$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/f08d761e-0e6b-38f1-8f1b-d51a58f26666.roa File: f08d761e-0e6b-38f1-8f1b-d51a58f26666.roa (raw, json) Hash identifier: vQjhKLvUBepa7eZB0RH9t1RZJ4lHIDyztL+PtIIF4tc= Subject key identifier: A0:A3:94:1D:0D:61:83:EA:91:4C:AD:3B:3B:93:0A:79:9F:A7:C7:CC Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3 Certificate serial: 010D0C9F4328584AE1966FA61CA41A8B7D96BB80 Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/f08d761e-0e6b-38f1-8f1b-d51a58f26666.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 11300 IP address blocks: 64.49.146.0/24 maxlen: 25 64.49.149.0/24 maxlen: 25 64.49.179.0/24 maxlen: 25 207.241.166.0/24 maxlen: 25 207.241.174.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:6f:a6:1c:a4:1a:8b:7d:96:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=eacb8e1c-3e89-4020-a3ef-822f40979529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fa:f0:0d:8e:0c:0c:c4:76:7d:5d:89:41:fb: f8:99:92:f4:05:85:64:c1:a4:e5:bc:ff:6f:7a:3a: 1b:94:53:45:78:bd:44:e7:b7:09:e4:b1:7c:55:fb: 59:ba:33:0b:43:19:f9:9e:69:71:5c:9a:7e:ae:ab: a9:ac:4a:75:02:19:c4:4d:c5:65:d3:35:09:d5:39: a7:19:3c:62:2c:36:52:44:31:0f:a3:cb:1f:fa:e0: c5:22:32:eb:ea:fa:7c:c8:e9:0d:a9:d8:92:b8:f4: c7:80:dc:45:79:32:b8:f3:6e:56:5f:84:d5:1d:90: a6:b2:41:59:de:c3:62:af:c2:6e:ac:dd:23:8d:80: e0:92:0f:cc:90:03:fa:99:78:2c:d7:e6:c6:6e:d9: 1c:d0:51:aa:75:1f:82:f2:3d:5e:da:b0:0a:f8:d7: ed:0f:72:1b:3e:ec:20:01:8e:b9:4c:68:26:2f:bf: 24:d5:59:41:ee:f9:94:be:c5:9e:ce:56:aa:57:32: 39:e2:12:44:fc:a4:5e:a1:0f:0a:db:63:00:7a:2f: 42:0a:a2:5d:07:73:59:80:a6:d5:ff:8e:08:f6:de: 87:94:b7:af:81:c1:e6:f1:f3:7e:1e:c9:ec:f3:49: 47:d0:4c:cb:ad:30:e2:59:cb:5d:b1:12:32:c5:e9: aa:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A3:94:1D:0D:61:83:EA:91:4C:AD:3B:3B:93:0A:79:9F:A7:C7:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/f08d761e-0e6b-38f1-8f1b-d51a58f26666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl X509v3 Authority Key Identifier: keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer sbgp-ipAddrBlock: critical IPv4: 64.49.146.0/24 64.49.149.0/24 64.49.179.0/24 207.241.166.0/24 207.241.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:a5:ba:67:68:1b:de:08:06:f2:b5:1f:49:d6:c7:00:0b:1b: e3:e2:cc:73:46:41:5a:c6:33:59:4b:54:06:fa:c7:6e:e9:6b: a3:55:1c:15:d9:6a:3c:17:f7:a3:78:bc:28:c4:6d:25:a0:19: e7:74:10:8c:01:91:92:aa:3d:95:cb:1a:83:c1:64:7f:72:b7: 80:2d:32:05:fb:23:72:c5:91:c5:26:d5:9a:6e:de:ce:8e:75: 5f:67:ae:c5:c5:d3:fc:6c:23:3a:ea:67:59:39:40:9d:15:e4: 4c:f0:de:2e:64:cf:cb:8e:3d:93:6c:d9:ec:95:45:05:0f:4c: 71:dc:ec:e8:9e:f0:1a:25:ac:99:e4:c9:0d:97:1f:12:0a:e5: 04:83:44:38:2a:41:a0:20:23:eb:af:f6:80:5f:98:6d:0f:8a: 44:6d:d1:e3:28:05:76:81:3d:21:af:4e:55:d3:2f:0a:56:4f: c3:de:e0:22:3d:d6:b4:74:5c:fb:f7:91:00:d9:28:54:1a:f7: dc:b9:1e:44:0d:05:a5:f6:b6:d4:1d:14:a3:ba:1c:92:31:97: 63:e1:45:9b:50:bd:99:5d:34:34:4b:c0:48:1a:54:a1:49:22: 24:e2:5d:f5:f1:cd:9d:e2:e2:58:cc:ca:a6:20:51:e1:10:da: 15:15:d3:c6 -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWErhlm+mHKQai32Wu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx OGUzMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk ZWFjYjhlMWMtM2U4OS00MDIwLWEzZWYtODIyZjQwOTc5NTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/rwDY4MDMR2fV2JQfv4mZL0BYVkwaTlvP9v ejoblFNFeL1E57cJ5LF8VftZujMLQxn5nmlxXJp+rquprEp1AhnETcVl0zUJ1Tmn GTxiLDZSRDEPo8sf+uDFIjLr6vp8yOkNqdiSuPTHgNxFeTK4825WX4TVHZCmskFZ 3sNir8JurN0jjYDgkg/MkAP6mXgs1+bGbtkc0FGqdR+C8j1e2rAK+NftD3IbPuwg AY65TGgmL78k1VlB7vmUvsWezlaqVzI54hJE/KReoQ8K22MAei9CCqJdB3NZgKbV /44I9t6HlLevgcHm8fN+Hsns80lH0EzLrTDiWctdsRIyxemq0QIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFKCjlB0NYYPqkUytOzuTCnmfp8fMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvZjA4ZDc2MWUtMGU2Yi0z OGYxLThmMWItZDUxYTU4ZjI2NjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4 MzVmYzE4ZTMuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAQDGSAwQA QDGVAwQAQDGzAwQAz/GmAwQAz/GuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAylumdoG94IBvK1H0nWxwAL G+PizHNGQVrGM1lLVAb6x27pa6NVHBXZajwX96N4vCjEbSWgGed0EIwBkZKqPZXL GoPBZH9yt4AtMgX7I3LFkcUm1Zpu3s6OdV9nrsXF0/xsIzrqZ1k5QJ0V5Ezw3i5k z8uOPZNs2eyVRQUPTHHc7Oie8BolrJnkyQ2XHxIK5QSDRDgqQaAgI+uv9oBfmG0P ikRt0eMoBXaBPSGvTlXTLwpWT8Pe4CI91rR0XPv3kQDZKFQa99y5HkQNBaX2ttQd FKO6HJIxl2PhRZtQvZldNDRLwEgaVKFJIiTiXfXxzZ3i4ljMyqYgUeEQ2hUV08Y= -----END CERTIFICATE-----Generated at Sun Aug 24 04:21:10 2025 by rpki-client