$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/490df297-53eb-3685-bd50-38a8fd33dcb1.roa File: 490df297-53eb-3685-bd50-38a8fd33dcb1.roa (raw, json) Hash identifier: Fo9tCIG6zuRHuOt61nn0Aj73uGji5mx4LZwTyRAPa50= Subject key identifier: A2:68:46:A0:1D:44:34:74:CE:50:C7:1D:A9:CF:81:73:2A:70:F4:8B Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F4328584A7E7B60C5D0C354E58EED9040 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/490df297-53eb-3685-bd50-38a8fd33dcb1.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 198949 IP address blocks: 64.251.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:60:c5:d0:c3:54:e5:8e:ed:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=666343ad-73db-4cfc-8494-c7e2bec1fa68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:70:87:99:d0:18:eb:47:d0:5c:82:7a:32:98: 44:23:1f:35:e3:c9:ce:e4:98:41:37:7a:c3:b0:d5: 2e:82:42:2c:f1:f6:93:9f:ea:81:4c:5e:ff:a2:38: 3b:94:9e:46:d1:91:63:25:8d:53:d8:22:07:5b:3a: ee:ce:65:06:60:5b:97:87:cf:e4:70:91:e3:f3:ad: 2c:c2:c1:14:3e:40:25:78:97:37:be:cd:c0:8c:ee: 3a:a7:d2:12:f1:ab:22:eb:10:6f:cb:c0:23:e6:e8: 72:95:25:af:2c:af:63:d0:ba:f1:43:73:7d:3f:8a: 8b:2e:06:55:16:54:1b:fe:24:86:27:e2:54:be:e4: b8:eb:4c:0a:c5:5b:4d:56:30:25:6c:2d:0b:b5:72: 81:79:c6:10:da:d6:29:45:06:d4:22:03:09:26:c7: 27:e8:32:c5:39:b4:98:14:7a:74:2b:1b:29:71:80: e2:34:77:84:ec:49:5d:1e:27:8b:d6:22:a4:c7:2e: 9d:6b:c9:21:da:1f:a5:5a:c2:e8:7f:b5:a3:9b:44: 04:27:2a:46:6c:3b:1a:6c:e0:47:50:fc:55:4d:c7: 09:16:04:52:a2:90:0b:2b:a4:5f:04:d1:92:49:d7: 75:2a:c5:24:5d:2d:de:e2:c4:f7:8d:2f:bb:c7:ab: 33:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:68:46:A0:1D:44:34:74:CE:50:C7:1D:A9:CF:81:73:2A:70:F4:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/490df297-53eb-3685-bd50-38a8fd33dcb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 64.251.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:c4:26:25:b6:f0:c9:c6:f4:fe:dd:09:54:52:8e:f6:27:53: 93:ef:40:f6:0d:02:f4:79:ae:72:c0:41:c8:60:7b:bf:17:33: 72:ba:96:4a:f5:ef:2d:43:78:b5:b4:c9:25:7b:42:91:58:83: 21:fb:42:4f:d4:57:be:ea:05:75:75:d2:3d:eb:af:d7:08:b3: 67:db:a2:bf:3e:2a:1a:e9:a5:de:4c:f6:f3:c7:b1:2b:2d:74: 9c:ee:14:3e:50:39:52:ea:9f:4d:4f:1a:cf:e0:92:1e:d7:a4: 0f:46:8b:6c:db:f6:09:cf:64:fb:5f:c6:65:7c:82:83:7e:53: 74:5b:03:9a:bf:ce:b7:4e:51:8e:1f:06:df:47:68:23:1d:f1: 34:54:d8:89:2b:0d:86:71:d6:12:4a:6e:f2:e2:ff:c2:73:1c: 09:36:94:10:dd:b9:9b:b1:c1:d0:af:c7:5b:46:a7:ba:bc:4c: bf:42:08:3b:1c:a3:07:a9:5e:6a:1b:21:30:6c:25:11:0c:ce: 81:06:a6:bb:f1:03:2f:b3:92:df:26:fd:ec:76:fb:2d:e1:b4: 80:3f:19:3f:5e:03:2a:7d:de:f5:f6:ae:30:71:1b:3d:30:49: ee:ef:39:f6:f1:92:43:99:0a:a1:8f:8d:d6:a0:db:cf:b7:65: 39:91:fd:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e2DF0MNU5Y7tkEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk NjY2MzQzYWQtNzNkYi00Y2ZjLTg0OTQtYzdlMmJlYzFmYTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnCHmdAY60fQXIJ6MphEIx8148nO5JhBN3rD sNUugkIs8faTn+qBTF7/ojg7lJ5G0ZFjJY1T2CIHWzruzmUGYFuXh8/kcJHj860s wsEUPkAleJc3vs3AjO46p9IS8asi6xBvy8Aj5uhylSWvLK9j0LrxQ3N9P4qLLgZV FlQb/iSGJ+JUvuS460wKxVtNVjAlbC0LtXKBecYQ2tYpRQbUIgMJJscn6DLFObSY FHp0KxspcYDiNHeE7EldHieL1iKkxy6da8kh2h+lWsLof7Wjm0QEJypGbDsabOBH UPxVTccJFgRSopALK6RfBNGSSdd1KsUkXS3e4sT3jS+7x6szcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJoRqAdRDR0zlDHHanPgXMqcPSLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvNDkwZGYyOTctNTNlYi0z Njg1LWJkNTAtMzhhOGZkMzNkY2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQPswMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/EJiW28MnG9P7dCVRSjvYnU5PvQPYNAvR5rnLAQchge78XM3K6lkr1 7y1DeLW0ySV7QpFYgyH7Qk/UV77qBXV10j3rr9cIs2fbor8+Khrppd5M9vPHsSst dJzuFD5QOVLqn01PGs/gkh7XpA9Gi2zb9gnPZPtfxmV8goN+U3RbA5q/zrdOUY4f Bt9HaCMd8TRU2IkrDYZx1hJKbvLi/8JzHAk2lBDduZuxwdCvx1tGp7q8TL9CCDsc owepXmobITBsJREMzoEGprvxAy+zkt8m/ex2+y3htIA/GT9eAyp93vX2rjBxGz0w Se7vOfbxkkOZCqGPjdag28+3ZTmR/XA= -----END CERTIFICATE-----Generated at Wed Aug 6 04:15:13 2025 by rpki-client