$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2ec763b5-b061-3b54-9a23-e7d1e0892262.roa File: 2ec763b5-b061-3b54-9a23-e7d1e0892262.roa (raw, json) Hash identifier: 9PbK+2Y7+5eEMR/10wScfC4g5MPd6Zezgf7vgb8uxhY= Subject key identifier: 23:8D:57:0D:B2:4E:89:4E:79:AB:37:75:11:F7:6D:90:06:9A:B3:1D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B328C63FF9CD3317147629480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2ec763b5-b061-3b54-9a23-e7d1e0892262.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 67.141.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:63:ff:9c:d3:31:71:47:62:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=d88f1f47-6ff2-402f-88f6-28ea38cb7c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5f:2e:af:27:09:b6:f2:95:75:25:70:82:cd: 10:9b:5c:26:b4:28:ee:fa:fd:2f:a0:f6:ce:01:82: 6f:08:e9:85:d0:7b:35:67:f3:62:2a:99:9f:e5:d5: c3:06:4b:e5:e8:c4:be:61:04:6f:9c:be:88:90:d2: 74:12:62:fe:87:47:42:e4:ef:d1:7e:34:74:1f:98: ba:56:17:a6:9d:3e:20:15:2e:79:9e:9f:30:e4:14: 17:5a:8b:ae:da:8e:1f:27:51:ef:a0:09:37:5b:9d: cb:87:b3:19:cb:79:e2:89:62:7b:e9:9c:5d:e1:cc: 13:4a:5d:66:73:cf:c9:f2:4f:3d:d9:54:da:2a:be: 1e:f4:5b:16:6d:0b:e4:8b:14:f5:83:d4:83:44:35: e9:80:df:3f:13:69:91:be:f4:f8:2e:bb:ae:50:4f: e3:44:d9:67:5f:a2:b1:f9:0c:0b:e3:ce:ef:db:b9: 07:fc:e8:85:db:9e:e8:97:ec:8d:99:19:b4:ab:d7: f3:da:0d:23:a1:73:cc:15:74:e6:d6:0b:85:70:66: ba:43:cf:29:cb:58:f6:51:bd:5b:cf:2c:5b:d6:21: b9:cb:f9:59:1b:dd:46:8d:00:73:cc:b6:53:f3:49: 33:71:a1:11:04:15:2d:0c:d1:a6:81:02:4b:e8:e4: 16:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8D:57:0D:B2:4E:89:4E:79:AB:37:75:11:F7:6D:90:06:9A:B3:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2ec763b5-b061-3b54-9a23-e7d1e0892262.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:c5:c4:f2:d3:ea:8f:0d:23:60:8a:c0:15:5a:6e:76:c8:a3: 79:d4:3e:32:39:4a:94:8f:95:22:ab:f8:46:bd:6a:68:92:0c: 02:c1:99:ed:d0:44:32:b3:46:bc:a0:af:20:da:0d:2d:6c:20: eb:74:6f:32:c9:b2:45:91:30:6f:36:8a:f1:bb:a0:5c:78:c6: ee:f5:49:7a:a3:09:00:58:7b:de:49:c2:aa:ff:73:ef:88:40: ee:40:46:96:a4:17:6d:62:80:be:43:f5:7e:58:d8:9e:db:31: 61:93:37:43:0c:80:a3:f2:dc:37:bc:66:bf:7a:24:de:ff:d6: 11:70:0b:61:b7:49:5e:65:67:97:15:2b:69:2c:1d:7a:73:20: e6:ef:9b:6c:7c:83:c6:4a:92:7e:5b:fd:74:f6:d5:e0:c4:9d: 27:d4:12:64:bb:32:60:ce:11:ad:e4:72:25:5e:18:45:92:6a: 77:44:45:c2:17:1f:f7:98:7e:0b:8f:4f:9f:f2:c9:66:25:47: 88:0e:ec:f7:ec:50:d1:ec:ed:7a:b7:f1:fc:4a:90:85:35:24: 0f:21:76:cf:c0:8e:1d:e5:74:06:d0:2b:4c:5b:17:bf:21:61: af:5f:02:c1:e4:11:91:0d:03:30:62:55:a8:ce:8e:11:6e:61: d3:6a:84:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjGP/nNMxcUdilIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk ZDg4ZjFmNDctNmZmMi00MDJmLTg4ZjYtMjhlYTM4Y2I3YzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs18urycJtvKVdSVwgs0Qm1wmtCju+v0voPbO AYJvCOmF0Hs1Z/NiKpmf5dXDBkvl6MS+YQRvnL6IkNJ0EmL+h0dC5O/RfjR0H5i6 VhemnT4gFS55np8w5BQXWouu2o4fJ1HvoAk3W53Lh7MZy3niiWJ76Zxd4cwTSl1m c8/J8k892VTaKr4e9FsWbQvkixT1g9SDRDXpgN8/E2mRvvT4LruuUE/jRNlnX6Kx +QwL487v27kH/OiF257ol+yNmRm0q9fz2g0joXPMFXTm1guFcGa6Q88py1j2Ub1b zyxb1iG5y/lZG91GjQBzzLZT80kzcaERBBUtDNGmgQJL6OQWzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCONVw2yTolOeas3dRH3bZAGmrMdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmVjNzYzYjUtYjA2MS0z YjU0LTlhMjMtZTdkMWUwODkyMjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ42MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzFxPLT6o8NI2CKwBVabnbIo3nUPjI5SpSPlSKr+Ea9amiSDALBme3Q RDKzRrygryDaDS1sIOt0bzLJskWRMG82ivG7oFx4xu71SXqjCQBYe95Jwqr/c++I QO5ARpakF21igL5D9X5Y2J7bMWGTN0MMgKPy3De8Zr96JN7/1hFwC2G3SV5lZ5cV K2ksHXpzIObvm2x8g8ZKkn5b/XT21eDEnSfUEmS7MmDOEa3kciVeGEWSandERcIX H/eYfguPT5/yyWYlR4gO7PfsUNHs7Xq38fxKkIU1JA8hds/Ajh3ldAbQK0xbF78h Ya9fAsHkEZENAzBiVajOjhFuYdNqhMc= -----END CERTIFICATE-----Generated at Fri Oct 10 22:06:07 2025 by rpki-client