$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/9b69fb41-a0aa-3c96-a31c-05de7f90e9de.roa File: 9b69fb41-a0aa-3c96-a31c-05de7f90e9de.roa (raw, json) Hash identifier: zMuAugWt7gIQXgRRF1zXyzG9C/8s79pMmhV4rEXSpV8= Subject key identifier: 3C:17:D0:DA:D9:0F:FC:39:3C:03:A2:53:75:5F:7F:16:D5:B0:D3:55 Certificate issuer: /CN=6a38b089-4bb1-4c65-837b-853a9a3398e1 Certificate serial: 010D0C9F43285849F7151DD5FF689C612ABEA480 Authority key identifier: 61:8B:A2:DB:42:0B:DE:9C:E0:19:58:25:1E:A4:C7:E7:20:05:FD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/9b69fb41-a0aa-3c96-a31c-05de7f90e9de.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 5650 IP address blocks: 64.49.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/6a38b089-4bb1-4c65-837b-853a9a3398e1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/6a38b089-4bb1-4c65-837b-853a9a3398e1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:1d:d5:ff:68:9c:61:2a:be:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a38b089-4bb1-4c65-837b-853a9a3398e1 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=3797f121-f31b-4fa4-8fda-ae7c56664184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:30:35:10:aa:48:f0:93:3d:04:22:a5:fe:4e: fc:ed:74:87:46:f1:ed:7b:0c:fd:f9:ae:68:39:7b: 14:39:ab:98:d1:f2:cf:f6:da:f9:a6:19:d9:8a:0b: c2:83:86:90:27:20:67:52:9d:3a:9d:57:80:55:23: 08:76:cd:db:d6:d7:52:24:27:5b:e0:39:04:9d:58: 26:36:76:09:bb:d7:b7:6d:d9:91:24:94:3b:f8:70: 9a:97:33:10:08:21:55:b4:15:b0:fb:aa:b1:f3:c4: 7e:4a:ef:4c:17:7f:76:46:98:92:e7:1e:17:b2:0d: 14:a0:6c:5f:cb:df:2d:3e:67:a6:2d:3c:bf:6a:a6: 4b:2a:23:44:d0:fc:39:f4:40:c9:1b:e1:8e:90:01: f9:8e:b4:4c:89:83:81:e4:3f:e8:7a:91:70:c0:71: ae:37:94:4b:50:91:0e:e8:1d:cc:94:dd:29:4c:25: 3e:70:34:5b:a3:cd:d2:d8:2a:36:1c:67:03:5b:01: ee:fe:f3:c4:e9:8e:7a:58:3b:6f:63:69:07:82:6d: d2:3e:48:2d:e0:aa:7e:ee:d1:05:44:14:c5:85:fb: 6e:b7:c7:c2:2e:73:05:ad:58:09:9d:76:53:44:65: a6:81:41:a1:1f:ca:2f:cf:42:a7:4e:54:84:47:b2: ed:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:17:D0:DA:D9:0F:FC:39:3C:03:A2:53:75:5F:7F:16:D5:B0:D3:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/9b69fb41-a0aa-3c96-a31c-05de7f90e9de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/6a38b089-4bb1-4c65-837b-853a9a3398e1.crl X509v3 Authority Key Identifier: keyid:61:8B:A2:DB:42:0B:DE:9C:E0:19:58:25:1E:A4:C7:E7:20:05:FD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1.cer sbgp-ipAddrBlock: critical IPv4: 64.49.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:17:96:74:1f:bf:1b:73:3b:76:c1:a0:68:d4:a1:1f:2a:12: 2d:fe:8f:b2:2f:6d:c4:e2:71:db:71:f2:28:79:c1:eb:ac:26: 05:4f:1c:a3:40:89:15:e1:10:f8:a6:a5:31:52:27:ff:2d:c9: f7:9c:de:2e:ec:a5:98:dd:2a:7a:8c:06:73:38:fd:f4:1c:cd: 71:4c:6a:85:84:28:e8:76:1f:26:b9:0b:4e:b9:22:24:71:d0: e8:a5:7f:11:35:eb:7f:00:4e:83:f9:a8:24:1a:1d:55:b1:75: 3d:4a:26:19:90:aa:78:ba:41:5c:4e:cc:b4:d1:8f:0e:4c:48: a9:8d:89:31:ba:91:38:de:16:fc:61:73:9d:6b:66:ca:94:ff: 23:27:94:28:e5:65:17:e5:fc:48:cd:fd:d3:13:55:8b:54:95: e8:b5:74:31:1e:f4:4d:ce:3b:68:4c:c0:2c:da:0c:5b:73:ea: 99:df:61:86:d1:8a:7f:b3:72:c7:52:c8:e9:8f:b8:d6:79:f6: 45:54:00:f4:2f:8c:ab:ec:60:25:13:a3:ab:46:84:6d:56:3f: 5c:0e:b8:ea:9b:78:30:88:d0:df:f1:5a:4e:e7:fa:92:5e:bd: 29:ca:db:fd:28:9f:3d:31:30:6b:ff:7d:55:3b:23:f9:c4:71: 57:da:9e:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FR3V/2icYSq+pIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmEzOGIwODktNGJiMS00YzY1LTgzN2ItODUzYTlhMzM5 OGUxMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk Mzc5N2YxMjEtZjMxYi00ZmE0LThmZGEtYWU3YzU2NjY0MTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDA1EKpI8JM9BCKl/k787XSHRvHtewz9+a5o OXsUOauY0fLP9tr5phnZigvCg4aQJyBnUp06nVeAVSMIds3b1tdSJCdb4DkEnVgm NnYJu9e3bdmRJJQ7+HCalzMQCCFVtBWw+6qx88R+Su9MF392RpiS5x4Xsg0UoGxf y98tPmemLTy/aqZLKiNE0Pw59EDJG+GOkAH5jrRMiYOB5D/oepFwwHGuN5RLUJEO 6B3MlN0pTCU+cDRbo83S2Co2HGcDWwHu/vPE6Y56WDtvY2kHgm3SPkgt4Kp+7tEF RBTFhftut8fCLnMFrVgJnXZTRGWmgUGhH8ovz0KnTlSER7LtdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwX0NrZD/w5PAOiU3VffxbVsNNVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82YTM4 YjA4OS00YmIxLTRjNjUtODM3Yi04NTNhOWEzMzk4ZTEvOWI2OWZiNDEtYTBhYS0z Yzk2LWEzMWMtMDVkZTdmOTBlOWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNmEzOGIwODktNGJiMS00YzY1LTgz N2ItODUzYTlhMzM5OGUxLzZhMzhiMDg5LTRiYjEtNGM2NS04MzdiLTg1M2E5YTMz OThlMS5jcmwwHwYDVR0jBBgwFoAUYYui20IL3pzgGVglHqTH5yAF/bowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82YTM4YjA4OS00YmIxLTRjNjUtODM3Yi04NTNh OWEzMzk4ZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQDEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQXlnQfvxtzO3bBoGjUoR8qEi3+j7IvbcTicdtx8ih5weusJgVPHKNA iRXhEPimpTFSJ/8tyfec3i7spZjdKnqMBnM4/fQczXFMaoWEKOh2Hya5C065IiRx 0OilfxE1638AToP5qCQaHVWxdT1KJhmQqni6QVxOzLTRjw5MSKmNiTG6kTjeFvxh c51rZsqU/yMnlCjlZRfl/EjN/dMTVYtUlei1dDEe9E3OO2hMwCzaDFtz6pnfYYbR in+zcsdSyOmPuNZ59kVUAPQvjKvsYCUTo6tGhG1WP1wOuOqbeDCI0N/xWk7n+pJe vSnK2/0onz0xMGv/fVU7I/nEcVfanpg= -----END CERTIFICATE-----Generated at Sun Jun 29 18:55:38 2025 by rpki-client