$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/d6824e42-8b91-3659-bef4-c3f464d9bb15.roa File: d6824e42-8b91-3659-bef4-c3f464d9bb15.roa (raw, json) Hash identifier: zBig9Ws8GcqCoZjb/tUL9yniBbYA8vMKEVZTcuCbrRg= Subject key identifier: 41:5A:AF:B5:63:99:9B:C8:40:4E:4E:1F:E0:4E:3E:BD:C0:06:B4:A2 Certificate issuer: /CN=de848e16-b429-4505-9234-f6d889fd1438 Certificate serial: 010D0C9F4328584911B4B15272E25BF4C8162980 Authority key identifier: 1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/d6824e42-8b91-3659-bef4-c3f464d9bb15.roa Signing time: Mon 03 Mar 2025 21:06:38 +0000 ROA not before: Mon 03 Mar 2025 21:06:38 +0000 ROA not after: Sun 01 Jun 2025 20:06:38 +0000 asID: 399820 IP address blocks: 64.49.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:11:b4:b1:52:72:e2:5b:f4:c8:16:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de848e16-b429-4505-9234-f6d889fd1438 Validity Not Before: Mar 3 21:06:38 2025 GMT Not After : Jun 1 20:06:38 2025 GMT Subject: CN=3a4dcba0-6faf-4bfe-ab3b-99e38f40efef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:44:df:b9:be:80:e4:9b:29:56:7a:bb:46:fc: a7:18:bb:d1:d1:4c:79:21:ae:a8:5e:6f:af:d4:16: 86:70:d8:cf:df:18:c9:d2:dd:b4:87:4f:74:fa:84: ce:f4:26:0c:83:58:ce:1e:ef:8a:a8:5d:db:8b:f5: f7:1a:7a:d5:d9:3f:3e:bc:cb:63:82:7f:0b:15:df: 87:88:6b:c8:43:ac:dd:ac:64:5a:92:85:60:36:8d: 7d:e0:c9:01:45:9e:82:96:af:bd:30:ec:10:98:e6: b9:a4:86:9e:9a:74:28:25:a5:45:2a:47:16:a2:10: 2f:c4:86:54:0d:aa:46:0f:43:56:c6:88:6a:5b:19: 85:bf:6b:f1:f2:1a:1a:41:06:d4:57:62:65:9c:03: 4a:dc:67:e5:8e:07:d1:de:fc:d4:f8:f6:b6:35:ad: da:38:cb:d4:c9:a3:1e:6d:d6:71:e5:fc:34:bf:de: be:0d:7d:15:7c:d5:e6:0e:0c:66:d1:80:1c:e1:0f: 0e:ab:85:b2:72:26:66:67:52:f2:a7:85:c4:b5:f0: 9c:64:01:e6:7c:7f:02:37:9d:0b:5f:3a:08:b3:fc: 66:3e:97:c8:72:58:d5:bf:d2:5f:80:a0:af:9a:5e: fa:51:a5:aa:6d:86:1b:e8:20:cc:d2:7a:cb:b2:9f: 60:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5A:AF:B5:63:99:9B:C8:40:4E:4E:1F:E0:4E:3E:BD:C0:06:B4:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/d6824e42-8b91-3659-bef4-c3f464d9bb15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl X509v3 Authority Key Identifier: keyid:1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer sbgp-ipAddrBlock: critical IPv4: 64.49.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:da:2c:08:f6:77:34:e3:21:c2:ed:94:15:f1:d0:81:e6:6e: e1:04:54:77:db:35:70:6f:f7:25:ce:c6:6e:9b:64:c4:1d:24: 37:05:9d:5a:55:47:67:d4:91:80:b0:a6:91:b6:07:c2:5c:05: da:e0:fc:b2:6e:2a:71:2b:a5:f4:b5:0b:29:6a:35:fa:cd:20: bf:09:98:dc:fa:1a:bd:74:13:a1:7b:b9:73:df:09:c6:66:29: da:ac:57:84:00:fe:ce:99:9a:24:be:db:b1:5c:9d:4d:95:70: 7e:a0:d1:a5:03:2b:5c:b7:cd:42:6b:85:b1:1a:92:fb:ce:d5: 81:7d:d3:90:28:19:c2:c3:0c:7f:3d:c3:e7:59:af:ad:d2:5f: 02:8b:c5:27:e4:ff:e0:6b:1b:43:15:89:4d:c2:42:e0:e5:03: 3f:59:1a:8f:fb:82:a8:8d:07:65:fa:18:17:3b:6f:55:ec:9c: 08:4c:6e:b3:06:8c:29:08:e1:f1:40:bf:30:ba:b8:4b:a2:6f: ff:be:33:fc:56:a8:fe:ff:7e:89:37:b1:9a:84:dc:80:8e:2b: d8:d9:31:a7:a1:fc:6b:47:a2:98:c9:84:50:52:ff:05:b0:dd: d5:53:f6:ee:2b:6d:6b:72:5f:d6:0d:0c:6c:06:3d:4f:43:c6: 62:96:35:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkRtLFScuJb9MgWKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4NDhlMTYtYjQyOS00NTA1LTkyMzQtZjZkODg5ZmQx NDM4MB4XDTI1MDMwMzIxMDYzOFoXDTI1MDYwMTIwMDYzOFowLzEtMCsGA1UEAxMk M2E0ZGNiYTAtNmZhZi00YmZlLWFiM2ItOTllMzhmNDBlZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkTfub6A5JspVnq7RvynGLvR0Ux5Ia6oXm+v 1BaGcNjP3xjJ0t20h090+oTO9CYMg1jOHu+KqF3bi/X3GnrV2T8+vMtjgn8LFd+H iGvIQ6zdrGRakoVgNo194MkBRZ6Clq+9MOwQmOa5pIaemnQoJaVFKkcWohAvxIZU DapGD0NWxohqWxmFv2vx8hoaQQbUV2JlnANK3GfljgfR3vzU+Pa2Na3aOMvUyaMe bdZx5fw0v96+DX0VfNXmDgxm0YAc4Q8Oq4WyciZmZ1Lyp4XEtfCcZAHmfH8CN50L XzoIs/xmPpfIcljVv9JfgKCvml76UaWqbYYb6CDM0nrLsp9gbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFar7VjmZvIQE5OH+BOPr3ABrSiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg0 OGUxNi1iNDI5LTQ1MDUtOTIzNC1mNmQ4ODlmZDE0MzgvZDY4MjRlNDItOGI5MS0z NjU5LWJlZjQtYzNmNDY0ZDliYjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4NDhlMTYtYjQyOS00NTA1LTky MzQtZjZkODg5ZmQxNDM4L2RlODQ4ZTE2LWI0MjktNDUwNS05MjM0LWY2ZDg4OWZk MTQzOC5jcmwwHwYDVR0jBBgwFoAUHsnQl1NrlIorg8DaKChlnetiZ+QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg0OGUxNi1iNDI5LTQ1MDUtOTIzNC1mNmQ4 ODlmZDE0MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQDEIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7aLAj2dzTjIcLtlBXx0IHmbuEEVHfbNXBv9yXOxm6bZMQdJDcFnVpV R2fUkYCwppG2B8JcBdrg/LJuKnErpfS1CylqNfrNIL8JmNz6Gr10E6F7uXPfCcZm KdqsV4QA/s6ZmiS+27FcnU2VcH6g0aUDK1y3zUJrhbEakvvO1YF905AoGcLDDH89 w+dZr63SXwKLxSfk/+BrG0MViU3CQuDlAz9ZGo/7gqiNB2X6GBc7b1XsnAhMbrMG jCkI4fFAvzC6uEuib/++M/xWqP7/fok3sZqE3ICOK9jZMaeh/GtHopjJhFBS/wWw 3dVT9u4rbWtyX9YNDGwGPU9DxmKWNQA= -----END CERTIFICATE-----Generated at Sat May 3 12:43:11 2025 by rpki-client