$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4dc62b2-ccc3-3660-9661-a04dec1cab44.roa File: b4dc62b2-ccc3-3660-9661-a04dec1cab44.roa (raw, json) Hash identifier: whDgDTTECuCv24qEU2a+qNqEDAqSQ+ZueGV8g4ghn5g= Subject key identifier: 63:76:EB:D2:73:86:3A:40:63:F2:68:62:F3:F3:67:41:B1:08:58:AB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AF7EBE83354A8019334223740 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4dc62b2-ccc3-3660-9661-a04dec1cab44.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 0 IP address blocks: 64.83.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:e8:33:54:a8:01:93:34:22:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=5f96afdb-72e1-4ad3-ba7a-3104589eea9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:31:a3:f1:69:e1:95:14:4a:ad:3d:1a:e3:b2: e0:bf:37:f1:ce:71:64:ea:48:86:53:31:25:0e:85: 05:8e:34:93:ed:9c:1c:ff:51:2f:86:df:0d:f4:b1: bb:1b:1c:a0:43:4c:49:39:8c:e0:71:45:31:45:36: 46:67:a1:40:af:27:5f:66:f5:ba:8b:9c:f0:18:8e: 0b:f5:bc:2b:3f:8c:0d:b3:a1:fc:cf:4f:1b:aa:cb: 4d:f5:78:e6:df:40:b7:bb:83:20:d0:c8:a7:3f:54: 9b:c8:44:58:12:a7:57:c2:82:d6:36:c3:e6:75:0f: 40:a6:18:f6:e5:c3:19:b8:ca:b4:fc:dc:fb:f5:95: 0a:f1:61:6e:51:cd:f5:45:72:b2:ae:0a:b7:cc:49: ba:4e:d7:6e:87:31:d4:6a:c2:8d:93:2a:5e:d6:1c: c2:d7:4f:ff:9f:18:25:b3:60:a5:c5:8c:cb:8f:a8: 0a:53:d4:79:eb:69:12:21:4a:f0:c3:82:65:e3:99: f9:29:04:39:40:9b:d4:ec:59:5e:f7:0b:57:32:92: 02:a8:d5:75:ca:3e:ef:ca:40:c7:88:6c:19:c5:33: bb:5c:96:d7:d4:c4:d4:57:69:3f:fa:75:33:fc:7b: fd:6c:f5:60:cd:b7:fa:5d:c2:94:40:18:e1:f6:89: 51:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:76:EB:D2:73:86:3A:40:63:F2:68:62:F3:F3:67:41:B1:08:58:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4dc62b2-ccc3-3660-9661-a04dec1cab44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.83.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:91:18:70:0f:a6:8f:6e:31:9f:bf:3f:00:43:7c:f1:45:27: d0:e6:9d:1a:fe:8e:03:ba:67:d2:68:07:68:60:c1:4b:9b:18: 62:a6:72:47:77:1e:79:d6:d5:04:bd:1f:9c:59:6e:71:f1:07: 38:53:a7:dd:13:8c:32:ea:8e:3f:10:38:d9:fe:69:1d:d7:fb: 28:5a:f9:a3:1e:8e:b0:e9:61:07:fd:87:9a:3b:70:85:40:e9: 17:28:0d:98:68:9b:16:7a:76:f2:63:15:98:e0:23:99:1a:ba: 02:4a:50:dd:82:6a:a4:8e:e2:12:b5:94:e1:8d:35:a9:32:b9: 7b:7f:c7:87:8a:c7:43:ac:9e:03:8c:c3:e6:19:de:f1:be:c6: b9:43:26:80:bb:f3:5e:9b:7e:48:d1:dc:9e:9e:dd:ab:c3:f9: 79:11:80:cd:65:69:1d:c2:c7:06:83:4b:6d:1e:5d:94:ab:29: 48:49:29:62:fa:90:83:ec:ca:e4:12:e9:1d:20:1b:31:47:9b: 6e:17:41:c5:36:d1:1c:cf:0b:97:fe:b1:83:19:49:40:9d:f2: 97:ac:f8:24:c3:16:fe:a7:bb:c1:f9:ef:b8:da:ff:95:7d:66: 08:3e:5b:4c:7a:45:34:e7:98:ae:6c:b0:9b:3b:36:c4:a8:f6: 19:ad:0a:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr36+gzVKgBkzQiN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk NWY5NmFmZGItNzJlMS00YWQzLWJhN2EtMzEwNDU4OWVlYTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zGj8WnhlRRKrT0a47LgvzfxznFk6kiGUzEl DoUFjjST7Zwc/1Evht8N9LG7GxygQ0xJOYzgcUUxRTZGZ6FArydfZvW6i5zwGI4L 9bwrP4wNs6H8z08bqstN9Xjm30C3u4Mg0MinP1SbyERYEqdXwoLWNsPmdQ9Aphj2 5cMZuMq0/Nz79ZUK8WFuUc31RXKyrgq3zEm6TtduhzHUasKNkype1hzC10//nxgl s2ClxYzLj6gKU9R562kSIUrww4Jl45n5KQQ5QJvU7Fle9wtXMpICqNV1yj7vykDH iGwZxTO7XJbX1MTUV2k/+nUz/Hv9bPVgzbf6XcKUQBjh9olRSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGN269JzhjpAY/JoYvPzZ0GxCFirMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjRkYzYyYjItY2NjMy0z NjYwLTk2NjEtYTA0ZGVjMWNhYjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQFNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6RGHAPpo9uMZ+/PwBDfPFFJ9DmnRr+jgO6Z9JoB2hgwUubGGKmckd3 HnnW1QS9H5xZbnHxBzhTp90TjDLqjj8QONn+aR3X+yha+aMejrDpYQf9h5o7cIVA 6RcoDZhomxZ6dvJjFZjgI5kaugJKUN2CaqSO4hK1lOGNNakyuXt/x4eKx0OsngOM w+YZ3vG+xrlDJoC7816bfkjR3J6e3avD+XkRgM1laR3CxwaDS20eXZSrKUhJKWL6 kIPsyuQS6R0gGzFHm24XQcU20RzPC5f+sYMZSUCd8pes+CTDFv6nu8H577ja/5V9 Zgg+W0x6RTTnmK5ssJs7NsSo9hmtCg0= -----END CERTIFICATE-----Generated at Tue Aug 26 01:35:51 2025 by rpki-client