$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/91f80cf0-bcf9-3eed-8a7e-fad09c4c6648.roa File: 91f80cf0-bcf9-3eed-8a7e-fad09c4c6648.roa (raw, json) Hash identifier: /vm0JaZSngC5NZ6E5Jfdh7PlMkhl1qwltMsXywbllzs= Subject key identifier: 03:94:82:D2:A4:98:F8:1D:15:81:6C:8B:82:4A:D9:6D:D1:C0:71:41 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D211076198F2B98E2F12E480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/91f80cf0-bcf9-3eed-8a7e-fad09c4c6648.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 394183 IP address blocks: 64.199.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:07:61:98:f2:b9:8e:2f:12:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=49a3810a-ee29-4fcf-a9ae-a274a4d4de5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9c:cb:5c:cd:24:7b:33:49:39:97:bb:0a:0b: b1:e3:97:b3:98:9b:fc:8d:45:bd:c6:7d:91:94:cb: f5:02:13:77:7f:0b:69:40:4a:3a:40:c4:3a:23:53: 34:9f:88:4d:f7:87:c8:8c:c2:5b:ca:38:d0:5a:73: 47:81:d5:c9:01:99:46:1c:cf:06:4b:50:3b:fa:d3: 5b:13:07:9d:1d:3a:c9:49:a2:67:39:ca:bf:73:4c: ed:57:82:c6:ed:21:f9:a3:3c:5f:ec:d4:4f:e3:99: 42:39:29:41:17:11:72:ef:42:ac:59:45:d6:44:12: 85:a7:39:5c:f9:01:5c:8f:8b:65:86:1c:c5:22:15: b2:cb:7d:77:25:e5:96:82:1a:1d:2a:ed:ed:9d:68: 36:b8:b8:ba:bf:a9:73:82:3c:05:81:3d:2b:2f:e5: 39:21:f8:e2:61:1f:fa:20:bc:cf:f7:ca:dd:8a:72: c5:da:fd:cc:9d:8a:63:44:f6:e0:50:7a:d5:f9:d5: 8a:46:f5:c4:05:a6:27:75:bc:ed:ca:2b:25:50:ae: 91:25:07:dd:16:ce:cf:f8:48:c0:9b:bb:3e:f9:55: 62:92:37:46:1d:15:16:6e:37:52:6d:d0:18:30:8e: c6:f6:32:a1:1b:56:c7:6d:49:42:8d:8f:f8:d7:48: a8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:94:82:D2:A4:98:F8:1D:15:81:6C:8B:82:4A:D9:6D:D1:C0:71:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/91f80cf0-bcf9-3eed-8a7e-fad09c4c6648.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.199.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:ee:fa:b8:5d:4a:0c:49:cf:90:ba:c0:24:25:f7:1f:ae:6f: b3:4c:3a:8f:a0:21:eb:f9:f1:90:63:7e:74:5c:27:33:05:76: ed:81:64:4e:07:af:71:a7:d5:94:91:29:c6:aa:b2:06:70:33: 1c:bf:99:3c:97:15:b8:a8:cd:13:ff:25:6e:64:cf:10:6b:63: c2:a8:c0:1d:e1:8e:ff:9a:a3:fc:f1:16:6b:d0:7f:5d:e3:62: 34:18:77:ac:fc:a4:7a:2a:2f:b8:62:fe:fc:6f:5e:c2:74:fb: 7f:26:a0:77:e8:6e:5b:97:c7:5d:d5:0b:74:43:5a:83:6e:94: ee:85:23:8e:61:0e:73:09:40:f2:ec:16:01:55:db:f2:a3:0f: b3:56:98:69:68:7c:18:bd:86:90:18:49:9a:9a:b1:9c:ea:ce: 1d:d8:e2:92:d6:0d:9a:72:6f:95:2d:47:ed:5c:06:de:f7:3c: 32:f8:28:21:fd:74:19:e1:da:c8:be:1e:a3:a5:4d:db:8c:ca: 89:a4:47:ec:6d:37:a5:a0:23:ae:4d:c0:f2:47:b4:23:a7:cf: 4d:09:75:be:da:bc:dd:e0:2e:8d:8b:8d:c0:1e:fd:82:af:54: e0:b3:f0:8e:35:9a:bd:12:4b:ec:32:6d:80:fe:c8:76:fb:62: 80:46:84:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEQdhmPK5ji8S5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NDlhMzgxMGEtZWUyOS00ZmNmLWE5YWUtYTI3NGE0ZDRkZTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpzLXM0kezNJOZe7Cgux45ezmJv8jUW9xn2R lMv1AhN3fwtpQEo6QMQ6I1M0n4hN94fIjMJbyjjQWnNHgdXJAZlGHM8GS1A7+tNb EwedHTrJSaJnOcq/c0ztV4LG7SH5ozxf7NRP45lCOSlBFxFy70KsWUXWRBKFpzlc +QFcj4tlhhzFIhWyy313JeWWghodKu3tnWg2uLi6v6lzgjwFgT0rL+U5IfjiYR/6 ILzP98rdinLF2v3MnYpjRPbgUHrV+dWKRvXEBaYndbztyislUK6RJQfdFs7P+EjA m7s++VVikjdGHRUWbjdSbdAYMI7G9jKhG1bHbUlCjY/410iokwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOUgtKkmPgdFYFsi4JK2W3RwHFBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTFmODBjZjAtYmNmOS0z ZWVkLThhN2UtZmFkMDljNGM2NjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQMf6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALu+rhdSgxJz5C6wCQl9x+ub7NMOo+gIev58ZBjfnRcJzMFdu2BZE4H r3Gn1ZSRKcaqsgZwMxy/mTyXFbiozRP/JW5kzxBrY8KowB3hjv+ao/zxFmvQf13j YjQYd6z8pHoqL7hi/vxvXsJ0+38moHfobluXx13VC3RDWoNulO6FI45hDnMJQPLs FgFV2/KjD7NWmGlofBi9hpAYSZqasZzqzh3Y4pLWDZpyb5UtR+1cBt73PDL4KCH9 dBnh2si+HqOlTduMyomkR+xtN6WgI65NwPJHtCOnz00Jdb7avN3gLo2LjcAe/YKv VOCz8I41mr0SS+wybYD+yHb7YoBGhH4= -----END CERTIFICATE-----Generated at Wed Apr 30 02:51:08 2025 by rpki-client