$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2068cd47-3a57-3295-861a-6fdc88f4999a.roa File: 2068cd47-3a57-3295-861a-6fdc88f4999a.roa (raw, json) Hash identifier: cuRAEWF/uaj/wFg1go3wA/GV3VTgGBIUjMnd+Vbdl18= Subject key identifier: 76:66:1F:65:CC:8A:94:4A:CB:37:2F:20:C2:AD:9B:8B:E2:AD:CE:19 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF5A6749792B880F01A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2068cd47-3a57-3295-861a-6fdc88f4999a.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 74.8.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f5:a6:74:97:92:b8:80:f0:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=c590fa72-e8d8-4d18-bd04-3f4e252b26a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:01:2c:1e:96:d6:ea:6f:27:38:88:fb:ab:49: 49:2e:0b:c5:00:50:48:d2:81:9c:0a:e8:a6:ca:ef: b0:ca:b0:45:36:32:a4:fe:f9:41:18:f1:64:f9:05: f6:61:b5:1d:75:18:9f:89:1e:ee:ef:b6:33:0f:59: 08:4c:5a:71:a0:67:42:31:47:14:83:c2:47:0c:21: 91:5e:e5:1a:8c:07:13:dc:f9:8a:2b:72:76:d9:14: 05:b9:58:38:ab:14:02:35:d6:87:ae:59:30:f2:15: c4:69:81:58:7f:53:e6:0a:bb:d8:df:fc:ad:1b:6b: 3c:63:26:8d:bb:37:2b:e0:01:76:4f:0a:9e:3c:d8: 7b:db:03:6e:98:95:d9:46:c4:36:07:f5:22:26:b1: d9:17:dc:17:e2:6b:02:0b:11:fe:8c:21:e4:90:28: c4:8c:52:e2:ef:a4:bc:0b:ca:93:95:51:97:67:81: e3:e0:f4:09:cf:45:f0:fe:18:bf:50:ee:4b:f2:f2: 4a:4d:f3:97:de:39:e3:f4:45:62:7f:ba:bd:38:34: 1b:e5:15:0f:72:eb:0b:ec:45:06:78:4a:2c:8d:ae: e2:1e:08:27:d1:2f:86:27:0b:52:8c:fd:f7:bc:9c: 5f:30:39:1b:81:98:f6:e9:15:aa:0a:b6:47:ae:1b: cc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:66:1F:65:CC:8A:94:4A:CB:37:2F:20:C2:AD:9B:8B:E2:AD:CE:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2068cd47-3a57-3295-861a-6fdc88f4999a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.8.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:ce:19:fc:7e:f3:ed:0a:9b:34:0b:03:87:30:67:58:a5:f6: c7:02:86:3f:23:c5:19:bb:cd:2a:d6:72:e9:9d:d5:a3:58:a9: f0:a5:4d:14:61:a5:24:96:68:4c:76:39:eb:41:d6:01:63:11: d9:24:54:0e:3a:67:da:a2:91:72:ad:01:03:69:0b:04:4c:d8: 1a:ba:7c:c2:ab:bd:50:41:66:53:bd:b2:28:4a:6c:7c:a4:b0: 86:d7:8e:bd:a6:8a:aa:08:04:f4:d8:d1:d2:02:1b:7b:e6:b6: c5:15:55:68:0e:d4:37:30:43:46:93:eb:43:5c:82:88:92:62: 10:3d:cf:fe:cb:23:d1:b3:10:ea:62:66:95:98:14:4a:3d:fc: 7c:f6:17:aa:d1:56:6c:5e:45:a6:c8:52:37:99:fb:ba:c4:41: 05:06:92:be:b3:c1:bd:6a:d5:12:4d:43:ab:c7:4a:f5:82:92: cc:bb:c0:62:03:01:34:1b:01:d6:a9:5e:8e:b0:e7:be:a4:92: 14:12:88:15:ca:b3:f5:45:45:6a:7b:1c:1a:8e:8d:75:64:5a: 75:0a:94:da:11:78:82:96:de:c9:cc:e8:6b:08:15:df:d5:70: 46:6f:7b:01:78:09:3b:b4:2e:19:ad:91:fc:a3:2d:fe:68:51: cc:8b:5b:bf -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtxXPWmdJeSuIDwGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YzU5MGZhNzItZThkOC00ZDE4LWJkMDQtM2Y0ZTI1MmIyNmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQEsHpbW6m8nOIj7q0lJLgvFAFBI0oGcCuim yu+wyrBFNjKk/vlBGPFk+QX2YbUddRifiR7u77YzD1kITFpxoGdCMUcUg8JHDCGR XuUajAcT3PmKK3J22RQFuVg4qxQCNdaHrlkw8hXEaYFYf1PmCrvY3/ytG2s8YyaN uzcr4AF2TwqePNh72wNumJXZRsQ2B/UiJrHZF9wX4msCCxH+jCHkkCjEjFLi76S8 C8qTlVGXZ4Hj4PQJz0Xw/hi/UO5L8vJKTfOX3jnj9EVif7q9ODQb5RUPcusL7EUG eEosja7iHggn0S+GJwtSjP33vJxfMDkbgZj26RWqCrZHrhvMlQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHZmH2XMipRKyzcvIMKtm4virc4ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjA2OGNkNDctM2E1Ny0z Mjk1LTg2MWEtNmZkYzg4ZjQ5OTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCSggwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAJM4Z/H7z7QqbNAsDhzBnWKX2xwKGPyPFGbvNKtZy6Z3Vo1ip8KVNFGGl JJZoTHY560HWAWMR2SRUDjpn2qKRcq0BA2kLBEzYGrp8wqu9UEFmU72yKEpsfKSw hteOvaaKqggE9NjR0gIbe+a2xRVVaA7UNzBDRpPrQ1yCiJJiED3P/ssj0bMQ6mJm lZgUSj38fPYXqtFWbF5FpshSN5n7usRBBQaSvrPBvWrVEk1Dq8dK9YKSzLvAYgMB NBsB1qlejrDnvqSSFBKIFcqz9UVFanscGo6NdWRadQqU2hF4gpbeyczoawgV39Vw Rm97AXgJO7QuGa2R/KMt/mhRzItbvw== -----END CERTIFICATE-----Generated at Fri Oct 10 19:58:23 2025 by rpki-client