$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ea66b86-5648-3598-868f-d655bca90280.roa File: 0ea66b86-5648-3598-868f-d655bca90280.roa (raw, json) Hash identifier: Y1vcBxa9jN0x5KGpRmTd0cs1zVJNRsSw1n4OSdFjjuY= Subject key identifier: 92:AC:0E:06:AB:CF:6C:DA:F2:B0:B8:84:A3:F0:8F:C3:A9:EF:7B:EC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D431CDC818AB3A11F73E5620 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ea66b86-5648-3598-868f-d655bca90280.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7029 IP address blocks: 64.24.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:cd:c8:18:ab:3a:11:f7:3e:56:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=d4856882-7114-4ae5-aa23-c34319d6ce60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3c:3a:a9:4c:12:4c:a5:4d:04:99:24:bf:ad: 96:a0:8b:a5:bf:81:6c:6b:ee:f2:13:20:de:c3:ca: d5:77:45:76:0b:90:2d:f9:58:2d:98:63:cc:0c:a9: 96:50:f7:5f:e8:cc:fe:90:11:cb:f4:08:20:13:da: 76:0b:94:8b:97:36:82:2c:d1:f6:1b:db:f9:bb:a9: ff:c4:2a:28:59:cf:37:f9:16:4e:60:7d:96:88:3d: 2b:99:f0:73:85:a3:bb:af:46:63:51:fb:58:0d:33: c9:ac:33:eb:66:b1:d3:69:33:41:18:61:ff:a1:f0: b6:d5:64:6e:5f:75:d5:16:6b:80:48:63:49:c7:66: e7:bc:d4:a5:8e:15:48:24:1d:44:18:d5:99:eb:f6: 80:2b:7f:61:a0:ff:a0:6e:4c:3c:ef:f8:11:47:47: 6d:22:7a:31:b2:9c:6f:7b:78:0f:69:2f:5e:67:76: f6:01:43:89:c1:9d:d5:69:48:f0:3d:d6:dc:33:11: 02:0f:35:00:67:47:cd:eb:92:68:fc:d2:fc:38:13: eb:07:9a:a0:c3:6f:01:52:ab:41:e7:4c:b2:c4:08: 7c:a0:2c:c2:ec:1f:06:39:6b:b4:9b:ab:76:eb:13: 56:cf:02:a0:90:7e:ff:3f:b9:22:58:a3:7c:ae:d4: 09:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AC:0E:06:AB:CF:6C:DA:F2:B0:B8:84:A3:F0:8F:C3:A9:EF:7B:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ea66b86-5648-3598-868f-d655bca90280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.24.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:0e:ed:ba:1b:5b:8b:8c:6a:ed:01:08:1d:a9:a9:1c:c2:6d: 80:24:03:f8:b6:3c:6f:86:19:e8:c0:c3:8e:52:58:ca:14:9c: dc:96:01:f5:70:7d:45:bd:9d:3d:4b:b3:58:84:3a:30:65:66: ce:6b:df:55:fe:c2:38:02:fb:c5:02:b8:15:6a:c9:69:2d:0c: 08:ce:df:d1:6b:7e:10:74:ec:15:15:92:32:e1:03:57:58:d9: 7c:f8:b7:50:e6:27:44:ab:22:43:b8:bc:92:2f:5d:39:6c:28: 05:88:a2:10:6f:cb:09:17:74:50:a1:0c:1f:bd:57:46:4e:52: 2e:03:05:51:72:7b:7d:ae:de:e0:31:6f:04:a6:46:16:19:88: 44:11:58:2a:08:e9:7e:2d:bb:9a:f9:bc:c2:13:7e:07:91:ed: 49:68:95:fb:ac:58:93:4b:7d:fe:99:15:22:df:c7:17:1b:7a: c6:17:79:87:e6:f4:30:1c:38:7f:91:78:a3:10:42:c6:95:14: 32:bb:cc:92:15:3d:8a:db:a1:54:f2:32:67:e4:e8:bc:a8:1b: b1:13:01:d3:b2:34:43:4b:1d:b3:5a:6c:61:32:8b:f8:44:20: 60:0f:5a:eb:20:a3:d6:e2:1f:2b:8c:77:b8:00:5c:2b:a5:93: 20:c6:82:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMc3IGKs6Efc+ViAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZDQ4NTY4ODItNzExNC00YWU1LWFhMjMtYzM0MzE5ZDZjZTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTw6qUwSTKVNBJkkv62WoIulv4Fsa+7yEyDe w8rVd0V2C5At+VgtmGPMDKmWUPdf6Mz+kBHL9AggE9p2C5SLlzaCLNH2G9v5u6n/ xCooWc83+RZOYH2WiD0rmfBzhaO7r0ZjUftYDTPJrDPrZrHTaTNBGGH/ofC21WRu X3XVFmuASGNJx2bnvNSljhVIJB1EGNWZ6/aAK39hoP+gbkw87/gRR0dtInoxspxv e3gPaS9eZ3b2AUOJwZ3VaUjwPdbcMxECDzUAZ0fN65Jo/NL8OBPrB5qgw28BUqtB 50yyxAh8oCzC7B8GOWu0m6t26xNWzwKgkH7/P7kiWKN8rtQJwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKsDgarz2za8rC4hKPwj8Op73vsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGVhNjZiODYtNTY0OC0z NTk4LTg2OGYtZDY1NWJjYTkwMjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQBgIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMO7bobW4uMau0BCB2pqRzCbYAkA/i2PG+GGejAw45SWMoUnNyWAfVw fUW9nT1Ls1iEOjBlZs5r31X+wjgC+8UCuBVqyWktDAjO39FrfhB07BUVkjLhA1dY 2Xz4t1DmJ0SrIkO4vJIvXTlsKAWIohBvywkXdFChDB+9V0ZOUi4DBVFye32u3uAx bwSmRhYZiEQRWCoI6X4tu5r5vMITfgeR7UlolfusWJNLff6ZFSLfxxcbesYXeYfm 9DAcOH+ReKMQQsaVFDK7zJIVPYrboVTyMmfk6LyoG7ETAdOyNENLHbNabGEyi/hE IGAPWusgo9biHyuMd7gAXCulkyDGghM= -----END CERTIFICATE-----Generated at Wed Jun 18 16:00:26 2025 by rpki-client