$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ef6b5f0-4a95-3ac4-b3ee-f5a7f06abd56.roa File: 6ef6b5f0-4a95-3ac4-b3ee-f5a7f06abd56.roa (raw, json) Hash identifier: rbmXYXRF/Hvsj4ArDhlebih3IC5D2XOHLxJy/i6fIGE= Subject key identifier: 7A:2C:6F:66:E9:E4:C8:3F:64:F2:D7:D9:60:23:E0:3D:CB:36:FD:C9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21101D17E1CABC78BA01300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ef6b5f0-4a95-3ac4-b3ee-f5a7f06abd56.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 25660 IP address blocks: 64.198.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:01:d1:7e:1c:ab:c7:8b:a0:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=af7fab03-be29-46dc-a7f1-abeb65be01ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a9:d2:59:f7:75:04:34:52:39:14:c9:5b:73: 4e:dc:f1:13:2f:20:3f:c8:d9:81:a4:3e:bf:1c:91: e6:a2:9a:8a:87:d9:97:5c:e8:13:26:00:f0:59:18: 87:96:12:d1:d2:e6:ce:5e:d6:29:fc:a8:75:d3:8e: e2:d2:f5:e2:94:30:2f:05:41:a0:8d:2d:ec:d5:2c: 72:b7:ea:20:81:bc:2d:36:7e:bc:74:ea:da:e2:27: 00:4c:0d:e8:4e:2b:c2:f9:10:d7:b3:81:d8:95:73: 0f:63:be:db:fb:97:a6:7a:20:6d:e9:a3:7e:f6:18: 4e:22:53:18:87:3e:db:36:87:ee:17:fd:20:04:9d: 79:1f:54:db:0c:31:92:8f:87:11:e6:60:92:ed:6c: 9c:31:3a:d8:94:2d:c3:4b:1d:26:cb:77:d8:43:58: 08:70:0f:2d:bb:c4:83:04:f8:e3:e7:aa:76:61:81: e3:73:78:36:79:7a:7d:ab:32:10:e5:8d:a2:80:81: eb:cd:f4:72:88:5b:de:3a:cb:2a:cf:7d:42:7d:ba: f5:eb:f2:53:3b:94:1e:e9:cd:e0:9d:a1:8a:7f:cf: ff:f8:98:7d:78:d3:68:3e:8c:9b:51:39:c7:6a:7e: 78:10:2b:42:58:2d:ed:fe:c1:f4:a8:f2:4f:e4:f1: 12:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:2C:6F:66:E9:E4:C8:3F:64:F2:D7:D9:60:23:E0:3D:CB:36:FD:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ef6b5f0-4a95-3ac4-b3ee-f5a7f06abd56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.198.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:9a:7e:cf:3a:46:ed:65:18:bd:89:ec:d9:a6:49:55:cc:b3: 20:1a:ac:60:b3:00:96:d1:0a:ca:34:be:37:1f:e2:1a:e7:65: d1:3d:f5:4f:90:91:1a:7f:7e:22:bc:36:a5:b3:6f:41:e2:bc: e1:4f:86:ea:70:3b:4a:3d:0e:0c:e9:e5:a3:d0:13:10:c6:2a: 23:60:e5:4f:40:e5:84:a5:59:1a:41:5f:8d:34:a3:36:4e:61: 22:8c:84:f3:cc:e2:19:24:87:8b:e1:e1:c5:53:43:74:e8:f4: 5b:95:d6:2b:8e:68:e3:dd:3c:58:eb:68:de:b7:a9:ac:96:ab: bc:e8:aa:6f:54:fe:36:d5:43:97:7a:8d:84:7a:b3:cb:f7:fa: 2c:8f:e4:c4:6e:49:ef:df:a3:d0:a4:3a:bb:b4:64:de:ed:1e: 1a:18:4c:b4:0e:9c:96:89:a6:08:84:2e:72:97:57:b2:3a:ab: 8d:fa:f7:a8:e0:cf:3a:65:e9:0f:f9:47:78:34:95:fe:f0:fe: b1:c9:11:6e:6d:98:e6:b2:b0:d3:c5:8f:44:d7:a3:bf:ce:04: c3:00:43:74:df:34:64:70:67:b7:10:51:db:ac:f4:0b:49:c3: e6:5d:85:81:c5:e5:72:b7:8e:80:4f:3f:47:47:a4:3c:8c:39: 29:55:b9:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEQHRfhyrx4ugEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YWY3ZmFiMDMtYmUyOS00NmRjLWE3ZjEtYWJlYjY1YmUwMWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6nSWfd1BDRSORTJW3NO3PETLyA/yNmBpD6/ HJHmopqKh9mXXOgTJgDwWRiHlhLR0ubOXtYp/Kh1047i0vXilDAvBUGgjS3s1Sxy t+oggbwtNn68dOra4icATA3oTivC+RDXs4HYlXMPY77b+5emeiBt6aN+9hhOIlMY hz7bNofuF/0gBJ15H1TbDDGSj4cR5mCS7WycMTrYlC3DSx0my3fYQ1gIcA8tu8SD BPjj56p2YYHjc3g2eXp9qzIQ5Y2igIHrzfRyiFveOssqz31Cfbr16/JTO5Qe6c3g naGKf8//+Jh9eNNoPoybUTnHan54ECtCWC3t/sH0qPJP5PESpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHosb2bp5Mg/ZPLX2WAj4D3LNv3JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmVmNmI1ZjAtNGE5NS0z YWM0LWIzZWUtZjVhN2YwNmFiZDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMbdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmafs86Ru1lGL2J7NmmSVXMsyAarGCzAJbRCso0vjcf4hrnZdE99U+Q kRp/fiK8NqWzb0HivOFPhupwO0o9Dgzp5aPQExDGKiNg5U9A5YSlWRpBX400ozZO YSKMhPPM4hkkh4vh4cVTQ3To9FuV1iuOaOPdPFjraN63qayWq7zoqm9U/jbVQ5d6 jYR6s8v3+iyP5MRuSe/fo9CkOru0ZN7tHhoYTLQOnJaJpgiELnKXV7I6q43696jg zzpl6Q/5R3g0lf7w/rHJEW5tmOaysNPFj0TXo7/OBMMAQ3TfNGRwZ7cQUdus9AtJ w+ZdhYHF5XK3joBPP0dHpDyMOSlVuf4= -----END CERTIFICATE-----Generated at Sun Apr 27 11:29:17 2025 by rpki-client