$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78795b84-a98c-3e7c-bc7d-7e6e3f893733.roa File: 78795b84-a98c-3e7c-bc7d-7e6e3f893733.roa (raw, json) Hash identifier: 6f5nvTRwmcT4WbhaNhcU5ZQombNTQ6+2E1z5cRd/luA= Subject key identifier: 1F:4A:E6:58:EC:E4:26:D5:26:C2:2B:D6:F1:DE:76:99:4B:A2:EF:B5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB4EC6516B8648B67EA557000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78795b84-a98c-3e7c-bc7d-7e6e3f893733.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 7029 IP address blocks: 64.24.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:65:16:b8:64:8b:67:ea:55:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=90ccf816-18c4-4a72-99b3-a6cf0555f64c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:11:8b:6b:6c:35:d1:61:ed:23:04:cd:f1:49: 54:2a:83:48:83:ac:6c:5f:4b:07:fe:f4:c1:83:52: 7f:48:2b:e6:66:b4:b5:07:02:6f:34:35:31:49:fa: 32:e7:37:06:aa:63:1d:de:3d:1c:80:2c:47:f5:d8: 77:ae:b4:8e:19:4e:42:61:06:0d:a4:24:df:1a:2d: 63:68:fd:60:cb:f0:31:d6:cd:83:83:70:06:ff:17: 86:ae:1c:8d:fb:1d:fd:2f:56:75:76:25:f8:85:ab: d2:b8:ed:8d:4e:d0:27:0b:f8:5e:6b:e1:ea:b6:0b: 8d:44:d3:68:80:01:20:42:4f:07:5a:90:ce:fd:bb: 55:36:31:b8:cd:cf:6a:a8:c6:c9:2e:62:86:a4:6f: 66:12:f2:a1:2c:61:af:d5:4c:91:78:0f:a1:37:d8: 51:49:35:74:04:f0:ee:b8:8f:30:59:8c:f8:4f:db: 24:57:48:23:bb:a1:e0:db:c5:45:10:60:39:89:3f: 9a:80:23:fa:54:a7:d8:74:b3:2c:1a:06:db:12:4f: 32:67:b3:79:3a:f0:bb:ad:7d:83:66:93:ac:13:6d: 23:d7:b8:16:6e:2e:f0:db:90:25:ae:3e:ca:1d:66: 3e:6b:3a:01:ef:21:2d:d2:1e:6e:ee:ae:39:6b:06: 45:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4A:E6:58:EC:E4:26:D5:26:C2:2B:D6:F1:DE:76:99:4B:A2:EF:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78795b84-a98c-3e7c-bc7d-7e6e3f893733.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.24.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:c8:36:05:be:59:10:09:7b:2e:71:4c:54:59:aa:3b:37:19: f0:94:64:3c:7c:9c:cf:36:c7:48:2c:aa:92:07:eb:5f:72:e4: e2:80:b0:36:c1:7a:10:d4:83:81:54:6a:3a:76:f9:0a:55:fa: 6d:2a:ed:18:70:7a:ab:30:fb:2b:e7:33:e6:de:05:b0:68:61: 45:79:68:40:3d:7c:b1:17:20:3d:4e:67:07:7c:82:11:c1:f0: 50:c9:f4:cb:af:ea:13:e8:4a:0d:1b:b4:84:90:4b:8f:4c:06: 35:cb:bf:d5:39:ea:1c:4f:be:86:cb:86:57:ce:19:51:a6:e4: a4:e0:be:56:57:35:e9:11:e7:63:10:6d:9b:eb:61:61:68:44: 96:a5:67:a1:19:f0:b3:6b:57:8c:f7:12:c3:06:b6:b7:53:21: 25:e9:b2:03:95:dc:0b:2f:94:27:39:37:51:ad:fd:b0:c7:b6: ea:dd:1e:04:37:40:ed:30:09:de:45:5a:43:5a:64:af:c9:dd: a1:70:89:61:95:f5:52:a5:6b:6d:04:f3:40:da:2d:88:e0:50: f3:1d:82:db:74:f6:dc:d8:e5:63:2d:94:5c:48:16:33:aa:03: 36:c8:ad:f1:98:f6:73:46:51:44:7e:40:9e:ee:fa:59:0d:9c: cc:81:25:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07GUWuGSLZ+pVcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk OTBjY2Y4MTYtMThjNC00YTcyLTk5YjMtYTZjZjA1NTVmNjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhGLa2w10WHtIwTN8UlUKoNIg6xsX0sH/vTB g1J/SCvmZrS1BwJvNDUxSfoy5zcGqmMd3j0cgCxH9dh3rrSOGU5CYQYNpCTfGi1j aP1gy/Ax1s2Dg3AG/xeGrhyN+x39L1Z1diX4havSuO2NTtAnC/hea+HqtguNRNNo gAEgQk8HWpDO/btVNjG4zc9qqMbJLmKGpG9mEvKhLGGv1UyReA+hN9hRSTV0BPDu uI8wWYz4T9skV0gju6Hg28VFEGA5iT+agCP6VKfYdLMsGgbbEk8yZ7N5OvC7rX2D ZpOsE20j17gWbi7w25Alrj7KHWY+azoB7yEt0h5u7q45awZF0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9K5ljs5CbVJsIr1vHedplLou+1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzg3OTViODQtYTk4Yy0z ZTdjLWJjN2QtN2U2ZTNmODkzNzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQBhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTINgW+WRAJey5xTFRZqjs3GfCUZDx8nM82x0gsqpIH619y5OKAsDbB ehDUg4FUajp2+QpV+m0q7Rhweqsw+yvnM+beBbBoYUV5aEA9fLEXID1OZwd8ghHB 8FDJ9Muv6hPoSg0btISQS49MBjXLv9U56hxPvobLhlfOGVGm5KTgvlZXNekR52MQ bZvrYWFoRJalZ6EZ8LNrV4z3EsMGtrdTISXpsgOV3AsvlCc5N1Gt/bDHturdHgQ3 QO0wCd5FWkNaZK/J3aFwiWGV9VKla20E80DaLYjgUPMdgtt09tzY5WMtlFxIFjOq AzbIrfGY9nNGUUR+QJ7u+lkNnMyBJYE= -----END CERTIFICATE-----Generated at Tue Aug 5 16:43:38 2025 by rpki-client