$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ce8fc6b5-5ac4-3359-81f4-3cd7544db3fe.roa File: ce8fc6b5-5ac4-3359-81f4-3cd7544db3fe.roa (raw, json) Hash identifier: K2rjy+d3BC/5cvtYMm5VR4+w7JZ9mjrbk7qJvACsMVc= Subject key identifier: 8A:7C:B4:BC:1F:B6:4F:C8:AD:DA:61:F7:0C:A3:03:38:1C:65:62:1D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3AAEF0A5EF8313DE74A8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ce8fc6b5-5ac4-3359-81f4-3cd7544db3fe.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 64.196.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3a:ae:f0:a5:ef:83:13:de:74:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=a26d808c-5e1e-4614-9996-9b834fc1fbf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0a:c8:ca:c7:c2:11:f0:2c:b2:9c:26:34:24: ff:47:f5:3d:bf:1e:09:3f:be:90:be:cc:1d:e8:67: d9:7c:e0:52:73:2e:01:20:3e:c8:48:19:8d:00:59: 10:fe:4f:44:1d:38:cb:85:3c:eb:17:2f:72:26:3c: 80:6e:6a:38:61:07:a8:3b:6d:c5:6f:a3:42:97:45: 21:3b:23:26:9a:9a:4b:f2:8e:c7:46:f2:74:4e:f5: 49:27:df:5e:7a:b6:9a:7c:2d:3c:af:25:bf:41:1c: 5a:49:a0:91:00:ae:f5:66:3d:1b:f0:c6:89:56:df: 6a:b8:6b:3d:36:4c:e3:34:9a:4a:ea:2e:1e:bf:8d: fd:09:e6:54:a6:23:07:d1:14:10:e8:33:85:ac:c1: 64:e9:bb:75:ab:26:59:c2:72:c0:5e:c6:71:72:13: 89:03:54:d9:9d:aa:99:00:23:a6:bb:34:a0:81:39: 34:14:37:63:31:a1:7f:97:e1:15:32:47:54:3f:8e: 9f:a7:95:a3:87:b9:4a:00:a1:1a:6b:56:85:da:2d: 83:d5:e2:ec:6a:50:ef:b3:cd:ad:82:58:de:eb:8d: 37:6a:b1:8e:c9:bd:38:43:c0:80:39:9d:91:30:60: be:ca:64:87:2b:9c:67:01:3e:bc:85:ea:9b:0d:a5: cf:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:7C:B4:BC:1F:B6:4F:C8:AD:DA:61:F7:0C:A3:03:38:1C:65:62:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ce8fc6b5-5ac4-3359-81f4-3cd7544db3fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.196.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:07:58:8d:bf:b2:7f:2d:9b:a0:72:f0:a7:49:35:d3:98:52: 7d:2d:be:d9:2a:06:53:e3:1c:48:b4:96:fa:99:f9:10:c8:c6: b9:d6:59:b8:91:9c:1e:a4:e5:18:ca:aa:31:d3:48:50:df:79: f0:37:85:1a:fc:13:9f:ae:c2:40:e9:36:0b:d9:47:54:dd:17: 8b:10:f4:89:50:17:92:66:46:b5:89:9a:39:3c:b4:fc:8f:cb: 51:e4:7f:60:cf:2e:93:35:48:1a:9b:45:b4:64:cc:af:47:ab: 86:d7:ca:63:7a:d1:32:8b:f0:a4:c5:8e:b4:06:02:ac:b6:b9: b0:6d:c4:e5:90:aa:f6:64:b4:c2:03:c6:de:2c:7b:78:89:b3: 7c:3c:47:ca:32:17:07:0b:12:e5:2b:a3:13:2c:18:5e:e4:5c: b3:54:d0:13:6b:02:23:37:e8:c3:20:0a:c5:5d:fa:9a:0c:57: 93:3e:57:a2:5c:12:66:8b:78:5e:c3:f2:fa:74:13:c0:7e:4e: f7:58:4f:6a:36:5e:8a:96:97:ea:60:e1:d6:c4:d2:55:db:9a: 48:c5:47:fe:56:47:a9:c7:cf:82:ff:d6:fb:03:90:8f:8c:6b: 25:b1:80:de:0f:58:13:59:49:0f:c8:c2:c5:46:6c:2c:58:b2: fd:4a:bf:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSjqu8KXvgxPedKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YTI2ZDgwOGMtNWUxZS00NjE0LTk5OTYtOWI4MzRmYzFmYmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiArIysfCEfAsspwmNCT/R/U9vx4JP76Qvswd 6GfZfOBScy4BID7ISBmNAFkQ/k9EHTjLhTzrFy9yJjyAbmo4YQeoO23Fb6NCl0Uh OyMmmppL8o7HRvJ0TvVJJ99eeraafC08ryW/QRxaSaCRAK71Zj0b8MaJVt9quGs9 NkzjNJpK6i4ev439CeZUpiMH0RQQ6DOFrMFk6bt1qyZZwnLAXsZxchOJA1TZnaqZ ACOmuzSggTk0FDdjMaF/l+EVMkdUP46fp5Wjh7lKAKEaa1aF2i2D1eLsalDvs82t glje6403arGOyb04Q8CAOZ2RMGC+ymSHK5xnAT68heqbDaXPBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIp8tLwftk/Irdph9wyjAzgcZWIdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2U4ZmM2YjUtNWFjNC0z MzU5LTgxZjQtM2NkNzU0NGRiM2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMQ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQHWI2/sn8tm6By8KdJNdOYUn0tvtkqBlPjHEi0lvqZ+RDIxrnWWbiR nB6k5RjKqjHTSFDfefA3hRr8E5+uwkDpNgvZR1TdF4sQ9IlQF5JmRrWJmjk8tPyP y1Hkf2DPLpM1SBqbRbRkzK9Hq4bXymN60TKL8KTFjrQGAqy2ubBtxOWQqvZktMID xt4se3iJs3w8R8oyFwcLEuUroxMsGF7kXLNU0BNrAiM36MMgCsVd+poMV5M+V6Jc EmaLeF7D8vp0E8B+TvdYT2o2XoqWl+pg4dbE0lXbmkjFR/5WR6nHz4L/1vsDkI+M ayWxgN4PWBNZSQ/IwsVGbCxYsv1Kv/g= -----END CERTIFICATE-----Generated at Mon Jun 16 02:42:28 2025 by rpki-client