$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/2a984cf4-8ed3-3545-8c6e-d930e9904b68.roa File: 2a984cf4-8ed3-3545-8c6e-d930e9904b68.roa (raw, json) Hash identifier: h+N35X2WAr9EDvz/I5ChoyF9yPc5c5D8gpvfUdJcArw= Subject key identifier: 8F:E3:9A:87:56:24:D8:AB:86:9D:A4:3D:0E:C9:CB:5C:EB:CC:75:70 Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3 Certificate serial: 010D0C9F43285849E91F9E4BF1A1E3E2BF5A8F40 Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/2a984cf4-8ed3-3545-8c6e-d930e9904b68.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 24753 IP address blocks: 64.49.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:9e:4b:f1:a1:e3:e2:bf:5a:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3 Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=ac1fb80c-855c-4a45-ab19-eec94c990a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2e:0c:b4:7c:c7:e0:d2:be:a8:7e:63:ef:5c: 4b:cb:10:63:eb:82:bc:d7:4e:e5:49:39:1d:43:2d: 76:24:e1:f6:6c:ab:66:0c:ea:97:4c:d9:eb:9f:18: d3:0a:67:6d:74:3f:f2:27:63:9f:c4:aa:a1:1c:6d: 2a:f5:69:d1:6b:f4:00:e0:55:a8:de:a7:5b:f5:31: 41:b6:74:64:03:a8:85:8b:61:5b:fb:1c:65:9d:1b: a8:ef:6b:bf:8e:58:73:4b:ce:4c:9b:cf:4a:c7:20: f0:de:18:50:c1:f2:fb:d1:46:20:e3:40:26:0f:2b: 99:c0:b7:c7:7d:ed:84:1a:34:bd:b9:cb:a5:e8:1e: 79:2c:7c:5d:82:da:f0:5c:79:90:33:a3:1b:ba:a6: 5b:01:cb:f5:0c:ea:2e:6d:21:4f:3f:e0:f2:6b:bd: 33:5c:35:8a:50:13:5c:d4:e7:49:59:0e:32:ab:fa: c7:d4:12:9b:d5:75:32:7f:50:64:35:06:80:e2:8e: 43:1b:37:1e:3d:e2:f8:f9:bb:c2:83:0e:c2:ec:95: 90:54:07:c3:1e:6a:5e:ce:e3:4f:c4:68:80:ce:a5: f0:ad:ec:16:62:e9:d3:76:f4:65:87:a0:30:82:e0: 85:f5:7a:3d:d9:44:28:a2:70:16:e1:ad:33:c0:fa: da:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E3:9A:87:56:24:D8:AB:86:9D:A4:3D:0E:C9:CB:5C:EB:CC:75:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/2a984cf4-8ed3-3545-8c6e-d930e9904b68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl X509v3 Authority Key Identifier: keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer sbgp-ipAddrBlock: critical IPv4: 64.49.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ec:cb:d6:d3:e5:7f:c6:10:42:8b:c8:0d:a7:c2:da:c8:97: 1e:b5:a0:b5:39:82:ef:71:0d:7f:2b:d2:a3:c4:02:62:9c:64: ec:33:f1:3b:f4:d0:eb:78:71:45:a5:16:24:9b:9e:63:05:fa: 8b:12:98:7a:41:37:65:4a:9e:e8:82:d7:f9:86:4d:97:62:82: 12:bf:f5:80:b6:39:8a:91:40:57:06:4e:e1:ad:2c:06:d0:c2: ea:f5:eb:ca:6d:ac:28:11:4e:08:35:95:f6:08:9c:02:3f:c3: c9:30:0d:4c:47:fc:4e:cb:a7:ad:aa:3e:f3:9f:10:39:23:ee: 05:02:2f:8c:ba:85:7e:a1:bc:30:8a:03:18:5a:41:26:dc:1b: a6:75:3b:60:8f:a0:6c:f7:9d:ee:c5:3e:ec:cd:14:b4:39:60: 65:a2:d2:91:b2:24:1e:74:9d:6d:78:12:84:17:68:c4:99:f7: cb:7f:06:32:61:98:97:7e:f4:62:23:57:14:1f:3d:0e:7a:e5: 81:37:f3:be:3e:5b:67:5d:d9:b3:98:67:2a:ba:08:25:a8:e8: 1a:fd:ae:91:d3:ee:17:70:95:b2:1c:f3:b1:fd:7a:60:18:3a: ce:36:48:c3:11:20:90:73:8c:b1:a2:bf:66:1b:5a:45:c1:dc: 56:03:31:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH55L8aHj4r9aj0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx OGUzMB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk YWMxZmI4MGMtODU1Yy00YTQ1LWFiMTktZWVjOTRjOTkwYThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi4MtHzH4NK+qH5j71xLyxBj64K8107lSTkd Qy12JOH2bKtmDOqXTNnrnxjTCmdtdD/yJ2OfxKqhHG0q9WnRa/QA4FWo3qdb9TFB tnRkA6iFi2Fb+xxlnRuo72u/jlhzS85Mm89KxyDw3hhQwfL70UYg40AmDyuZwLfH fe2EGjS9ucul6B55LHxdgtrwXHmQM6MbuqZbAcv1DOoubSFPP+Dya70zXDWKUBNc 1OdJWQ4yq/rH1BKb1XUyf1BkNQaA4o5DGzcePeL4+bvCgw7C7JWQVAfDHmpezuNP xGiAzqXwrewWYunTdvRlh6AwguCF9Xo92UQoonAW4a0zwPraFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/jmodWJNirhp2kPQ7Jy1zrzHVwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvMmE5ODRjZjQtOGVkMy0z NTQ1LThjNmUtZDkzMGU5OTA0YjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4 MzVmYzE4ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQDGcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHsy9bT5X/GEEKLyA2nwtrIlx61oLU5gu9xDX8r0qPEAmKcZOwz8Tv0 0Ot4cUWlFiSbnmMF+osSmHpBN2VKnuiC1/mGTZdighK/9YC2OYqRQFcGTuGtLAbQ wur168ptrCgRTgg1lfYInAI/w8kwDUxH/E7Lp62qPvOfEDkj7gUCL4y6hX6hvDCK AxhaQSbcG6Z1O2CPoGz3ne7FPuzNFLQ5YGWi0pGyJB50nW14EoQXaMSZ98t/BjJh mJd+9GIjVxQfPQ565YE3874+W2dd2bOYZyq6CCWo6Br9rpHT7hdwlbIc87H9emAY Os42SMMRIJBzjLGiv2YbWkXB3FYDMQ8= -----END CERTIFICATE-----Generated at Sun Jun 8 12:33:40 2025 by rpki-client