$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e0f1f0c-1ba1-3424-9baf-beb46086a64f.roa File: 1e0f1f0c-1ba1-3424-9baf-beb46086a64f.roa (raw, json) Hash identifier: qOLbeo2dfVT8jZy0VD6Q3koCq5G/5pw3W4CYojAJIlg= Subject key identifier: FB:12:45:92:B4:A6:0D:34:BD:14:2D:AA:26:13:94:B1:A8:E1:EF:B6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210EB2646AF69F0EE1A9DA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e0f1f0c-1ba1-3424-9baf-beb46086a64f.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 64.179.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:eb:26:46:af:69:f0:ee:1a:9d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=34328b7a-6fdd-423c-b4f9-c77756820656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:93:6a:22:ab:dc:13:76:60:ef:8b:bb:6b:ec: 26:f8:90:7d:c3:78:e7:84:d4:2b:2f:f7:95:99:7c: 0e:1a:36:c5:56:bf:ba:6d:a0:0e:8f:1b:cc:be:d8: 9d:29:2f:ab:5d:9c:50:11:59:ac:73:1c:d7:2d:11: 23:5b:bf:c8:21:aa:61:c6:2b:dc:63:48:89:3b:ae: 26:c2:c8:fd:6a:b3:1b:35:21:31:6b:3f:41:cd:a2: 82:98:e3:99:be:8b:ff:9e:67:c0:03:a0:f7:d7:7d: 33:58:04:80:90:11:76:5c:ff:cd:c3:c3:9b:17:53: 40:9d:a1:2a:b7:3d:36:f7:37:05:8e:e2:ea:44:be: 22:28:37:45:c6:5c:da:37:ed:8c:76:2d:7a:30:0b: 64:5a:72:b6:9d:22:7b:66:ad:32:ef:54:59:f0:72: 44:79:35:c4:18:a4:23:5d:51:0c:b2:0b:7d:d7:4c: 60:fb:95:e1:f9:69:b7:e7:a3:2a:af:7a:7c:07:32: 36:91:3f:64:d5:43:60:78:f4:cf:4a:9a:3d:93:68: b4:a5:a4:9d:a1:3d:0a:e2:ac:71:fa:17:a0:e1:c6: a7:3c:d9:0d:3e:c5:2d:f8:74:3a:7e:c8:01:e7:fc: 92:9c:74:ce:f1:c6:6f:61:37:20:15:49:65:d8:e8: 86:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:12:45:92:B4:A6:0D:34:BD:14:2D:AA:26:13:94:B1:A8:E1:EF:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e0f1f0c-1ba1-3424-9baf-beb46086a64f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.179.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:86:cd:24:3e:42:28:1a:5f:b9:b6:20:6a:62:12:20:5b:e9: 50:c8:27:ba:5f:0c:02:95:1e:52:14:fe:f0:0a:d0:4b:49:dd: 42:6f:30:18:e4:e0:49:1f:32:9b:93:3d:bb:94:db:7f:7a:a9: 83:7c:6a:c4:81:d9:55:c3:4a:af:59:67:68:ad:95:20:d0:e5: 5c:75:4f:f5:2b:22:9c:2b:68:89:06:fa:db:7a:0a:2c:c9:b2: b7:03:0f:37:0f:a4:25:c4:c8:5a:da:a3:5f:61:99:c9:52:c4: bc:30:ef:7d:f4:46:cf:9e:4d:66:71:3f:a5:b0:6f:f8:a0:83: 65:fb:29:51:60:f9:08:4b:1b:a7:d9:94:b7:2f:78:a8:d8:18: b7:cd:80:71:86:97:3f:ef:82:5b:2c:ca:d3:b9:67:9f:d7:46: 0b:1d:6e:a6:36:d5:6a:e5:f0:b4:61:b3:58:d3:9f:f1:60:36: 57:2d:df:e8:62:bc:dc:69:9a:a7:6c:6e:81:0f:34:71:19:55: 2d:29:37:68:84:aa:43:ec:3e:25:ac:bc:4a:24:2e:65:00:7d: fb:ad:8a:ec:73:f1:9e:db:33:15:68:17:e9:47:ad:4f:4a:d6: 19:14:37:67:a7:9b:cc:bc:ae:10:d5:b0:36:29:47:c9:9b:80: 89:5f:ba:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEOsmRq9p8O4anaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MzQzMjhiN2EtNmZkZC00MjNjLWI0ZjktYzc3NzU2ODIwNjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5NqIqvcE3Zg74u7a+wm+JB9w3jnhNQrL/eV mXwOGjbFVr+6baAOjxvMvtidKS+rXZxQEVmscxzXLREjW7/IIaphxivcY0iJO64m wsj9arMbNSExaz9BzaKCmOOZvov/nmfAA6D3130zWASAkBF2XP/Nw8ObF1NAnaEq tz029zcFjuLqRL4iKDdFxlzaN+2Mdi16MAtkWnK2nSJ7Zq0y71RZ8HJEeTXEGKQj XVEMsgt910xg+5Xh+Wm356Mqr3p8BzI2kT9k1UNgePTPSpo9k2i0paSdoT0K4qxx +heg4canPNkNPsUt+HQ6fsgB5/ySnHTO8cZvYTcgFUll2OiGewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsSRZK0pg00vRQtqiYTlLGo4e+2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWUwZjFmMGMtMWJhMS0z NDI0LTliYWYtYmViNDYwODZhNjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQLMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaGzSQ+QigaX7m2IGpiEiBb6VDIJ7pfDAKVHlIU/vAK0EtJ3UJvMBjk 4EkfMpuTPbuU2396qYN8asSB2VXDSq9ZZ2itlSDQ5Vx1T/UrIpwraIkG+tt6CizJ srcDDzcPpCXEyFrao19hmclSxLww7330Rs+eTWZxP6Wwb/igg2X7KVFg+QhLG6fZ lLcveKjYGLfNgHGGlz/vglssytO5Z5/XRgsdbqY21Wrl8LRhs1jTn/FgNlct3+hi vNxpmqdsboEPNHEZVS0pN2iEqkPsPiWsvEokLmUAffutiuxz8Z7bMxVoF+lHrU9K 1hkUN2enm8y8rhDVsDYpR8mbgIlfuvA= -----END CERTIFICATE-----Generated at Sun Apr 6 03:23:00 2025 by rpki-client