$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/38470f8d-5686-30f7-9170-22f3bc850829.roa File: 38470f8d-5686-30f7-9170-22f3bc850829.roa (raw, json) Hash identifier: za5DD6An/MkqsOLbJQLqCCV0gLOYeXZTpCQsU0dLxdI= Subject key identifier: F4:2E:6E:21:EA:6B:77:49:10:1B:C4:70:3A:A2:9E:BF:FE:1A:1B:2B Certificate issuer: /CN=847c7608-e8de-46e4-803f-28e1912f24ed Certificate serial: 010D0C9F4328584A9FFBA6DB398828FB3FB76F60 Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/38470f8d-5686-30f7-9170-22f3bc850829.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 33139 IP address blocks: 66.49.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:a6:db:39:88:28:fb:3f:b7:6f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=928151eb-67d5-4726-9182-5b45656e5cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:af:3e:4c:f5:a2:fd:24:7a:24:d7:a3:db:79: 1c:ee:9d:79:c3:83:ef:60:ed:f4:6e:d2:12:a5:f5: c5:d6:5c:8b:79:8b:0f:22:2b:54:be:9f:7f:b4:25: 83:e9:67:21:c2:b6:a2:28:3a:ce:ea:f6:10:80:09: f4:22:fc:89:fd:bf:70:a3:59:e8:5b:80:55:0a:38: 96:bf:a1:d7:0f:4d:3d:a9:a3:17:51:09:02:fb:41: d4:f0:87:bb:c5:b1:15:80:ee:09:1f:b3:1a:10:e5: ed:d0:aa:61:d1:49:d1:7c:44:ea:94:10:16:62:4e: 26:32:6c:be:87:74:59:19:86:2b:25:9e:c1:c8:b8: ea:ef:b0:0b:17:18:01:e9:db:00:70:26:02:ed:0b: e0:72:48:39:35:b6:a3:18:ca:07:83:f8:26:97:10: 67:c0:23:aa:4e:a4:3f:6f:6a:43:d1:21:a5:6e:6e: cc:2f:c4:fa:e5:14:4d:5e:f9:76:9d:c7:1e:7d:1e: 52:53:f8:db:70:f5:cc:17:04:e2:20:36:a3:9f:6f: a4:da:18:3b:db:dd:b5:c8:b6:f2:a1:42:69:d9:b1: 5c:1e:c8:e3:51:29:d4:e5:50:7e:ad:ec:f9:bf:34: 86:15:bc:f6:0c:ad:3f:5d:31:9c:13:18:7d:40:b2: 8f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2E:6E:21:EA:6B:77:49:10:1B:C4:70:3A:A2:9E:BF:FE:1A:1B:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/38470f8d-5686-30f7-9170-22f3bc850829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl X509v3 Authority Key Identifier: keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer sbgp-ipAddrBlock: critical IPv4: 66.49.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:4b:63:fd:69:10:b2:17:d6:8c:f9:0f:53:17:b7:33:c9:64: 9b:aa:c4:ad:81:0a:83:f6:82:8d:14:85:80:35:d2:05:49:b3: 04:38:a8:63:3c:df:d9:fe:55:86:70:45:63:dc:cd:de:ed:f4: e7:1a:a9:12:ed:ca:fb:f3:9f:52:1b:99:3f:56:1a:08:24:bf: b6:ff:32:c7:8e:cf:1c:53:68:77:a1:aa:88:d8:3b:40:d1:dd: 79:0b:5a:be:2f:ff:39:d6:6e:3c:99:bd:b9:0d:36:c5:fb:50: 27:3a:a0:5d:e1:e8:5f:3e:9d:84:65:a8:02:c6:64:da:23:03: 54:58:28:8d:38:3c:a8:f1:74:0d:31:32:a4:44:4c:af:7c:cc: 55:34:2f:c7:a4:e3:6c:0d:7c:db:76:ca:8a:ad:91:f8:17:5a: 41:90:aa:69:3e:28:1b:33:67:e3:aa:ac:c4:bf:85:a3:ac:e9: 89:7c:18:d6:3b:4c:4f:c8:c5:97:5f:5a:7b:9f:ab:cb:77:50: 19:dc:a3:6f:19:2f:6b:1a:fa:cc:57:22:07:82:67:cf:87:af: cc:32:f5:44:b2:43:7b:1e:e4:b8:51:0e:49:95:88:ba:d7:db: de:13:65:2f:8b:18:2f:39:0c:d4:42:f6:af:7f:e6:cb:39:1b: 37:9f:d5:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+6bbOYgo+z+3b2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ3Yzc2MDgtZThkZS00NmU0LTgwM2YtMjhlMTkxMmYy NGVkMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk OTI4MTUxZWItNjdkNS00NzI2LTkxODItNWI0NTY1NmU1Y2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAia8+TPWi/SR6JNej23kc7p15w4PvYO30btIS pfXF1lyLeYsPIitUvp9/tCWD6WchwraiKDrO6vYQgAn0IvyJ/b9wo1noW4BVCjiW v6HXD009qaMXUQkC+0HU8Ie7xbEVgO4JH7MaEOXt0Kph0UnRfETqlBAWYk4mMmy+ h3RZGYYrJZ7ByLjq77ALFxgB6dsAcCYC7Qvgckg5NbajGMoHg/gmlxBnwCOqTqQ/ b2pD0SGlbm7ML8T65RRNXvl2nccefR5SU/jbcPXMFwTiIDajn2+k2hg72921yLby oUJp2bFcHsjjUSnU5VB+rez5vzSGFbz2DK0/XTGcExh9QLKPywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQubiHqa3dJEBvEcDqinr/+GhsrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdj NzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUxOTEyZjI0ZWQvMzg0NzBmOGQtNTY4Ni0z MGY3LTkxNzAtMjJmM2JjODUwODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODQ3Yzc2MDgtZThkZS00NmU0LTgw M2YtMjhlMTkxMmYyNGVkLzg0N2M3NjA4LWU4ZGUtNDZlNC04MDNmLTI4ZTE5MTJm MjRlZC5jcmwwHwYDVR0jBBgwFoAUC5vDig6EO2524ysqfc0IOy/v5RgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdjNzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUx OTEyZjI0ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjHBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBLY/1pELIX1oz5D1MXtzPJZJuqxK2BCoP2go0UhYA10gVJswQ4qGM8 39n+VYZwRWPczd7t9OcaqRLtyvvzn1IbmT9WGggkv7b/MseOzxxTaHehqojYO0DR 3XkLWr4v/znWbjyZvbkNNsX7UCc6oF3h6F8+nYRlqALGZNojA1RYKI04PKjxdA0x MqRETK98zFU0L8ek42wNfNt2yoqtkfgXWkGQqmk+KBszZ+OqrMS/haOs6Yl8GNY7 TE/IxZdfWnufq8t3UBnco28ZL2sa+sxXIgeCZ8+Hr8wy9USyQ3se5LhRDkmViLrX 294TZS+LGC85DNRC9q9/5ss5Gzef1SI= -----END CERTIFICATE-----Generated at Fri Aug 8 00:50:08 2025 by rpki-client