$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9351d8e-d935-3795-a9d2-674cb6b0ca58.roa File: c9351d8e-d935-3795-a9d2-674cb6b0ca58.roa (raw, json) Hash identifier: VegYcI0e8slmr9loHtxAWiakZ81jxvI3LlTDjMdBt1M= Subject key identifier: 02:06:69:8E:64:16:1B:69:80:12:BE:0B:E1:16:B3:72:85:21:4C:6B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD668CF42641F11A96B13900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9351d8e-d935-3795-a9d2-674cb6b0ca58.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 139.55.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:8c:f4:26:41:f1:1a:96:b1:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=34e2bc09-d6e8-40b2-80a1-2b00efcc0e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:76:a1:e5:ca:5b:b5:d6:44:b2:c2:51:56:ec: 43:7a:87:5b:a3:de:05:96:e0:93:a6:cf:68:be:d5: 34:19:18:ce:d7:a3:40:2b:71:5d:46:fe:87:12:85: 69:73:63:1c:e8:5e:23:ba:f5:51:2e:30:61:4b:d5: 26:d0:86:43:d8:fd:ce:c9:e3:ba:13:c8:28:24:92: 74:8b:d3:9a:13:5b:bd:a3:46:18:2c:77:ed:e2:14: 6c:96:65:0c:2c:1a:9e:35:8d:77:ab:57:2a:68:b1: 0b:77:ab:1a:5c:93:c4:ab:49:c5:d6:db:b0:d5:14: c1:d8:c6:22:b7:df:b7:b6:f4:e4:8e:0e:58:3c:18: c1:65:81:71:4e:e4:b2:64:92:c5:7c:a4:fe:12:ba: e5:4b:d7:29:66:46:6c:8e:0c:57:38:d2:1b:b2:a5: c0:15:b9:f2:5d:37:87:ea:5f:00:77:b0:ff:23:8d: 6b:01:f6:71:f8:56:6e:1c:b2:7d:32:73:ee:f9:cc: 1e:5b:83:13:b1:14:ca:bc:31:76:14:cb:c6:11:c7: 47:9f:8f:70:20:8a:d2:d6:35:ba:af:62:7d:a1:89: b7:da:3b:ff:b9:b5:eb:de:fd:f3:24:e9:6f:8b:9e: 7c:87:c1:d4:53:56:80:65:bb:4d:94:89:59:4f:e9: 1d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:06:69:8E:64:16:1B:69:80:12:BE:0B:E1:16:B3:72:85:21:4C:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9351d8e-d935-3795-a9d2-674cb6b0ca58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 139.55.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:af:c0:3c:32:34:70:a9:3b:c6:1a:48:c3:d3:1b:6b:e8:3b: b0:a0:8a:95:00:87:2c:97:0d:45:f3:de:7a:2e:80:13:0d:d3: 32:7e:c2:5e:bb:20:a6:69:0c:ea:33:5f:71:ec:60:d6:68:12: 32:6f:59:e5:c4:b8:28:df:36:ae:5c:2b:f3:8e:0f:f9:a2:a6: 9c:86:92:4f:96:01:73:81:a5:d6:dc:33:9b:47:02:56:36:14: b3:11:0b:38:4a:b8:aa:18:34:a1:02:4d:9a:49:ec:9b:b2:8a: 21:28:1e:61:67:9f:5a:b6:77:43:27:01:d7:33:48:29:bf:23: 4c:56:6d:bd:9e:8f:17:f5:48:ea:5e:67:ab:71:6f:55:ca:8e: ad:fe:34:89:ce:f2:72:db:44:f7:24:31:59:e3:ef:f4:b4:c6: a6:ca:eb:45:9b:03:b8:b8:81:d9:21:3f:0a:75:0b:b4:78:73: 31:3e:28:65:d8:6e:34:ca:44:54:41:6d:19:29:ba:92:dc:86: bf:d8:c4:c8:f2:b9:6f:fe:03:96:1f:14:41:48:ef:e3:80:8d: e0:ae:ed:08:e6:b8:fd:50:53:52:ce:db:ca:aa:20:db:e2:fe: c8:9c:89:f2:d7:55:11:b8:44:c9:14:df:70:de:c2:0f:77:c4: 71:e5:20:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZoz0JkHxGpaxOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk MzRlMmJjMDktZDZlOC00MGIyLTgwYTEtMmIwMGVmY2MwZTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3ah5cpbtdZEssJRVuxDeodbo94FluCTps9o vtU0GRjO16NAK3FdRv6HEoVpc2Mc6F4juvVRLjBhS9Um0IZD2P3OyeO6E8goJJJ0 i9OaE1u9o0YYLHft4hRslmUMLBqeNY13q1cqaLELd6saXJPEq0nF1tuw1RTB2MYi t9+3tvTkjg5YPBjBZYFxTuSyZJLFfKT+ErrlS9cpZkZsjgxXONIbsqXAFbnyXTeH 6l8Ad7D/I41rAfZx+FZuHLJ9MnPu+cweW4MTsRTKvDF2FMvGEcdHn49wIIrS1jW6 r2J9oYm32jv/ubXr3v3zJOlvi558h8HUU1aAZbtNlIlZT+kdfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIGaY5kFhtpgBK+C+EWs3KFIUxrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzkzNTFkOGUtZDkzNS0z Nzk1LWE5ZDItNjc0Y2I2YjBjYTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDizcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyvwDwyNHCpO8YaSMPTG2voO7CgipUAhyyXDUXz3nougBMN0zJ+wl67 IKZpDOozX3HsYNZoEjJvWeXEuCjfNq5cK/OOD/mippyGkk+WAXOBpdbcM5tHAlY2 FLMRCzhKuKoYNKECTZpJ7JuyiiEoHmFnn1q2d0MnAdczSCm/I0xWbb2ejxf1SOpe Z6txb1XKjq3+NInO8nLbRPckMVnj7/S0xqbK60WbA7i4gdkhPwp1C7R4czE+KGXY bjTKRFRBbRkpupLchr/YxMjyuW/+A5YfFEFI7+OAjeCu7QjmuP1QU1LO28qqINvi /sicifLXVRG4RMkU33Dewg93xHHlIOI= -----END CERTIFICATE-----Generated at Sat Aug 23 16:25:21 2025 by rpki-client