b:fd:cc:27:d2:fd:2d:bb:5b: 0b:e8:42:9f:11:48:ee:b2:5a:cb:1e:59:a7:a4:d4: ff:e1:cf:ab:d6:6f:a2:a6:42:a8:e6:21:8e:ec:ab: 1b:5b:6b:6d:76:c6:8b:45:95:25:a5:8c:bb:22:eb: bf:ad:ea:fd:1f:0d:a6:2e:34:a0:64:5b:07:04:7b: 81:f8:ad:03:20:54:c5:b8:d2:d1:07:4e:4e:df:a6: b6:ec:95:95:8e:2b:bf:f0:ae:70:2a:72:c0:d9:51: de:12:41:58:c8:11:e1:1d:e4:45:90:78:11:e3:59: 07:71:76:05:ad:70:e2:9c:eb:09:47:dc:a6:a1:e1: 60:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:60:56:C8:B1:D1:0D:70:80:9A:93:9A:61:07:64:D0:82:AB:D3:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8d8b215-6277-34f5-b33f-56bc6afdf2fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.46.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:65:50:55:45:d5:10:e3:65:3f:42:0c:c1:22:f5:22:e3:65: 93:50:49:88:a5:01:87:8f:6d:26:1d:53:eb:1f:7d:9f:d0:6d: b7:af:5a:c5:70:f3:a5:41:9c:43:ef:83:9e:ae:4e:bd:97:be: d7:45:9e:0c:8c:3e:cf:ad:d7:12:62:73:a8:a5:d2:78:2b:07: 6c:92:ea:a4:d9:78:c9:8f:60:90:dc:b6:bb:2a:2c:9b:fb:06: a8:ce:6e:03:02:74:21:3c:74:5a:6d:6a:87:64:82:30:da:9f: a0:c0:d3:20:17:1f:a6:2f:2e:75:4b:16:19:b2:59:7d:12:37: aa:a9:04:b4:76:61:fc:c4:d6:ee:da:15:3f:d3:56:b0:85:3e: 53:18:e5:a9:ba:89:97:80:44:a4:ef:89:b9:54:ec:7c:10:7d: 89:b0:88:c5:0b:3c:68:ee:ac:ac:47:8f:16:02:9b:1d:93:db: f8:89:95:1e:e8:42:79:aa:31:09:59:67:f1:90:74:62:f2:f5: f1:10:97:5c:78:05:2b:47:75:1d:5d:63:73:bc:cc:2c:1e:ee: 33:89:e6:f7:16:8b:89:c2:37:44:1d:77:f7:fc:e1:e2:20:93: 41:70:c3:48:68:f3:93:87:af:bb:a8:5e:4c:c3:dc:c2:08:b1: 1a:9c:1e:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHZGj2V+/rIiDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk Nzc1ODg2OWMtNTU4OS00MzNhLWEzYTItNTIwYjE3ODRhYTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMPEfUSOaliByNMQFGIc3QfXCUjtO4T69R8m AGjF68TeJT6gJ1rNraoQ7Z+Y2wc9rvEgLKM65fUao6T6Tg/dItw1XVlgPa7svgJG ch5QFPJfH/RdE2DyC61U+e6+Os8FA1Ag4P9KYDIqM7GySWDC7wa8HSscLpnaNJmY xuE7/cwn0v0tu1sL6EKfEUjuslrLHlmnpNT/4c+r1m+ipkKo5iGO7KsbW2ttdsaL RZUlpYy7Iuu/rer9Hw2mLjSgZFsHBHuB+K0DIFTFuNLRB05O36a27JWVjiu/8K5w KnLA2VHeEkFYyBHhHeRFkHgR41kHcXYFrXDinOsJR9ymoeFgOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRgVsix0Q1wgJqTmmEHZNCCq9NqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzhkOGIyMTUtNjI3Ny0z NGY1LWIzM2YtNTZiYzZhZmRmMmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRS7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVlUFVF1RDjZT9CDMEi9SLjZZNQSYilAYePbSYdU+sffZ/QbbevWsVw 86VBnEPvg56uTr2XvtdFngyMPs+t1xJic6il0ngrB2yS6qTZeMmPYJDctrsqLJv7 BqjObgMCdCE8dFptaodkgjDan6DA0yAXH6YvLnVLFhmyWX0SN6qpBLR2YfzE1u7a FT/TVrCFPlMY5am6iZeARKTviblU7HwQfYmwiMULPGjurKxHjxYCmx2T2/iJlR7o QnmqMQlZZ/GQdGLy9fEQl1x4BStHdR1dY3O8zCwe7jOJ5vcWi4nCN0Qdd/f84eIg k0Fww0ho85OHr7uoXkzD3MIIsRqcHss= -----END CERTIFICATE-----Generated at Mon Jun 30 14:55:06 2025 by rpki-client