$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e121129d-58f0-3ca0-b388-f88902b0d991.roa File: e121129d-58f0-3ca0-b388-f88902b0d991.roa (raw, json) Hash identifier: VDObrzNG+CH1bVXaLetp7g6qs6f1I9WBC6+gj6NNjSk= Subject key identifier: 4B:0A:4C:8A:11:27:84:C1:C2:4C:F6:DB:3E:87:4F:5F:3A:B5:13:8D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11845DC1DA5224388A180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e121129d-58f0-3ca0-b388-f88902b0d991.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 64.206.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:18:45:dc:1d:a5:22:43:88:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=e61e688f-9b29-4ef0-b2da-021737edaec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2e:c0:dd:4f:4f:0f:c3:b3:91:25:4a:9a:2f: 61:65:bc:c6:ca:17:1c:66:33:8b:76:f0:ff:5c:87: 10:45:b3:62:dc:40:86:60:77:4b:a4:da:96:d0:61: 36:5f:d7:2f:e7:0e:3d:1d:07:80:d6:06:87:8e:00: 7e:d5:c6:e8:44:98:cb:26:7e:c7:83:14:73:57:2b: ec:25:ca:8c:88:b0:e0:80:13:d9:44:20:4b:fe:84: 68:70:e6:5e:13:c0:05:7a:45:9d:68:50:70:2c:24: 92:3a:7b:5b:1e:89:b6:bc:b0:39:d1:26:8b:2c:dd: ab:2d:22:54:21:7c:ab:4f:e6:dc:6a:be:50:33:54: e5:4f:7e:e0:89:7c:1c:89:b4:e9:47:24:32:08:f3: e3:47:44:25:83:3e:5a:06:5a:21:92:fd:4c:65:ac: bb:e3:e2:44:52:cb:94:3a:6a:57:3b:e1:43:82:36: 44:20:07:5f:7d:b2:03:71:51:b5:4f:8b:cf:05:06: eb:3f:8f:d6:6c:40:85:c7:f5:3b:bb:ee:91:f7:1a: 12:d3:3a:94:f6:10:4c:34:ce:71:7f:ca:20:a9:04: c1:cf:d2:7a:01:3f:bb:d0:00:88:59:63:cd:88:97: 4f:1a:54:bb:47:d2:8c:e8:bb:3c:2e:53:9f:9f:59: 7e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:0A:4C:8A:11:27:84:C1:C2:4C:F6:DB:3E:87:4F:5F:3A:B5:13:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e121129d-58f0-3ca0-b388-f88902b0d991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.206.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:df:b0:7c:35:75:3f:3c:ac:a4:be:3d:13:c0:39:37:db:c8: 17:e0:ca:74:a8:6a:45:97:bd:ee:40:f7:d8:3f:47:c8:81:24: 8e:6e:9b:4b:8e:9e:fa:96:90:7d:60:b3:14:88:a6:73:7a:98: 5a:12:df:47:81:0f:28:21:c0:85:1b:6d:b4:e7:af:f1:54:03: ff:d8:d6:b2:52:f1:2b:38:e2:cf:3b:83:0e:92:3b:83:73:43: 4e:5b:e6:04:79:64:c7:f9:8d:99:63:ad:1e:d6:36:7f:c2:2a: 71:dd:7c:35:74:8d:f8:2e:a9:65:40:35:44:97:5b:59:f9:f8: b6:67:1a:95:d1:2e:c8:07:0c:53:f6:93:6f:8c:a9:04:d9:30: 80:f6:b7:98:10:dd:83:b0:75:fc:e5:46:47:0a:71:0a:64:40: 05:a5:c3:b4:dc:97:8a:d7:f4:28:8b:1c:a9:ff:09:cf:75:ff: 76:0a:97:f7:fc:58:a3:cf:10:08:ce:8c:8a:a4:5c:62:97:a0: 5e:7a:57:d0:a9:db:28:a1:29:9b:72:4c:ee:28:2a:03:cb:a7: 4f:71:96:dd:d6:84:86:a4:c4:3d:d0:5f:60:80:be:f1:17:62: 3b:39:a1:9d:d9:60:70:26:a4:0b:c5:c1:cc:4c:70:79:42:16: 85:54:bc:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4RhF3B2lIkOIoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk ZTYxZTY4OGYtOWIyOS00ZWYwLWIyZGEtMDIxNzM3ZWRhZWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3y7A3U9PD8OzkSVKmi9hZbzGyhccZjOLdvD/ XIcQRbNi3ECGYHdLpNqW0GE2X9cv5w49HQeA1gaHjgB+1cboRJjLJn7HgxRzVyvs JcqMiLDggBPZRCBL/oRocOZeE8AFekWdaFBwLCSSOntbHom2vLA50SaLLN2rLSJU IXyrT+bcar5QM1TlT37giXwcibTpRyQyCPPjR0Qlgz5aBlohkv1MZay74+JEUsuU OmpXO+FDgjZEIAdffbIDcVG1T4vPBQbrP4/WbECFx/U7u+6R9xoS0zqU9hBMNM5x f8ogqQTBz9J6AT+70ACIWWPNiJdPGlS7R9KM6Ls8LlOfn1l+XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsKTIoRJ4TBwkz22z6HT186tRONMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTEyMTEyOWQtNThmMC0z Y2EwLWIzODgtZjg4OTAyYjBkOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQM7nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3fsHw1dT88rKS+PRPAOTfbyBfgynSoakWXve5A99g/R8iBJI5um0uO nvqWkH1gsxSIpnN6mFoS30eBDyghwIUbbbTnr/FUA//Y1rJS8Ss44s87gw6SO4Nz Q05b5gR5ZMf5jZljrR7WNn/CKnHdfDV0jfguqWVANUSXW1n5+LZnGpXRLsgHDFP2 k2+MqQTZMID2t5gQ3YOwdfzlRkcKcQpkQAWlw7Tcl4rX9CiLHKn/Cc91/3YKl/f8 WKPPEAjOjIqkXGKXoF56V9Cp2yihKZtyTO4oKgPLp09xlt3WhIakxD3QX2CAvvEX Yjs5oZ3ZYHAmpAvFwcxMcHlCFoVUvEo= -----END CERTIFICATE-----Generated at Sun Apr 27 03:58:30 2025 by rpki-client