$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c40f082-a146-38bb-8b27-c7497ea3afdc.roa File: 7c40f082-a146-38bb-8b27-c7497ea3afdc.roa (raw, json) Hash identifier: PwJ+MCbo5kCx5sMMtIBuvA5G8OYDt+KsP35cwLs+Xvc= Subject key identifier: 88:47:25:7A:CD:2C:FE:C0:C2:59:17:3C:33:FE:AE:E8:E5:5A:E0:47 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F4F8BBA7CFFB774F52ABB300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c40f082-a146-38bb-8b27-c7497ea3afdc.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7029 IP address blocks: 64.24.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:bb:a7:cf:fb:77:4f:52:ab:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=55e56760-dfa5-4add-b8e7-3050243657cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0f:0c:52:0f:c3:02:10:10:86:c0:a0:8c:e4: 68:1a:ce:33:bc:5e:88:83:de:09:d9:02:d0:be:bf: 34:bf:13:26:94:cc:d2:26:c0:ed:23:86:c0:d3:e1: c5:3d:1e:23:c4:b9:27:5a:cb:fb:9b:ff:18:40:54: f9:f8:cd:ec:22:a1:ab:dc:4e:3a:05:93:67:f7:9a: 48:94:7b:a2:61:be:5b:67:03:45:b5:f2:e7:05:35: dc:37:48:84:d2:0f:88:5a:71:8c:9f:44:bf:d4:8a: 3c:dc:15:9e:f2:8b:4b:6d:f5:f7:a9:99:3c:f5:c4: 69:c3:bf:73:cc:e0:9e:6c:73:91:c3:b2:1b:af:8e: bc:e8:be:99:38:ca:ec:c0:c5:d7:f0:b1:ef:18:b0: bd:c1:b6:20:c1:ef:49:69:87:f2:4b:07:a2:56:df: b3:d1:93:e7:d1:2d:e3:40:93:d0:3e:eb:80:03:9a: 86:c7:fd:e6:7e:f2:ff:a1:cb:e5:d8:39:83:b0:cc: a4:61:2a:e0:bc:02:69:bc:3d:1a:48:7b:75:b1:5a: ab:12:64:19:b0:0d:32:76:ee:44:4e:79:c1:77:ce: 84:ca:be:08:bc:d1:5c:1e:c4:92:0f:c7:df:bb:5c: 4d:6d:89:36:d7:b4:b6:a8:71:b1:e4:aa:4c:cd:88: 90:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:47:25:7A:CD:2C:FE:C0:C2:59:17:3C:33:FE:AE:E8:E5:5A:E0:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c40f082-a146-38bb-8b27-c7497ea3afdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.24.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:8c:3d:39:f6:c1:49:fb:e3:92:b7:f6:80:e1:94:c6:73:37: 85:7b:be:2a:d4:bc:0c:9a:a3:b3:4d:74:4b:30:8a:ff:88:17: 82:42:88:80:ac:0d:61:ed:2b:1c:8a:b7:15:2f:d6:92:24:23: 2a:5a:0c:62:ae:e5:06:84:a4:9e:6c:43:d2:fa:44:03:df:5d: 8f:a6:d3:c9:ec:d3:8f:64:38:5b:0f:d6:97:d7:1c:8f:da:b0: c6:23:f8:55:03:2b:d2:f1:89:98:66:10:ce:98:7d:10:74:8f: 5b:d2:7d:f6:8d:bc:a2:16:bd:5e:b7:c7:1d:16:d3:d1:e4:ca: d0:4a:a9:32:d0:21:a3:39:f7:2a:95:13:d1:a7:f7:bd:19:0a: 70:8c:42:35:db:95:3f:09:27:13:56:85:b2:73:ce:00:10:0d: c0:21:ea:80:54:1a:4f:e0:fc:99:d3:a3:59:6c:3e:3a:47:d8: 6c:bf:f9:07:0c:50:f1:27:2f:fd:66:f6:f0:78:9b:dc:94:0b: f0:d9:04:27:58:17:14:4d:50:52:3f:ec:01:e2:2d:d6:26:0f: 24:69:0b:d6:c0:23:71:13:9f:dd:e2:52:1b:60:2a:ca:6a:ec: 46:b8:5a:cb:85:e7:9b:59:f3:1c:4a:ea:79:e0:ea:5c:e6:04: d8:be:37:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+Lunz/t3T1KrswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NTVlNTY3NjAtZGZhNS00YWRkLWI4ZTctMzA1MDI0MzY1N2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw8MUg/DAhAQhsCgjORoGs4zvF6Ig94J2QLQ vr80vxMmlMzSJsDtI4bA0+HFPR4jxLknWsv7m/8YQFT5+M3sIqGr3E46BZNn95pI lHuiYb5bZwNFtfLnBTXcN0iE0g+IWnGMn0S/1Io83BWe8otLbfX3qZk89cRpw79z zOCebHORw7Ibr4686L6ZOMrswMXX8LHvGLC9wbYgwe9JaYfySweiVt+z0ZPn0S3j QJPQPuuAA5qGx/3mfvL/ocvl2DmDsMykYSrgvAJpvD0aSHt1sVqrEmQZsA0ydu5E TnnBd86Eyr4IvNFcHsSSD8ffu1xNbYk217S2qHGx5KpMzYiQvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhHJXrNLP7AwlkXPDP+rujlWuBHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2M0MGYwODItYTE0Ni0z OGJiLThiMjctYzc0OTdlYTNhZmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQBjsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2MPTn2wUn745K39oDhlMZzN4V7virUvAyao7NNdEswiv+IF4JCiICs DWHtKxyKtxUv1pIkIypaDGKu5QaEpJ5sQ9L6RAPfXY+m08ns049kOFsP1pfXHI/a sMYj+FUDK9LxiZhmEM6YfRB0j1vSffaNvKIWvV63xx0W09HkytBKqTLQIaM59yqV E9Gn970ZCnCMQjXblT8JJxNWhbJzzgAQDcAh6oBUGk/g/JnTo1lsPjpH2Gy/+QcM UPEnL/1m9vB4m9yUC/DZBCdYFxRNUFI/7AHiLdYmDyRpC9bAI3ETn93iUhtgKspq 7Ea4WsuF55tZ8xxK6nng6lzmBNi+N1c= -----END CERTIFICATE-----Generated at Sat Apr 5 20:50:36 2025 by rpki-client