$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/930572d4-e45d-364b-ba9f-6ab1d5034994.roa File: 930572d4-e45d-364b-ba9f-6ab1d5034994.roa (raw, json) Hash identifier: OJkfCagjBVSpUquiH+fFSrREJaH+c/u0m9kRlX3Ei0g= Subject key identifier: 89:CF:20:47:61:86:58:A3:E8:C5:9C:ED:51:25:76:23:69:09:64:B6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA8F468A53E5010A19EA80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/930572d4-e45d-364b-ba9f-6ab1d5034994.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 64.24.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:8f:46:8a:53:e5:01:0a:19:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=d27fc7db-b4ea-45b0-95fa-66daaf5d00fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:87:0a:ef:62:c6:28:c3:52:8e:a3:d7:02:7b: ab:4a:7c:47:00:1e:77:ad:06:81:e3:20:72:09:be: 20:76:f1:8d:90:85:14:91:9f:39:4e:5e:ad:aa:1b: ed:5a:67:f4:74:a5:3d:91:c0:05:8f:c3:a6:dd:5f: a2:b5:ca:b6:de:6d:05:25:bf:74:99:59:9c:67:8f: 38:b0:3d:ce:d9:aa:7f:7f:2a:51:75:38:2d:8b:f8: 90:da:76:05:25:2e:ff:3c:de:41:6f:ab:4c:65:47: cf:c9:18:0c:e9:12:87:88:c4:31:ea:b1:ce:c9:43: 46:4a:5e:69:ae:05:ca:8c:7e:49:a6:af:3a:35:dc: bf:f2:40:2c:6e:6e:78:74:f3:81:4d:e5:85:43:93: 58:76:a9:7c:06:7c:92:60:f0:1d:e4:a8:fb:42:28: 13:23:0f:d2:ea:b3:07:26:d0:af:0a:90:1c:01:b4: a3:48:4b:b5:bf:6d:6c:d8:ec:07:e0:56:21:e1:c8: e7:b9:44:cb:7c:82:b2:ee:04:29:c3:71:9c:a7:5b: 4f:40:65:35:3b:e5:7c:30:ff:30:ca:46:1a:0b:8d: 4c:e4:22:6f:b2:4b:8b:3d:cd:fc:c3:53:d5:70:b6: 79:9d:f8:1b:51:21:4f:77:d5:9b:d4:2b:14:5e:67: 9b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CF:20:47:61:86:58:A3:E8:C5:9C:ED:51:25:76:23:69:09:64:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/930572d4-e45d-364b-ba9f-6ab1d5034994.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.24.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:e6:fe:0e:1d:62:8f:d9:c3:61:4d:1d:97:26:cb:51:d4:88: b6:e8:f9:83:7a:0f:5e:80:a7:ff:19:1c:86:3e:38:68:59:10: 06:2a:ed:99:f8:15:e1:9e:4f:a5:46:c2:3b:71:d1:c9:8c:81: 8d:30:d2:c8:ca:a2:72:53:f3:25:46:d3:e4:0d:15:3a:f1:83: 7f:56:68:c6:c5:6e:7e:03:f6:0e:ca:b0:b7:9e:e7:80:14:4f: f3:85:06:27:a1:c0:a9:0c:3b:9e:43:ae:57:dc:88:a9:2d:5c: 8d:f1:43:94:82:10:f4:c0:64:bd:f6:7c:60:3f:42:18:fc:dd: d9:c4:f4:5a:c1:9f:ab:a1:ec:4c:cd:3f:ba:5a:ff:f5:41:8c: 6d:9f:a7:05:ef:d0:b4:63:43:b0:5b:d3:52:28:22:e3:74:68: 21:b7:62:cd:69:f6:97:f5:51:71:86:c1:c2:27:90:04:54:8b: 0b:cb:32:5f:bd:7d:2c:30:1a:75:0e:d6:dc:d2:2a:db:54:49: 1c:5d:57:e7:5f:3d:61:4a:d6:32:fd:ee:66:aa:84:26:9c:29: 37:15:4f:44:ad:d4:8a:6c:4f:87:6e:21:fc:e3:1c:60:48:22: f2:31:d7:cf:ae:da:ca:74:a8:a5:3b:3c:78:95:b8:59:75:7d: 0f:5f:f2:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qo9GilPlAQoZ6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk ZDI3ZmM3ZGItYjRlYS00NWIwLTk1ZmEtNjZkYWFmNWQwMGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIcK72LGKMNSjqPXAnurSnxHAB53rQaB4yBy Cb4gdvGNkIUUkZ85Tl6tqhvtWmf0dKU9kcAFj8Om3V+itcq23m0FJb90mVmcZ484 sD3O2ap/fypRdTgti/iQ2nYFJS7/PN5Bb6tMZUfPyRgM6RKHiMQx6rHOyUNGSl5p rgXKjH5Jpq86Ndy/8kAsbm54dPOBTeWFQ5NYdql8BnySYPAd5Kj7QigTIw/S6rMH JtCvCpAcAbSjSEu1v21s2OwH4FYh4cjnuUTLfIKy7gQpw3Gcp1tPQGU1O+V8MP8w ykYaC41M5CJvskuLPc38w1PVcLZ5nfgbUSFPd9Wb1CsUXmebiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInPIEdhhlij6MWc7VEldiNpCWS2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTMwNTcyZDQtZTQ1ZC0z NjRiLWJhOWYtNmFiMWQ1MDM0OTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQBj8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbm/g4dYo/Zw2FNHZcmy1HUiLbo+YN6D16Ap/8ZHIY+OGhZEAYq7Zn4 FeGeT6VGwjtx0cmMgY0w0sjKonJT8yVG0+QNFTrxg39WaMbFbn4D9g7KsLee54AU T/OFBiehwKkMO55DrlfciKktXI3xQ5SCEPTAZL32fGA/Qhj83dnE9FrBn6uh7EzN P7pa//VBjG2fpwXv0LRjQ7Bb01IoIuN0aCG3Ys1p9pf1UXGGwcInkARUiwvLMl+9 fSwwGnUO1tzSKttUSRxdV+dfPWFK1jL97maqhCacKTcVT0St1IpsT4duIfzjHGBI IvIx18+u2sp0qKU7PHiVuFl1fQ9f8vU= -----END CERTIFICATE-----Generated at Mon Jun 16 16:35:25 2025 by rpki-client