$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/948885b0-113f-3122-b49f-9e78e50a401b.roa File: 948885b0-113f-3122-b49f-9e78e50a401b.roa (raw, json) Hash identifier: SHHoIfeHIZJD/BMZh/8PIi2+LmZLGEhhzb3aYbkwCe0= Subject key identifier: 80:3D:28:94:E4:3F:5F:F3:49:EF:FD:9A:06:8C:F2:15:ED:D8:67:2D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D4306BC20505E00D1DB84180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/948885b0-113f-3122-b49f-9e78e50a401b.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7029 IP address blocks: 64.24.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:6b:c2:05:05:e0:0d:1d:b8:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=4d6a3c32-e548-4457-8b4a-c4f55f352558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6a:28:f1:f8:07:a3:53:d2:b7:cc:34:8a:a1: b9:3b:2b:e4:2c:96:59:94:1b:be:36:de:80:41:dc: 74:0a:50:25:eb:dd:3d:99:b1:c4:89:be:57:94:09: 08:50:ba:c8:91:93:a7:eb:0b:27:5d:cd:0e:55:09: 06:ee:22:31:20:24:ac:e3:23:ed:78:76:b0:dc:7b: 39:48:ae:02:97:b1:74:23:3a:8b:db:9d:ce:3d:67: c9:a0:42:ec:f8:fb:37:6b:d6:65:af:2b:58:70:62: 9c:80:05:87:82:e2:bc:dd:dc:08:a7:67:41:ee:30: ae:53:1d:39:55:0e:95:0c:5c:b2:8d:4e:91:dc:47: 3d:ca:0f:de:3f:80:8f:46:14:74:70:8b:c9:72:b1: c5:03:0f:ae:9b:f4:70:01:50:d6:31:6c:c8:13:58: 89:2a:d5:18:61:04:a1:df:c2:36:49:79:fd:68:54: f4:e1:2a:b1:5f:74:80:f4:97:af:5a:b2:8b:c5:6b: 20:d9:a3:20:97:40:63:ce:64:4c:9b:99:72:a6:7f: 83:f5:d6:ec:52:a1:f2:33:6e:37:14:50:a8:d2:12: f3:c5:0b:c9:8a:0f:05:3f:a4:26:db:33:ab:3f:39: 56:27:93:c8:8f:f0:0e:6d:e9:88:be:12:03:30:e9: 8a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3D:28:94:E4:3F:5F:F3:49:EF:FD:9A:06:8C:F2:15:ED:D8:67:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/948885b0-113f-3122-b49f-9e78e50a401b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.24.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:7f:8e:e2:a3:b6:ea:56:fd:31:f2:e4:5a:0d:3a:53:10:0b: c4:ca:0f:df:62:72:42:49:33:fa:e6:89:1c:79:40:fb:36:e8: 41:6f:b1:60:10:f1:64:35:c2:a6:84:bb:62:7c:c8:3e:8a:8a: 7c:e6:6e:f8:3d:8c:46:91:e5:1a:2c:33:3f:c5:fe:c6:a9:20: 62:10:16:5f:c1:93:5a:2e:03:e9:24:d8:84:2e:47:39:d5:3a: b9:37:72:f9:8e:6b:f2:3b:32:08:bc:42:c8:51:e9:b3:97:c0: a4:f9:ad:fb:52:09:d4:fb:3e:b2:71:db:eb:a1:5b:6d:12:e8: a4:6e:0a:08:40:42:e4:c5:a7:bd:b9:f7:06:89:2b:c9:d7:b8: b9:88:09:a5:51:0d:dc:23:06:7f:29:4c:7d:a7:82:c9:fb:32: 99:bd:d2:eb:6d:68:ae:e0:b6:33:58:45:82:91:f2:df:a1:53: 31:5f:fd:81:83:ad:63:7c:20:e6:0b:07:4a:32:19:30:e1:4a: 70:93:b5:e8:ce:0d:4e:45:19:d8:35:a8:e8:77:de:f2:4d:0a: 90:f9:f0:92:e7:8b:23:96:1c:c0:9a:73:29:88:eb:bc:e4:85: 8d:3a:9d:e0:2b:b3:6e:3b:65:76:b8:bd:40:7a:57:2e:3f:88: cd:03:4d:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMGvCBQXgDR24QYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NGQ2YTNjMzItZTU0OC00NDU3LThiNGEtYzRmNTVmMzUyNTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmoo8fgHo1PSt8w0iqG5OyvkLJZZlBu+Nt6A Qdx0ClAl6909mbHEib5XlAkIULrIkZOn6wsnXc0OVQkG7iIxICSs4yPteHaw3Hs5 SK4Cl7F0IzqL253OPWfJoELs+Ps3a9ZlrytYcGKcgAWHguK83dwIp2dB7jCuUx05 VQ6VDFyyjU6R3Ec9yg/eP4CPRhR0cIvJcrHFAw+um/RwAVDWMWzIE1iJKtUYYQSh 38I2SXn9aFT04SqxX3SA9JevWrKLxWsg2aMgl0BjzmRMm5lypn+D9dbsUqHyM243 FFCo0hLzxQvJig8FP6Qm2zOrPzlWJ5PIj/AObemIvhIDMOmKIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIA9KJTkP1/zSe/9mgaM8hXt2GctMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTQ4ODg1YjAtMTEzZi0z MTIyLWI0OWYtOWU3OGU1MGE0MDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQBjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9/juKjtupW/THy5FoNOlMQC8TKD99ickJJM/rmiRx5QPs26EFvsWAQ 8WQ1wqaEu2J8yD6Kinzmbvg9jEaR5RosMz/F/sapIGIQFl/Bk1ouA+kk2IQuRznV Ork3cvmOa/I7Mgi8QshR6bOXwKT5rftSCdT7PrJx2+uhW20S6KRuCghAQuTFp725 9waJK8nXuLmICaVRDdwjBn8pTH2ngsn7Mpm90uttaK7gtjNYRYKR8t+hUzFf/YGD rWN8IOYLB0oyGTDhSnCTtejODU5FGdg1qOh33vJNCpD58JLniyOWHMCacymI67zk hY06neArs247ZXa4vUB6Vy4/iM0DTRc= -----END CERTIFICATE-----Generated at Tue Jul 1 06:50:43 2025 by rpki-client