$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7018231-1d12-33c3-91e9-2da426ea822c.roa File: b7018231-1d12-33c3-91e9-2da426ea822c.roa (raw, json) Hash identifier: WpRvjJ20v25Y7pYWsXg08DC+4rDhAMBbCmEDRnSeIyM= Subject key identifier: 0F:41:21:4C:CD:D6:FD:88:19:E4:56:9E:3F:8B:0F:7D:5B:1C:77:60 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB4EC6523BD302B0ACCA67900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7018231-1d12-33c3-91e9-2da426ea822c.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 7029 IP address blocks: 64.24.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:65:23:bd:30:2b:0a:cc:a6:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=a24aad7d-9e9d-48c1-a82e-e293764fc09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:15:02:95:9e:11:c7:d3:a0:38:dd:0e:4f:76: 1c:29:5d:77:e3:7b:ba:2d:f2:b3:de:ca:0b:6b:3a: 6c:e1:e2:68:bc:73:69:5d:a7:30:17:1b:f5:d9:73: b2:29:45:e0:89:6e:aa:3f:a1:0a:69:aa:b8:25:12: c2:a5:11:b2:0e:0f:8e:cf:10:46:49:ac:47:f5:3e: 5d:f7:98:cf:1f:26:d2:45:e3:c8:92:3a:db:af:35: bd:cf:c2:0e:40:b5:54:b5:c9:04:e7:ae:4e:e1:fd: b2:34:37:02:99:2f:53:15:b6:44:4a:1f:0b:f8:d7: 05:de:b2:49:d9:05:26:68:c8:40:44:32:cb:97:85: 9a:ea:56:22:13:66:72:bc:4e:2c:3b:20:f7:9a:22: 1f:34:43:0a:50:74:38:e3:5b:18:3a:3c:f1:8e:d6: b9:a5:37:ba:e7:23:49:27:df:2c:2b:94:71:a1:17: 11:7a:46:28:31:8c:62:52:dd:a2:ec:27:83:de:81: c7:cf:2f:f8:dc:89:67:5f:98:b3:ba:14:d6:7b:78: 11:9f:88:7a:78:1e:44:b1:2d:d3:dd:ae:8b:08:a5: a4:58:77:97:2c:4f:20:b7:75:c4:8a:be:3a:ab:d5: 35:f7:38:c5:1c:39:c0:09:fa:44:24:36:66:80:60: 59:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:41:21:4C:CD:D6:FD:88:19:E4:56:9E:3F:8B:0F:7D:5B:1C:77:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7018231-1d12-33c3-91e9-2da426ea822c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.24.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:39:5a:f5:1b:0d:05:a0:6b:94:08:79:1c:9f:ba:71:9d:39: ed:f1:04:9d:55:90:df:08:8f:56:5d:5a:e6:74:99:8a:7f:02: f5:a4:3d:c0:f8:10:88:a6:a0:6f:3c:fb:c8:03:d8:1b:dd:28: 75:28:a8:31:d7:74:aa:31:a5:a0:28:31:71:03:07:87:68:7b: 97:1e:ab:b0:83:62:b8:99:32:d0:14:ec:23:74:d2:09:23:75: 2e:5d:c3:ba:36:69:e7:7c:9d:92:58:47:6d:12:76:b2:40:12: 85:ab:ca:07:13:f6:13:c0:ca:a3:1e:67:4b:73:83:9b:86:72: 18:94:05:2f:7d:0d:b1:84:af:7a:b8:b8:d4:25:14:04:04:9c: 8e:af:3b:52:d4:c3:0b:ce:45:e1:0e:6c:a8:5c:ff:b2:49:cc: ee:a3:be:66:61:b5:8c:2f:9a:fb:f2:ce:d1:b0:66:cd:a7:33: 4a:b2:ba:84:fb:c6:52:6f:12:14:3e:17:fa:0b:e4:a7:d3:a7: f3:84:d1:13:cb:24:0e:49:a9:37:1b:1a:75:77:3f:5c:25:78: 90:09:6b:12:4e:2c:18:d8:b9:a9:0f:c7:9a:d8:d4:37:86:12: 11:a2:05:c8:31:d6:b1:e3:7c:fc:5d:3a:c2:d5:bf:2d:09:72: 64:e5:8a:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07GUjvTArCsymeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk YTI0YWFkN2QtOWU5ZC00OGMxLWE4MmUtZTI5Mzc2NGZjMDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixUClZ4Rx9OgON0OT3YcKV1343u6LfKz3soL azps4eJovHNpXacwFxv12XOyKUXgiW6qP6EKaaq4JRLCpRGyDg+OzxBGSaxH9T5d 95jPHybSRePIkjrbrzW9z8IOQLVUtckE565O4f2yNDcCmS9TFbZESh8L+NcF3rJJ 2QUmaMhARDLLl4Wa6lYiE2ZyvE4sOyD3miIfNEMKUHQ441sYOjzxjta5pTe65yNJ J98sK5RxoRcRekYoMYxiUt2i7CeD3oHHzy/43IlnX5izuhTWe3gRn4h6eB5EsS3T 3a6LCKWkWHeXLE8gt3XEir46q9U19zjFHDnACfpEJDZmgGBZcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9BIUzN1v2IGeRWnj+LD31bHHdgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjcwMTgyMzEtMWQxMi0z M2MzLTkxZTktMmRhNDI2ZWE4MjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQBhoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQ5WvUbDQWga5QIeRyfunGdOe3xBJ1VkN8Ij1ZdWuZ0mYp/AvWkPcD4 EIimoG88+8gD2BvdKHUoqDHXdKoxpaAoMXEDB4doe5ceq7CDYriZMtAU7CN00gkj dS5dw7o2aed8nZJYR20SdrJAEoWrygcT9hPAyqMeZ0tzg5uGchiUBS99DbGEr3q4 uNQlFAQEnI6vO1LUwwvOReEObKhc/7JJzO6jvmZhtYwvmvvyztGwZs2nM0qyuoT7 xlJvEhQ+F/oL5KfTp/OE0RPLJA5JqTcbGnV3P1wleJAJaxJOLBjYuakPx5rY1DeG EhGiBcgx1rHjfPxdOsLVvy0JcmTlinY= -----END CERTIFICATE-----Generated at Mon Aug 4 16:10:59 2025 by rpki-client