$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/452a8ba2-ade7-3b56-98f5-02f50e546db8.roa File: 452a8ba2-ade7-3b56-98f5-02f50e546db8.roa (raw, json) Hash identifier: vRFvdnUgQTadzdZHa3/RKPj+mcrUqMhQ1G4AF1WhcKQ= Subject key identifier: A2:A0:3F:BF:6C:AC:2A:66:A1:DA:5E:3D:5E:48:1E:9E:4D:B3:59:28 Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3 Certificate serial: 010D0C9F4328584ACE0B8D291F60EA5CA7DCD480 Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/452a8ba2-ade7-3b56-98f5-02f50e546db8.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 24753 IP address blocks: 64.49.154.0/23 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:8d:29:1f:60:ea:5c:a7:dc:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=9008564c-d95c-4df0-a93d-5b5ff2a3428d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:12:18:24:ba:ec:ec:16:c6:00:03:64:aa:1e: b9:b5:7b:34:78:33:f6:6f:a8:d9:d1:31:16:5c:a2: 0f:96:5e:8c:6e:12:2c:fb:68:a2:c7:52:d8:0a:69: 5b:3c:80:f2:4c:4c:94:5b:34:a0:78:b3:63:91:6b: 57:d8:db:44:70:6e:62:1b:b5:7d:a4:26:97:b4:f7: 0b:5e:40:9d:86:2d:cb:5f:03:72:8b:13:32:76:e6: e4:30:c6:be:96:91:c9:a6:b1:ef:e6:a3:ce:40:ee: cf:d7:81:76:a1:46:43:fb:4f:fb:e7:0a:22:ed:fb: 01:ac:ac:d2:33:93:0c:cc:e1:fd:26:4a:0e:b7:23: 35:98:fc:bd:4f:a1:e0:5d:cb:c5:5a:d8:71:f3:fb: a6:f5:0e:c3:c2:ac:41:9c:53:2a:92:a5:89:89:92: 44:e6:4a:1b:7a:06:73:a1:05:66:50:01:99:ce:b8: d3:ea:b5:b7:cd:de:2c:0c:f5:75:05:ac:2c:50:a7: 26:ba:22:60:26:ed:66:4a:a0:2c:63:f4:8e:4c:db: 7b:3b:a3:e0:fc:b3:ec:51:3f:61:11:4f:9f:72:60: 9c:cd:e4:11:ac:c2:38:ab:a2:c8:50:61:01:25:f7: 1c:cd:1f:ac:43:cc:3a:90:64:32:fa:70:bf:14:39: b3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A0:3F:BF:6C:AC:2A:66:A1:DA:5E:3D:5E:48:1E:9E:4D:B3:59:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/452a8ba2-ade7-3b56-98f5-02f50e546db8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl X509v3 Authority Key Identifier: keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer sbgp-ipAddrBlock: critical IPv4: 64.49.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:fd:91:90:7a:8c:45:dc:ea:05:77:33:00:0f:bd:e5:59:55: 33:30:1e:44:09:3d:a2:1e:29:ea:0b:58:fe:58:37:e7:04:b2: 6c:92:10:a8:77:2e:15:fb:f4:ac:77:40:4c:62:03:9f:b8:d7: a4:e8:6a:1e:50:85:a2:16:8a:60:de:eb:47:d5:9c:67:88:c0: b7:c7:73:3b:c8:41:b3:31:da:12:b4:0f:46:1a:ff:b5:15:bc: ef:58:af:2b:63:a5:18:ea:be:68:b6:96:be:eb:5b:08:ef:67: c7:13:fa:90:e1:80:b7:f9:35:a5:f7:a4:e3:b1:cd:32:82:2c: ed:3a:e3:ca:69:f8:77:a0:ba:d7:39:0c:9d:7b:8a:3a:58:34: f2:6e:fb:0c:d3:8f:6a:43:4e:37:13:60:be:ed:d2:a2:50:00: 2b:61:fd:d0:7a:28:cc:06:bf:26:b0:69:0f:3b:45:52:d1:ae: ee:3c:3c:36:ef:82:19:bb:3d:1f:77:5e:fe:c2:6d:d4:40:0a: 32:7d:d4:cb:c3:85:e3:e6:5a:ec:a5:14:da:24:6c:12:e2:bb: 35:b4:d2:a8:24:6d:69:db:6d:0d:26:32:e6:03:8d:dd:56:f1: 69:47:a3:6f:95:05:30:88:c0:24:73:31:c3:6d:bc:78:51:79: 52:0e:13:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC40pH2DqXKfc1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx OGUzMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk OTAwODU2NGMtZDk1Yy00ZGYwLWE5M2QtNWI1ZmYyYTM0MjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBIYJLrs7BbGAANkqh65tXs0eDP2b6jZ0TEW XKIPll6MbhIs+2iix1LYCmlbPIDyTEyUWzSgeLNjkWtX2NtEcG5iG7V9pCaXtPcL XkCdhi3LXwNyixMydubkMMa+lpHJprHv5qPOQO7P14F2oUZD+0/75woi7fsBrKzS M5MMzOH9JkoOtyM1mPy9T6HgXcvFWthx8/um9Q7DwqxBnFMqkqWJiZJE5kobegZz oQVmUAGZzrjT6rW3zd4sDPV1BawsUKcmuiJgJu1mSqAsY/SOTNt7O6Pg/LPsUT9h EU+fcmCczeQRrMI4q6LIUGEBJfcczR+sQ8w6kGQy+nC/FDmzOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKgP79srCpmodpePV5IHp5Ns1koMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvNDUyYThiYTItYWRlNy0z YjU2LTk4ZjUtMDJmNTBlNTQ2ZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4 MzVmYzE4ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQDGaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFn9kZB6jEXc6gV3MwAPveVZVTMwHkQJPaIeKeoLWP5YN+cEsmySEKh3 LhX79Kx3QExiA5+416Toah5QhaIWimDe60fVnGeIwLfHczvIQbMx2hK0D0Ya/7UV vO9YrytjpRjqvmi2lr7rWwjvZ8cT+pDhgLf5NaX3pOOxzTKCLO0648pp+Hegutc5 DJ17ijpYNPJu+wzTj2pDTjcTYL7t0qJQACth/dB6KMwGvyawaQ87RVLRru48PDbv ghm7PR93Xv7CbdRACjJ91MvDhePmWuylFNokbBLiuzW00qgkbWnbbQ0mMuYDjd1W 8WlHo2+VBTCIwCRzMcNtvHhReVIOE3k= -----END CERTIFICATE-----Generated at Sat Aug 23 23:45:25 2025 by rpki-client