$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5453459a-6eb2-3994-9041-412771cabb7c.roa File: 5453459a-6eb2-3994-9041-412771cabb7c.roa (raw, json) Hash identifier: F5NGmks+Czs0sdjP3YCJGemsuWCR6Rpfojbu/jV1vmo= Subject key identifier: 63:18:20:56:39:30:45:D1:5C:03:01:68:2E:78:27:98:57:A7:34:A5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210EADEBF777A81B1E59600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5453459a-6eb2-3994-9041-412771cabb7c.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 64.80.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:ea:de:bf:77:7a:81:b1:e5:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=5430e781-da31-4398-9029-cfccd4be8a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:25:7d:15:69:b0:cd:c8:83:40:13:01:b9:58: 42:2e:94:72:77:db:d2:f6:47:ef:0c:ae:3a:13:5e: ae:3c:fd:1b:37:c2:03:cf:19:7e:4b:a4:af:d1:1c: 81:44:1f:59:9e:24:2b:ca:36:8a:e3:7f:db:33:08: 27:c0:88:ca:67:ef:bd:61:f5:95:c0:0b:48:85:94: cd:48:f8:77:a3:01:c6:e2:4d:fe:28:71:19:86:95: fe:3a:9a:a7:de:30:b7:fe:52:06:dd:4d:4b:30:47: 23:63:b5:3c:15:74:44:1a:1b:09:02:3d:9d:1c:03: c1:44:e4:1c:83:56:80:0e:22:3d:78:03:aa:48:e6: a5:57:02:7b:24:bf:27:64:15:79:42:a5:79:8c:61: a4:9f:bb:41:25:99:5d:a1:90:08:ad:a1:72:63:65: cc:bf:56:54:11:73:35:c0:4f:e2:53:ce:f3:83:a1: e1:4b:9f:be:67:19:a0:48:ef:16:c0:ce:a8:bd:b1: a5:92:e7:e1:09:57:bb:3e:60:6c:43:8e:78:e7:1e: 83:05:86:8e:8c:3a:59:65:22:8f:15:4f:ba:91:a3: 82:12:df:57:1a:a5:b4:36:26:52:7a:38:87:48:f8: a9:be:90:0f:41:09:89:e3:aa:14:ae:39:e0:e6:1e: b2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:18:20:56:39:30:45:D1:5C:03:01:68:2E:78:27:98:57:A7:34:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5453459a-6eb2-3994-9041-412771cabb7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.80.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:d3:b4:a5:a5:29:55:2a:37:08:ab:cf:f2:d1:f6:f8:98:4a: 3c:04:53:d6:f7:f5:02:d2:20:66:5c:06:8d:bd:53:f6:1a:48: 5f:a3:00:8b:4e:cd:a5:c4:6c:07:2f:2f:ad:3f:fe:d4:9e:ff: 20:25:3e:60:e2:61:9f:77:64:75:61:70:b9:43:c5:15:ff:65: 2a:a8:3b:0c:53:4e:cf:c7:f0:3c:b0:df:72:26:64:fa:74:47: 74:e5:34:e9:c4:e4:90:29:88:01:06:1a:7f:54:00:25:d5:d8: ca:69:54:c3:d6:15:7b:44:85:bb:5c:0d:a4:ad:40:89:0e:f4: 88:e9:ab:eb:86:7c:c8:77:15:23:20:2f:87:65:58:1f:42:8c: bb:d5:bf:44:e7:5a:4d:1e:2b:5f:9c:e2:45:93:0c:d8:2f:d3: 90:b0:ea:c4:67:be:14:02:b1:e6:eb:35:09:f7:b1:9b:d9:79: b5:94:ba:e1:3a:66:73:94:f1:b9:c6:89:db:57:7f:18:1f:fa: fe:6a:3b:30:c1:42:23:a7:31:93:18:b8:97:09:f6:6f:a9:5b: 6c:1e:2b:ca:41:96:fd:e1:7c:f3:30:70:bc:d7:5a:6d:4c:a6: 45:34:ed:1c:2a:94:10:a2:f4:90:17:8d:bc:21:8e:f3:2c:ce: a0:29:33:76 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjSEOrev3d6gbHllgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NTQzMGU3ODEtZGEzMS00Mzk4LTkwMjktY2ZjY2Q0YmU4YTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniV9FWmwzciDQBMBuVhCLpRyd9vS9kfvDK46 E16uPP0bN8IDzxl+S6Sv0RyBRB9ZniQryjaK43/bMwgnwIjKZ++9YfWVwAtIhZTN SPh3owHG4k3+KHEZhpX+Opqn3jC3/lIG3U1LMEcjY7U8FXREGhsJAj2dHAPBROQc g1aADiI9eAOqSOalVwJ7JL8nZBV5QqV5jGGkn7tBJZldoZAIraFyY2XMv1ZUEXM1 wE/iU87zg6HhS5++ZxmgSO8WwM6ovbGlkufhCVe7PmBsQ4545x6DBYaOjDpZZSKP FU+6kaOCEt9XGqW0NiZSejiHSPipvpAPQQmJ46oUrjng5h6yhQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGMYIFY5MEXRXAMBaC54J5hXpzSlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTQ1MzQ1OWEtNmViMi0z OTk0LTkwNDEtNDEyNzcxY2FiYjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQFAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEActO0paUpVSo3CKvP8tH2+JhKPART1vf1AtIgZlwGjb1T9hpIX6MAi07N pcRsBy8vrT/+1J7/ICU+YOJhn3dkdWFwuUPFFf9lKqg7DFNOz8fwPLDfciZk+nRH dOU06cTkkCmIAQYaf1QAJdXYymlUw9YVe0SFu1wNpK1AiQ70iOmr64Z8yHcVIyAv h2VYH0KMu9W/ROdaTR4rX5ziRZMM2C/TkLDqxGe+FAKx5us1Cfexm9l5tZS64Tpm c5TxucaJ21d/GB/6/mo7MMFCI6cxkxi4lwn2b6lbbB4rykGW/eF88zBwvNdabUym RTTtHCqUEKL0kBeNvCGO8yzOoCkzdg== -----END CERTIFICATE-----Generated at Sun Apr 6 02:23:32 2025 by rpki-client