$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e0f1f0c-1ba1-3424-9baf-beb46086a64f.roa File: 1e0f1f0c-1ba1-3424-9baf-beb46086a64f.roa (raw, json) Hash identifier: zlArZZt6i2SeABMatl0NNcoD8QalCcdbNy6Z/6CmjrQ= Subject key identifier: C9:52:B6:BE:52:B3:27:67:4E:5C:D6:5F:65:06:50:6D:9C:E7:78:A1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A116DBF893C161CFDE500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e0f1f0c-1ba1-3424-9baf-beb46086a64f.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 64.179.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:11:6d:bf:89:3c:16:1c:fd:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=20fb202a-ae58-431e-8c22-51a62195da4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f7:95:ae:8d:23:82:9c:54:06:0f:f0:78:e9: 48:da:d4:c1:f8:1d:18:d4:86:0c:81:3d:39:7c:99: 1f:bc:3a:ff:7f:b5:bf:a0:89:d9:79:40:a3:9b:e6: e8:74:f9:85:93:1e:bc:b8:4e:c0:8f:f9:a5:24:15: c7:ac:74:97:6a:db:92:53:5b:3b:26:d1:5c:a5:30: e7:9d:d8:69:34:78:41:8b:52:5b:49:65:ec:55:4f: 3d:17:76:af:a7:28:5f:52:91:85:bd:5e:0b:18:13: 9e:e3:c2:35:ad:df:e8:a0:99:78:f3:5f:cf:3f:ff: f2:e8:d0:19:40:84:01:7a:d7:a6:15:27:b4:18:7c: e4:8c:c5:2a:4c:ce:02:4e:5a:a9:ec:0a:72:3c:c7: 22:a7:38:39:e9:9b:6d:8b:23:d8:23:98:3f:b6:10: dc:79:28:1f:f1:a4:2d:a7:aa:db:b0:3b:4b:f2:82: f7:80:35:0a:09:7c:78:aa:07:73:ba:ef:ca:c0:30: 50:28:93:17:90:1c:86:ff:a6:d4:4e:92:e5:c6:dc: 02:ac:c3:79:a5:a6:a7:f4:89:30:37:b9:50:2f:58: 28:4d:64:04:7e:10:b3:e5:19:87:c2:ba:43:1c:39: a2:cc:db:44:51:be:df:aa:c0:f1:86:93:0c:70:9e: 3d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:52:B6:BE:52:B3:27:67:4E:5C:D6:5F:65:06:50:6D:9C:E7:78:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e0f1f0c-1ba1-3424-9baf-beb46086a64f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.179.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:89:99:98:7a:ca:da:e0:06:55:5a:2a:41:12:6a:35:bc:15: f2:4d:c5:7e:c0:df:86:30:3e:e9:42:43:fa:d5:40:1c:cd:b0: 30:13:6d:ce:ac:05:5c:2b:a4:d4:1a:1d:ad:ad:3d:25:7c:3d: 7e:76:0f:9d:ef:f3:81:a5:85:06:69:34:5f:b6:ff:dd:bf:3d: 5d:da:8c:ff:36:50:b6:80:a3:9e:30:b2:bd:64:94:81:21:e0: 2d:54:39:0e:41:07:23:f6:41:ae:5b:e5:1d:cd:00:04:14:93: f8:3a:ff:61:a5:2e:4d:23:04:8d:cd:6a:48:4e:59:0d:0e:b3: 5c:ba:62:a9:09:de:e7:fa:9c:cd:15:ce:3d:8b:3b:09:57:5b: 52:f1:a5:e8:91:fd:52:1a:c3:3c:05:33:34:41:6f:c5:fc:67: 32:0d:08:b0:27:63:08:49:21:87:cd:21:e1:ac:ee:9f:37:a9: bb:e5:ed:0e:9d:27:a5:38:b4:34:18:cd:28:56:a4:24:76:58: 25:88:af:0a:a7:4b:28:8c:c6:64:b5:7a:8d:c7:67:92:7b:2b: 41:96:9c:b6:69:f6:50:bf:9f:9c:e2:54:e3:99:93:e8:6f:e9: 0a:89:c1:dc:f2:87:1e:cc:28:eb:03:d1:ef:59:41:81:fe:96: da:5c:12:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShFtv4k8Fhz95QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MjBmYjIwMmEtYWU1OC00MzFlLThjMjItNTFhNjIxOTVkYTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfeVro0jgpxUBg/weOlI2tTB+B0Y1IYMgT05 fJkfvDr/f7W/oInZeUCjm+bodPmFkx68uE7Aj/mlJBXHrHSXatuSU1s7JtFcpTDn ndhpNHhBi1JbSWXsVU89F3avpyhfUpGFvV4LGBOe48I1rd/ooJl481/PP//y6NAZ QIQBetemFSe0GHzkjMUqTM4CTlqp7ApyPMcipzg56ZttiyPYI5g/thDceSgf8aQt p6rbsDtL8oL3gDUKCXx4qgdzuu/KwDBQKJMXkByG/6bUTpLlxtwCrMN5paan9Ikw N7lQL1goTWQEfhCz5RmHwrpDHDmizNtEUb7fqsDxhpMMcJ49VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlStr5SsydnTlzWX2UGUG2c53ihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWUwZjFmMGMtMWJhMS0z NDI0LTliYWYtYmViNDYwODZhNjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQLMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmJmZh6ytrgBlVaKkESajW8FfJNxX7A34YwPulCQ/rVQBzNsDATbc6s BVwrpNQaHa2tPSV8PX52D53v84GlhQZpNF+2/92/PV3ajP82ULaAo54wsr1klIEh 4C1UOQ5BByP2Qa5b5R3NAAQUk/g6/2GlLk0jBI3NakhOWQ0Os1y6YqkJ3uf6nM0V zj2LOwlXW1LxpeiR/VIawzwFMzRBb8X8ZzINCLAnYwhJIYfNIeGs7p83qbvl7Q6d J6U4tDQYzShWpCR2WCWIrwqnSyiMxmS1eo3HZ5J7K0GWnLZp9lC/n5ziVOOZk+hv 6QqJwdzyhx7MKOsD0e9ZQYH+ltpcEpU= -----END CERTIFICATE-----Generated at Sun Jun 15 20:06:02 2025 by rpki-client