$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ea66b86-5648-3598-868f-d655bca90280.roa File: 0ea66b86-5648-3598-868f-d655bca90280.roa (raw, json) Hash identifier: jXZJfea0/Krsd387sAaHLi0Bri+tRhp6Ne2gLZuiM5o= Subject key identifier: 37:D2:DF:9B:41:4E:1B:8D:38:98:11:D8:7A:D8:91:3E:34:C3:EF:50 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F4F8BB3340E0B7EC15156580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ea66b86-5648-3598-868f-d655bca90280.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7029 IP address blocks: 64.24.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:bb:33:40:e0:b7:ec:15:15:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=a400a6f9-b452-4b0e-b34c-b2c750a04b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:62:f9:c6:77:03:55:ac:77:0f:72:47:70:07: b5:23:31:5d:b1:dd:25:e4:0e:a3:4c:cf:ee:71:76: 4b:ce:bf:24:4e:ad:ed:93:ec:75:36:38:76:dc:32: a0:92:f5:d0:4e:5a:59:af:5f:1b:2f:c3:24:0e:56: d0:b4:64:14:3e:5d:64:c9:d3:75:7b:2b:4e:3f:e1: 52:bf:e7:2d:63:27:07:63:93:4c:8b:84:16:07:d2: 69:5a:1c:d0:93:65:63:68:64:b2:a3:b5:60:43:f6: 39:79:46:a4:8f:9a:5c:b3:34:60:5d:fb:76:54:b7: f3:f9:23:22:a1:8c:1d:f0:3e:a8:86:33:f5:0d:3a: b1:0a:2b:2a:8a:b4:62:fe:1a:7e:62:0b:fd:33:48: 8a:e9:4a:ec:6d:92:5c:9a:74:b1:ca:32:13:0a:61: cb:ce:d3:ed:e4:a9:e2:cd:a7:98:4e:b0:b8:1d:a9: 1e:87:9b:ee:f2:38:14:37:7d:89:bf:b3:ea:1a:f4: 37:d6:1a:21:bc:bc:71:79:12:41:5d:52:1c:cc:94: 2e:73:6b:d5:8f:2c:39:a4:77:b1:2b:61:b2:42:b8: fd:2f:37:8d:fc:a3:66:bd:ad:5f:da:7f:97:a2:41: bb:01:27:e2:dc:16:53:74:e2:59:aa:b7:89:a9:59: d0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D2:DF:9B:41:4E:1B:8D:38:98:11:D8:7A:D8:91:3E:34:C3:EF:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ea66b86-5648-3598-868f-d655bca90280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.24.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:8e:78:72:4f:5f:a2:08:99:53:d0:a8:6c:03:8b:00:b8:7a: be:eb:33:a5:9a:4a:a5:4b:77:98:f7:d6:a6:56:28:ac:25:fc: 3b:84:83:90:d2:b9:9f:b5:51:59:3f:7c:46:72:8a:7b:12:ce: ab:4e:4f:88:fb:ab:24:2d:54:03:3c:d9:86:76:bd:c3:da:92: ae:ed:79:40:24:63:3b:34:83:19:32:07:8b:81:40:f2:e7:04: a6:3a:06:f4:2b:f7:84:e1:f5:ca:eb:cd:33:7f:a6:51:3a:6b: 7d:8e:2d:ed:9a:4a:52:da:a1:8b:f6:61:84:90:b8:96:fb:c1: a2:0d:c1:82:0c:43:aa:c9:24:c2:cc:2d:34:c6:87:94:f0:41: 27:94:c3:7f:54:e2:6d:03:63:81:70:b1:08:39:95:ac:82:5b: 89:03:ec:50:0a:7d:76:c2:4c:40:cf:8c:65:d9:80:4b:68:a2: 17:ed:ec:cc:63:a2:f4:f5:9c:57:b1:b6:0c:b2:b5:b4:02:01: 78:16:d0:56:0d:eb:14:a9:75:cb:81:07:91:d3:9f:97:b1:39: f7:a3:6c:c1:09:06:38:33:90:1b:2d:1f:86:58:7b:f1:6b:ca: ea:f7:52:cf:c8:d2:00:13:20:3b:b4:ba:8b:bf:45:f9:41:fb: be:14:8e:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+LszQOC37BUVZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YTQwMGE2ZjktYjQ1Mi00YjBlLWIzNGMtYjJjNzUwYTA0YjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmL5xncDVax3D3JHcAe1IzFdsd0l5A6jTM/u cXZLzr8kTq3tk+x1Njh23DKgkvXQTlpZr18bL8MkDlbQtGQUPl1kydN1eytOP+FS v+ctYycHY5NMi4QWB9JpWhzQk2VjaGSyo7VgQ/Y5eUakj5pcszRgXft2VLfz+SMi oYwd8D6ohjP1DTqxCisqirRi/hp+Ygv9M0iK6UrsbZJcmnSxyjITCmHLztPt5Kni zaeYTrC4Hakeh5vu8jgUN32Jv7PqGvQ31hohvLxxeRJBXVIczJQuc2vVjyw5pHex K2GyQrj9LzeN/KNmva1f2n+XokG7ASfi3BZTdOJZqreJqVnQqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfS35tBThuNOJgR2HrYkT40w+9QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGVhNjZiODYtNTY0OC0z NTk4LTg2OGYtZDY1NWJjYTkwMjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQBgIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKOeHJPX6IImVPQqGwDiwC4er7rM6WaSqVLd5j31qZWKKwl/DuEg5DS uZ+1UVk/fEZyinsSzqtOT4j7qyQtVAM82YZ2vcPakq7teUAkYzs0gxkyB4uBQPLn BKY6BvQr94Th9crrzTN/plE6a32OLe2aSlLaoYv2YYSQuJb7waINwYIMQ6rJJMLM LTTGh5TwQSeUw39U4m0DY4FwsQg5layCW4kD7FAKfXbCTEDPjGXZgEtoohft7Mxj ovT1nFextgyytbQCAXgW0FYN6xSpdcuBB5HTn5exOfejbMEJBjgzkBstH4ZYe/Fr yur3Us/I0gATIDu0uou/RflB+74Ujqg= -----END CERTIFICATE-----Generated at Sun Apr 27 04:18:03 2025 by rpki-client