$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/282bef38-7c98-31f3-9540-44db9761880d.roa File: 282bef38-7c98-31f3-9540-44db9761880d.roa (raw, json) Hash identifier: bOPWR3X6eygrWjpFwv/v3lofyl0qv4AiN8g0Y/Jfo5Y= Subject key identifier: 96:09:28:3F:37:F1:C3:21:17:F0:7E:BC:61:D4:5C:31:2C:57:46:92 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F4F8BB8EE32DB9E2ACFA7580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/282bef38-7c98-31f3-9540-44db9761880d.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7029 IP address blocks: 64.24.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:bb:8e:e3:2d:b9:e2:ac:fa:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=7d362693-a107-4649-915b-2f7646e00c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c6:42:c9:4a:ba:d0:f7:05:dc:7a:d1:14:c2: e1:a5:c2:dd:79:81:d6:ae:1f:e7:c2:6a:eb:b2:65: b8:ae:7a:1e:13:19:1a:99:6e:b7:c0:3e:31:cc:1b: 36:12:03:34:8c:f5:31:7f:f8:8c:20:77:7d:93:c7: fe:ba:66:ef:10:2a:3f:b6:a1:cc:e9:66:37:f4:ec: 56:8b:c2:5b:07:a5:9f:3d:a3:58:e6:5e:01:e8:fb: cb:44:06:54:ee:9e:b8:5b:e1:8d:e5:a6:c0:44:ad: 42:70:a7:a0:2e:c5:5b:b0:23:10:39:a3:4f:61:0c: 8a:91:c1:01:6a:27:8c:e0:d7:02:03:8a:04:78:87: 02:7a:9f:43:a6:e7:56:f7:5d:2d:b4:f9:bd:dd:87: 8f:63:3c:78:3d:91:90:6b:20:c8:68:d8:bb:62:58: 36:0b:d4:db:03:2c:03:98:8b:a1:d4:82:dc:c3:70: ed:e4:74:00:f2:81:48:d9:8a:d0:80:04:a9:e9:f0: 3b:26:fc:0a:24:b2:b8:13:3a:dc:51:f8:48:60:d5: 97:18:0d:12:8e:48:d7:ef:0f:64:eb:0a:0b:ad:36: 24:6f:58:9d:18:a3:e0:a9:e2:f3:af:ec:c3:c7:8c: 16:c6:9e:87:04:a3:49:3c:75:3b:6b:ed:0e:01:f9: ec:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:09:28:3F:37:F1:C3:21:17:F0:7E:BC:61:D4:5C:31:2C:57:46:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/282bef38-7c98-31f3-9540-44db9761880d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.24.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:d1:7e:1d:00:5b:4c:b5:7b:33:41:06:3f:af:e8:fc:cc:b6: a5:35:05:5d:f5:d3:f9:77:3c:3b:43:ce:c9:f0:c4:97:5a:cf: 60:0a:80:12:b9:14:76:a6:69:70:a2:6c:bf:6f:0b:37:ae:6e: 05:bf:1c:b0:93:ae:7c:e2:df:36:d7:53:77:2a:41:9d:6d:81: b4:5d:2f:42:25:a2:13:2f:4e:58:19:87:b9:18:af:d2:8b:7f: 67:3e:9a:3f:c2:4e:95:e2:2e:cd:4a:9b:9c:bf:fc:9e:00:af: d1:d8:33:0d:6e:70:cd:92:1e:00:da:0a:ec:02:da:4f:39:15: c5:10:a3:fb:b7:9a:00:95:3c:74:42:1f:a3:eb:0a:30:bf:7a: 29:5d:6a:1a:89:d4:39:c1:c6:83:f3:09:20:44:07:0e:30:b5: 90:34:1a:87:3c:7c:01:b8:e7:04:9b:33:60:94:f5:8d:c1:fa: dc:cd:55:5b:24:6f:ba:e1:36:ce:c7:b1:32:cb:3a:69:bd:45: 77:93:ab:18:61:51:55:52:da:69:97:0c:01:9a:48:05:dc:eb: 8f:25:15:25:8c:f8:93:90:ab:5c:47:fb:15:5c:6f:96:59:57: 45:4d:f9:db:ae:66:69:56:bf:a9:23:32:99:5e:0a:ac:be:b2: d3:91:aa:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+LuO4y254qz6dYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk N2QzNjI2OTMtYTEwNy00NjQ5LTkxNWItMmY3NjQ2ZTAwYzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8ZCyUq60PcF3HrRFMLhpcLdeYHWrh/nwmrr smW4rnoeExkamW63wD4xzBs2EgM0jPUxf/iMIHd9k8f+umbvECo/tqHM6WY39OxW i8JbB6WfPaNY5l4B6PvLRAZU7p64W+GN5abARK1CcKegLsVbsCMQOaNPYQyKkcEB aieM4NcCA4oEeIcCep9DpudW910ttPm93YePYzx4PZGQayDIaNi7Ylg2C9TbAywD mIuh1ILcw3Dt5HQA8oFI2YrQgASp6fA7JvwKJLK4EzrcUfhIYNWXGA0SjkjX7w9k 6woLrTYkb1idGKPgqeLzr+zDx4wWxp6HBKNJPHU7a+0OAfnsowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYJKD838cMhF/B+vGHUXDEsV0aSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjgyYmVmMzgtN2M5OC0z MWYzLTk1NDAtNDRkYjk3NjE4ODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQBiQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7Rfh0AW0y1ezNBBj+v6PzMtqU1BV310/l3PDtDzsnwxJdaz2AKgBK5 FHamaXCibL9vCzeubgW/HLCTrnzi3zbXU3cqQZ1tgbRdL0IlohMvTlgZh7kYr9KL f2c+mj/CTpXiLs1Km5y//J4Ar9HYMw1ucM2SHgDaCuwC2k85FcUQo/u3mgCVPHRC H6PrCjC/eildahqJ1DnBxoPzCSBEBw4wtZA0Goc8fAG45wSbM2CU9Y3B+tzNVVsk b7rhNs7HsTLLOmm9RXeTqxhhUVVS2mmXDAGaSAXc648lFSWM+JOQq1xH+xVcb5ZZ V0VN+duuZmlWv6kjMpleCqy+stORqmw= -----END CERTIFICATE-----Generated at Fri Mar 14 10:55:39 2025 by rpki-client