$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78795b84-a98c-3e7c-bc7d-7e6e3f893733.roa File: 78795b84-a98c-3e7c-bc7d-7e6e3f893733.roa (raw, json) Hash identifier: UC3inhQYu4Hi6cni0D6SdVSeaZjWGe62waXWfgcJxw8= Subject key identifier: B1:8E:17:5F:39:77:75:83:8C:35:27:2B:F1:C1:94:2F:AB:69:AD:A9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D4306B596D32BF55B8246F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78795b84-a98c-3e7c-bc7d-7e6e3f893733.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7029 IP address blocks: 64.24.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:6b:59:6d:32:bf:55:b8:24:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=6f2ebc6b-e715-4cdb-9591-9dd750026576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8f:4b:b7:50:95:de:fc:ae:62:80:5a:c0:0f: ca:93:2c:90:ff:dc:c0:fd:37:bd:bf:67:8d:34:90: f3:7d:b6:69:66:ae:b4:82:e6:34:dc:9a:f5:75:9f: 9f:aa:d7:bb:54:af:4d:67:32:6c:ea:ad:22:ef:ac: d2:4b:05:14:85:d4:2a:b2:01:90:e4:4a:4a:97:85: 61:2c:e7:94:68:8b:a7:a0:ee:fd:12:20:9f:8d:c5: cd:f4:be:3c:d3:c6:1b:50:b0:a0:89:9d:29:e8:0e: bb:6b:72:a8:b6:3e:4c:1a:21:d7:e9:61:f9:3e:a5: 51:34:e2:57:1d:a7:62:79:a0:ed:89:8b:7f:5e:8b: cf:f7:c9:51:c3:16:b1:c7:1c:e8:2b:de:ab:82:7a: 16:b2:83:59:b2:42:a2:d8:a0:11:bc:d7:83:1e:56: a8:53:32:63:2f:e7:2e:79:04:1f:a8:7e:63:dc:1a: d9:b1:4b:cc:32:bc:8d:81:a5:a0:f7:da:21:e6:2b: 22:22:77:0e:98:7f:16:c3:46:71:2a:ba:f8:56:23: b6:08:d9:02:d3:fa:84:d1:b0:25:34:65:1d:07:0f: ee:e7:12:dd:c7:42:db:97:74:44:1e:31:1a:70:fa: d2:b0:29:e4:61:e3:c1:ff:ed:44:d3:f8:f2:a4:c5: 00:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8E:17:5F:39:77:75:83:8C:35:27:2B:F1:C1:94:2F:AB:69:AD:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78795b84-a98c-3e7c-bc7d-7e6e3f893733.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.24.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:1e:9f:0e:89:0a:51:31:5c:c2:18:8e:11:cf:69:91:90:c6: 61:3a:b8:00:82:57:b8:1b:22:73:85:86:6f:8e:ff:eb:15:e9: 36:2d:02:47:a9:85:15:c0:22:74:71:78:61:6f:7f:13:32:d3: 49:32:35:64:bd:f4:ae:3a:3f:5d:68:b3:97:56:e8:5f:00:ab: 02:a0:df:84:3c:38:4f:09:d6:a1:55:36:0d:0c:14:37:ea:07: a6:24:65:9b:26:d2:8d:03:15:fb:8a:67:ac:f4:94:69:71:88: 30:68:dd:60:98:66:f9:6d:85:d2:cf:b1:c5:65:25:79:ea:3b: ed:8f:95:4c:a2:bc:fd:a6:60:88:ba:e9:18:ce:0e:c7:7d:3f: 08:b1:08:a2:b6:fe:d1:54:6f:e3:ec:40:41:30:a5:cf:96:81: 0a:f4:3a:44:5c:45:c5:0e:20:7a:b8:13:58:ae:6e:07:e2:5f: 95:18:74:7a:55:df:0b:2d:49:e0:bc:71:5f:b0:be:34:a0:5e: 00:ab:ec:bc:91:08:61:9a:13:53:b1:14:d5:b4:46:36:9f:44: f5:33:29:3d:00:d4:66:9f:5e:13:04:67:4c:38:db:ce:b6:8e: 0d:74:37:77:1b:ee:2d:eb:a3:fc:b5:9c:ea:28:ff:5c:f1:6e: 70:b7:08:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMGtZbTK/VbgkbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NmYyZWJjNmItZTcxNS00Y2RiLTk1OTEtOWRkNzUwMDI2NTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI9Lt1CV3vyuYoBawA/KkyyQ/9zA/Te9v2eN NJDzfbZpZq60guY03Jr1dZ+fqte7VK9NZzJs6q0i76zSSwUUhdQqsgGQ5EpKl4Vh LOeUaIunoO79EiCfjcXN9L4808YbULCgiZ0p6A67a3Kotj5MGiHX6WH5PqVRNOJX HadieaDtiYt/XovP98lRwxaxxxzoK96rgnoWsoNZskKi2KARvNeDHlaoUzJjL+cu eQQfqH5j3BrZsUvMMryNgaWg99oh5isiIncOmH8Ww0ZxKrr4ViO2CNkC0/qE0bAl NGUdBw/u5xLdx0Lbl3REHjEacPrSsCnkYePB/+1E0/jypMUAjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGOF185d3WDjDUnK/HBlC+raa2pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzg3OTViODQtYTk4Yy0z ZTdjLWJjN2QtN2U2ZTNmODkzNzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQBhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4enw6JClExXMIYjhHPaZGQxmE6uACCV7gbInOFhm+O/+sV6TYtAkep hRXAInRxeGFvfxMy00kyNWS99K46P11os5dW6F8AqwKg34Q8OE8J1qFVNg0MFDfq B6YkZZsm0o0DFfuKZ6z0lGlxiDBo3WCYZvlthdLPscVlJXnqO+2PlUyivP2mYIi6 6RjODsd9PwixCKK2/tFUb+PsQEEwpc+WgQr0OkRcRcUOIHq4E1iubgfiX5UYdHpV 3wstSeC8cV+wvjSgXgCr7LyRCGGaE1OxFNW0RjafRPUzKT0A1GafXhMEZ0w42862 jg10N3cb7i3ro/y1nOoo/1zxbnC3COU= -----END CERTIFICATE-----Generated at Sun Jun 15 19:01:45 2025 by rpki-client