$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4c77906-cf54-3238-9b43-d1a9cc331c60.roa File: c4c77906-cf54-3238-9b43-d1a9cc331c60.roa (raw, json) Hash identifier: Ufx5ucY4EzwwenqAdvrD6qSAi8Pr37oyQRKl+XNbNto= Subject key identifier: 98:4F:A9:D9:87:83:8D:CB:45:D7:33:C5:0A:9B:99:EC:CB:A7:03:F1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3A7FCA9CE3EF479CB840 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4c77906-cf54-3238-9b43-d1a9cc331c60.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 64.115.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3a:7f:ca:9c:e3:ef:47:9c:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=bbcce8ba-c82f-45c8-adbb-67a03f3f5bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:25:88:c0:a3:16:1d:69:b8:65:c3:b5:d4:63: 94:5d:cd:de:79:b3:30:50:64:ed:a2:89:88:c1:22: 35:20:f8:13:50:9d:a9:2a:a9:6c:74:86:b0:a0:14: b3:6d:18:83:f0:47:8c:42:31:ba:2c:08:bf:65:e2: 8d:ee:3d:d8:f7:c9:78:b7:ef:6f:28:ab:92:88:32: 55:65:4a:5e:3b:78:9b:61:1b:f2:6a:61:e4:e6:35: 49:85:9f:e3:cf:e3:56:9e:17:d5:04:56:0a:71:19: 83:26:a5:65:ef:0d:ee:33:a4:58:a2:45:eb:eb:f2: 5b:9e:51:18:5b:67:96:cb:43:d4:e2:64:80:4d:59: 69:22:1a:0f:c3:9f:a3:84:c5:03:e6:da:d0:dc:bc: ae:9f:59:72:2d:0e:15:7d:e9:76:1d:77:a1:13:4b: 4e:60:d4:cc:d4:6c:d7:2d:42:b7:a3:e1:b2:e1:87: 8e:2a:fb:0f:97:6f:23:ed:49:05:bf:29:15:c6:82: 50:db:28:fb:3f:70:1d:70:b1:34:37:2d:04:b3:36: a6:77:0f:67:c2:95:f6:fb:88:62:93:1c:29:ad:55: 02:5d:2f:9c:b6:fd:75:1e:ca:08:e9:f1:ec:85:f7: 95:04:83:75:11:4d:b0:63:8f:29:37:e0:47:cd:f5: 47:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4F:A9:D9:87:83:8D:CB:45:D7:33:C5:0A:9B:99:EC:CB:A7:03:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4c77906-cf54-3238-9b43-d1a9cc331c60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.115.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:5a:ad:b7:a9:80:17:79:ab:c9:4f:c5:65:4b:b6:e1:1e:67: 27:84:75:43:66:fc:3f:cf:c7:b2:34:b6:b1:48:88:14:12:6b: cf:07:a5:40:a3:a4:a6:8f:e6:97:bf:cd:1e:ef:7b:82:af:08: d9:c1:e5:0f:77:f0:d6:46:42:2c:2b:a1:e4:cc:ea:a4:17:df: ca:0c:fb:69:ac:45:bb:8b:95:ec:bf:1d:de:7a:a0:45:fb:65: 79:1f:80:b5:86:95:24:b5:df:23:60:56:af:94:5e:ae:6d:be: 89:43:06:65:77:62:8e:85:ce:27:7f:2d:2f:3d:e8:cd:ab:55: c7:f7:82:a1:e0:3f:a9:0d:ed:e6:19:1e:7f:51:25:61:4f:06: 74:71:69:cb:87:7f:cc:42:1c:66:98:62:79:1d:5e:e9:67:3f: d6:98:7f:f0:e4:48:f7:70:05:51:1a:91:cc:ee:5c:00:50:d2: 31:b4:61:07:c3:d0:44:fc:e1:16:8a:4c:81:5b:6b:3d:c9:70: cd:37:8a:2d:34:40:c6:c2:4d:3b:1d:ca:5c:5b:6d:16:ca:46: af:10:44:6b:c9:6c:cf:e3:d5:ce:bf:46:67:d7:41:77:bf:be: f4:f3:cc:2d:cd:eb:20:35:2b:e0:d8:c5:63:00:90:d1:36:c3: f7:c4:47:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSjp/ypzj70ecuEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YmJjY2U4YmEtYzgyZi00NWM4LWFkYmItNjdhMDNmM2Y1YmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyWIwKMWHWm4ZcO11GOUXc3eebMwUGTtoomI wSI1IPgTUJ2pKqlsdIawoBSzbRiD8EeMQjG6LAi/ZeKN7j3Y98l4t+9vKKuSiDJV ZUpeO3ibYRvyamHk5jVJhZ/jz+NWnhfVBFYKcRmDJqVl7w3uM6RYokXr6/JbnlEY W2eWy0PU4mSATVlpIhoPw5+jhMUD5trQ3Lyun1lyLQ4Vfel2HXehE0tOYNTM1GzX LUK3o+Gy4YeOKvsPl28j7UkFvykVxoJQ2yj7P3AdcLE0Ny0Eszamdw9nwpX2+4hi kxwprVUCXS+ctv11HsoI6fHshfeVBIN1EU2wY48pN+BHzfVHrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhPqdmHg43LRdczxQqbmezLpwPxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzRjNzc5MDYtY2Y1NC0z MjM4LTliNDMtZDFhOWNjMzMxYzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHOKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJarbepgBd5q8lPxWVLtuEeZyeEdUNm/D/Px7I0trFIiBQSa88HpUCj pKaP5pe/zR7ve4KvCNnB5Q938NZGQiwroeTM6qQX38oM+2msRbuLley/Hd56oEX7 ZXkfgLWGlSS13yNgVq+UXq5tvolDBmV3Yo6Fzid/LS896M2rVcf3gqHgP6kN7eYZ Hn9RJWFPBnRxacuHf8xCHGaYYnkdXulnP9aYf/DkSPdwBVEakczuXABQ0jG0YQfD 0ET84RaKTIFbaz3JcM03ii00QMbCTTsdylxbbRbKRq8QRGvJbM/j1c6/RmfXQXe/ vvTzzC3N6yA1K+DYxWMAkNE2w/fER6E= -----END CERTIFICATE-----Generated at Sun Jun 29 08:51:21 2025 by rpki-client