$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/d6824e42-8b91-3659-bef4-c3f464d9bb15.roa File: d6824e42-8b91-3659-bef4-c3f464d9bb15.roa (raw, json) Hash identifier: Ikuy9MdmLmH7SYetJ8wHwZ5jHQI9LIqsbELovWlyqSk= Subject key identifier: E9:0D:79:A3:6C:75:67:F3:7F:E1:1D:BB:ED:B3:91:C2:53:F2:06:BD Certificate issuer: /CN=de848e16-b429-4505-9234-f6d889fd1438 Certificate serial: 010D0C9F4328584AD23C306964A1832BD609F1C0 Authority key identifier: 1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/d6824e42-8b91-3659-bef4-c3f464d9bb15.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 399820 IP address blocks: 64.49.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:30:69:64:a1:83:2b:d6:09:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de848e16-b429-4505-9234-f6d889fd1438 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=fc2d82b4-5dd7-4c6b-bec5-37569ebbf002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:29:a7:30:3f:8d:0f:7e:c7:76:3a:09:da:e0: 10:39:fe:1b:c1:1b:d9:db:2d:a2:28:9c:17:6c:fd: 23:bd:6e:f7:0e:23:33:16:ec:e7:fe:5a:73:87:48: e2:e4:ce:68:6c:c3:92:e5:51:02:d0:f0:39:ba:39: ac:08:e2:1e:be:b4:35:ae:ec:83:52:52:6d:18:02: 5c:24:49:33:e5:c1:b1:38:52:dc:8e:24:b7:41:b5: 51:32:6f:9e:1d:12:f1:1c:ad:b2:e0:86:11:44:d9: d3:0c:4d:0b:66:c3:1b:41:67:ed:5c:c0:13:41:b0: e4:6e:80:df:c7:aa:f9:d9:fb:95:61:88:da:cd:bf: d8:7e:f8:5e:3d:78:21:77:10:09:d7:8f:43:a3:d8: cd:93:62:6f:3b:79:02:46:5e:55:93:b4:85:50:84: 5b:cc:59:94:56:a9:ae:1b:7e:17:3b:e1:74:d1:73: 8d:8f:d9:12:94:11:84:dc:91:77:d2:26:84:86:25: f7:a8:cd:fe:d9:fe:5c:27:8b:91:6a:56:e9:37:55: 74:a3:bb:7b:e8:f3:98:59:2e:60:16:9b:73:a3:d5: 0c:69:f6:91:32:2e:ad:f0:8f:86:8a:9e:33:69:fb: 94:f9:30:4f:10:ba:86:ad:81:f1:7a:a5:a4:9c:9c: 36:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0D:79:A3:6C:75:67:F3:7F:E1:1D:BB:ED:B3:91:C2:53:F2:06:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/d6824e42-8b91-3659-bef4-c3f464d9bb15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl X509v3 Authority Key Identifier: keyid:1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer sbgp-ipAddrBlock: critical IPv4: 64.49.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:ce:f5:03:74:e4:ff:37:b3:51:37:47:73:5e:ec:7a:cd:fc: 76:6b:6e:da:5f:47:cd:73:8f:a3:f6:82:bd:91:66:6e:8d:73: 29:e4:7a:71:54:f3:df:d6:6b:8c:fb:84:0f:7c:da:cf:9d:36: 06:75:83:7c:ba:6f:93:99:7f:4e:7f:77:12:54:ae:bd:fd:d9: 7d:68:b0:c1:2a:75:1e:64:44:ab:92:46:b2:94:9a:8b:4b:53: 80:26:a5:6f:34:0d:4d:5d:48:ae:28:14:94:bb:bf:6f:b3:ec: 4f:e3:ea:a4:37:7b:52:5b:c8:2a:bf:08:9d:79:ba:12:9e:fe: b2:0c:54:ad:2c:19:35:06:81:bc:ad:cc:75:83:76:7c:f1:b4: 34:f2:c5:93:b4:22:b5:b1:8d:ff:db:4d:70:71:6a:fb:46:e1: e5:d2:df:11:f6:0e:8c:07:3c:51:4b:dc:23:b5:e2:17:73:38: 1b:9d:7c:b7:26:17:fb:e2:c2:13:7b:3b:f6:d7:8e:74:ef:e6: a5:ce:18:98:e3:b8:27:00:13:db:0e:b4:3b:de:ff:89:c4:42: 72:4e:92:73:ab:88:79:3f:c2:00:5f:56:61:35:e8:f1:bd:94: e8:37:8e:a3:ab:9d:6b:b8:bf:2e:42:39:a4:0a:84:0f:f5:03: 54:04:d7:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPDBpZKGDK9YJ8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4NDhlMTYtYjQyOS00NTA1LTkyMzQtZjZkODg5ZmQx NDM4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZmMyZDgyYjQtNWRkNy00YzZiLWJlYzUtMzc1NjllYmJmMDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCmnMD+ND37HdjoJ2uAQOf4bwRvZ2y2iKJwX bP0jvW73DiMzFuzn/lpzh0ji5M5obMOS5VEC0PA5ujmsCOIevrQ1ruyDUlJtGAJc JEkz5cGxOFLcjiS3QbVRMm+eHRLxHK2y4IYRRNnTDE0LZsMbQWftXMATQbDkboDf x6r52fuVYYjazb/YfvhePXghdxAJ149Do9jNk2JvO3kCRl5Vk7SFUIRbzFmUVqmu G34XO+F00XONj9kSlBGE3JF30iaEhiX3qM3+2f5cJ4uRalbpN1V0o7t76POYWS5g Fptzo9UMafaRMi6t8I+Gip4zafuU+TBPELqGrYHxeqWknJw2cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkNeaNsdWfzf+Edu+2zkcJT8ga9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg0 OGUxNi1iNDI5LTQ1MDUtOTIzNC1mNmQ4ODlmZDE0MzgvZDY4MjRlNDItOGI5MS0z NjU5LWJlZjQtYzNmNDY0ZDliYjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4NDhlMTYtYjQyOS00NTA1LTky MzQtZjZkODg5ZmQxNDM4L2RlODQ4ZTE2LWI0MjktNDUwNS05MjM0LWY2ZDg4OWZk MTQzOC5jcmwwHwYDVR0jBBgwFoAUHsnQl1NrlIorg8DaKChlnetiZ+QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg0OGUxNi1iNDI5LTQ1MDUtOTIzNC1mNmQ4 ODlmZDE0MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQDEIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/O9QN05P83s1E3R3Ne7HrN/HZrbtpfR81zj6P2gr2RZm6NcynkenFU 89/Wa4z7hA982s+dNgZ1g3y6b5OZf05/dxJUrr392X1osMEqdR5kRKuSRrKUmotL U4AmpW80DU1dSK4oFJS7v2+z7E/j6qQ3e1JbyCq/CJ15uhKe/rIMVK0sGTUGgbyt zHWDdnzxtDTyxZO0IrWxjf/bTXBxavtG4eXS3xH2DowHPFFL3CO14hdzOBudfLcm F/viwhN7O/bXjnTv5qXOGJjjuCcAE9sOtDve/4nEQnJOknOriHk/wgBfVmE16PG9 lOg3jqOrnWu4vy5COaQKhA/1A1QE15I= -----END CERTIFICATE-----Generated at Wed Aug 20 22:32:27 2025 by rpki-client