$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c40f082-a146-38bb-8b27-c7497ea3afdc.roa File: 7c40f082-a146-38bb-8b27-c7497ea3afdc.roa (raw, json) Hash identifier: Y2ZUWcXwyWWwBQJbya7rKxddiA78eXKvkDXdl2xcTeU= Subject key identifier: 30:83:C4:80:A9:81:ED:0C:DC:74:D6:B2:BA:79:BD:9B:88:62:61:A8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D431CE30BAFCB4A6E387FD80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c40f082-a146-38bb-8b27-c7497ea3afdc.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7029 IP address blocks: 64.24.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:ce:30:ba:fc:b4:a6:e3:87:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=93d7b2fa-0965-45cd-95b8-5f586ac618ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:eb:2f:4f:b9:66:a3:18:34:5e:8d:bf:5e:39: 20:1c:99:6a:6e:c8:29:09:65:a6:e2:a1:d7:40:93: 4b:6a:71:4c:ac:3e:a4:95:37:87:dc:fc:60:9b:2a: dc:63:4f:7c:7c:e0:a3:df:f2:2a:8f:5b:45:82:07: 94:ab:8f:06:10:39:ca:d4:14:17:bc:82:02:71:7d: 3f:8b:51:c9:2e:6e:4e:9f:e2:79:49:a7:38:53:d3: ee:80:9e:14:58:46:6e:bb:e3:82:b0:36:f2:94:38: 1d:52:bc:da:24:84:49:a5:11:9d:80:bf:94:40:10: 2d:f9:4d:6a:05:cf:78:c6:7c:fd:c4:ba:87:fa:51: c2:11:28:cf:52:72:77:03:39:5a:02:cc:b7:fd:3a: 69:ff:b3:ce:ff:09:38:ac:1f:72:14:eb:0a:e9:fa: 20:ba:15:b2:15:7d:f0:d5:5c:ca:24:e1:e9:30:e9: 07:9f:b2:d8:67:ca:a2:ba:fd:3d:5d:46:f6:97:80: 9f:6f:37:29:d1:e9:8e:1e:80:8b:54:38:f1:08:f6: 00:0d:01:e6:d8:06:f4:5d:04:3f:c1:ea:e0:f3:fe: 8c:66:9f:73:65:a3:fd:ee:b3:86:9a:f4:65:32:23: 93:e3:e6:dc:13:02:51:6b:b8:31:c3:38:24:58:78: 1e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:83:C4:80:A9:81:ED:0C:DC:74:D6:B2:BA:79:BD:9B:88:62:61:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c40f082-a146-38bb-8b27-c7497ea3afdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.24.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ef:81:9d:87:8d:a4:9b:e2:04:c5:19:17:b6:ce:b5:3f:b3: 83:90:22:94:62:2c:3b:0c:87:21:34:0b:85:e8:0d:89:e6:2d: 62:5d:62:ae:6e:5e:56:97:3b:7c:85:6b:a7:99:b4:81:e1:d1: f2:bf:f6:00:e5:b5:2b:12:2c:5a:87:4b:99:5e:38:a1:68:3a: ca:a1:ca:ae:b2:eb:9d:62:85:27:1d:70:5e:e7:f6:93:e8:86: 53:d7:4d:6f:4e:05:42:8f:d0:5f:52:2f:a2:8e:de:62:1e:39: d6:12:4f:23:e8:f1:37:46:95:11:0b:d8:83:38:65:ff:9f:ca: 47:22:24:f1:e0:69:75:25:0b:5b:eb:37:23:c3:06:08:0c:8b: 36:57:7b:f3:c6:9e:cd:96:5b:fe:0c:be:bb:0a:5c:69:78:06: dd:16:f5:86:9d:61:6f:f0:60:78:bf:06:59:d2:ff:30:72:fc: 5d:78:b4:8d:df:a8:d5:e6:39:c5:0b:20:77:f9:46:24:93:9c: 63:b4:21:51:9e:91:58:d1:9d:18:a9:bf:bf:aa:ce:70:8b:c1: 1e:29:36:32:8e:41:7e:97:1c:b1:d9:bc:67:6b:1d:c9:68:4b: 28:f9:a3:aa:6e:93:76:52:fe:e3:20:a9:2b:70:c5:0d:10:4d: 5e:ff:36:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMc4wuvy0puOH/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk OTNkN2IyZmEtMDk2NS00NWNkLTk1YjgtNWY1ODZhYzYxOGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+svT7lmoxg0Xo2/XjkgHJlqbsgpCWWm4qHX QJNLanFMrD6klTeH3PxgmyrcY098fOCj3/Iqj1tFggeUq48GEDnK1BQXvIICcX0/ i1HJLm5On+J5Sac4U9PugJ4UWEZuu+OCsDbylDgdUrzaJIRJpRGdgL+UQBAt+U1q Bc94xnz9xLqH+lHCESjPUnJ3AzlaAsy3/Tpp/7PO/wk4rB9yFOsK6foguhWyFX3w 1VzKJOHpMOkHn7LYZ8qiuv09XUb2l4Cfbzcp0emOHoCLVDjxCPYADQHm2Ab0XQQ/ werg8/6MZp9zZaP97rOGmvRlMiOT4+bcEwJRa7gxwzgkWHge6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCDxICpge0M3HTWsrp5vZuIYmGoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2M0MGYwODItYTE0Ni0z OGJiLThiMjctYzc0OTdlYTNhZmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQBjsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrvgZ2HjaSb4gTFGRe2zrU/s4OQIpRiLDsMhyE0C4XoDYnmLWJdYq5u XlaXO3yFa6eZtIHh0fK/9gDltSsSLFqHS5leOKFoOsqhyq6y651ihScdcF7n9pPo hlPXTW9OBUKP0F9SL6KO3mIeOdYSTyPo8TdGlREL2IM4Zf+fykciJPHgaXUlC1vr NyPDBggMizZXe/PGns2WW/4MvrsKXGl4Bt0W9YadYW/wYHi/BlnS/zBy/F14tI3f qNXmOcULIHf5RiSTnGO0IVGekVjRnRipv7+qznCLwR4pNjKOQX6XHLHZvGdrHclo Syj5o6puk3ZS/uMgqStwxQ0QTV7/Nnk= -----END CERTIFICATE-----Generated at Sun Jun 15 13:12:27 2025 by rpki-client