$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e7a4942-1bb7-3f38-8606-41a5b3795782.roa File: 7e7a4942-1bb7-3f38-8606-41a5b3795782.roa (raw, json) Hash identifier: VHbhrBo+/B/TSOh26YN4LyOiTZGp+RxjoKaSsGO804U= Subject key identifier: B9:9A:4E:89:FE:97:D0:8E:A0:42:F8:03:41:68:81:C5:FC:38:AC:35 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2111A3BEE395C27EED5E900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e7a4942-1bb7-3f38-8606-41a5b3795782.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 64.118.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:1a:3b:ee:39:5c:27:ee:d5:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=aebe1017-3f0d-4bad-9a95-ce5c67ade127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8c:7c:5d:ae:b7:ed:7c:76:a4:db:33:fe:3b: c9:e9:e4:05:20:01:10:ab:e1:9e:8f:f8:af:60:04: 09:08:3f:3e:cc:49:74:a0:1e:45:16:a1:63:97:1d: fb:10:e3:b3:e9:1a:1b:04:f7:d1:c9:64:b4:7e:f1: db:59:da:2e:9a:7d:c8:e4:41:76:f2:cd:aa:d3:06: ab:92:4c:7a:2e:8d:a8:70:28:33:ef:fc:3b:79:f5: ad:c4:65:a5:4f:9d:50:c9:1d:9d:c8:cb:bd:f3:86: 8c:3f:19:0e:c2:1e:68:6d:14:02:de:05:fb:26:9f: 9c:67:49:7a:ef:0b:6a:8f:5f:62:01:62:90:86:ad: 9d:89:77:33:20:2b:8e:12:12:1d:bc:b1:96:0a:12: 56:1e:a0:69:15:9e:0e:27:e8:cb:70:73:69:c7:3d: 08:77:f8:8d:80:a2:17:42:2f:e8:ea:ea:24:9a:de: c1:82:73:79:ec:a7:3d:b3:ee:bd:44:23:2e:70:36: 07:fb:18:53:a7:23:a9:76:ca:92:0b:57:2f:75:65: d1:f2:c8:d5:e6:ce:0e:60:5e:e8:78:18:3e:05:e3: 66:33:84:e7:9e:60:57:e1:28:82:13:9e:7d:8a:ac: 2a:98:91:31:e4:49:c9:65:84:7a:c1:f8:b6:73:d1: a1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:9A:4E:89:FE:97:D0:8E:A0:42:F8:03:41:68:81:C5:FC:38:AC:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e7a4942-1bb7-3f38-8606-41a5b3795782.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.118.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:42:7f:a5:ac:42:41:df:c7:ff:e7:2f:b0:77:52:ae:2f:01: d2:11:b0:07:62:88:54:a5:45:09:b5:b7:2c:6e:eb:dc:7c:74: 1e:fc:62:75:ec:3c:a9:55:c9:58:dc:39:e3:30:15:cb:3d:d4: e0:c9:db:60:ac:bc:38:3a:7b:2d:55:04:79:6c:96:66:d4:6f: 5b:4d:0a:be:2c:f2:f3:1e:e8:67:45:d1:87:31:5b:86:e3:66: b7:fb:b8:9a:1f:dc:a5:1e:69:82:65:d6:9a:04:43:00:4b:0a: 35:fc:25:e6:93:d3:89:d9:26:6d:29:90:c3:30:9b:8e:58:0e: d1:ca:f1:f5:b6:15:0b:2b:e2:dc:e9:b1:f7:d1:52:30:59:ae: 57:98:33:a6:45:8b:aa:b2:f6:57:99:b9:b0:7b:9b:59:20:8b: 16:98:fc:ca:ec:1c:04:96:09:61:24:d1:1e:02:44:d1:b4:e3: 8d:a2:18:8b:f5:c0:7f:30:db:cc:78:68:37:a9:d8:ed:3c:ba: 4f:5a:42:15:34:14:95:22:48:aa:32:80:a9:6e:cb:c4:a4:e6: 6e:89:e5:14:71:e3:e1:7c:ac:28:73:56:ba:7c:f6:aa:bd:d4: c1:6c:9c:12:ba:ff:92:00:37:a3:b1:5a:22:1a:1d:d6:68:a8: 67:77:ec:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSERo77jlcJ+7V6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YWViZTEwMTctM2YwZC00YmFkLTlhOTUtY2U1YzY3YWRlMTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIx8Xa637Xx2pNsz/jvJ6eQFIAEQq+Gej/iv YAQJCD8+zEl0oB5FFqFjlx37EOOz6RobBPfRyWS0fvHbWdoumn3I5EF28s2q0war kkx6Lo2ocCgz7/w7efWtxGWlT51QyR2dyMu984aMPxkOwh5obRQC3gX7Jp+cZ0l6 7wtqj19iAWKQhq2diXczICuOEhIdvLGWChJWHqBpFZ4OJ+jLcHNpxz0Id/iNgKIX Qi/o6uokmt7BgnN57Kc9s+69RCMucDYH+xhTpyOpdsqSC1cvdWXR8sjV5s4OYF7o eBg+BeNmM4TnnmBX4SiCE559iqwqmJEx5EnJZYR6wfi2c9GhLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmaTon+l9COoEL4A0FogcX8OKw1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2U3YTQ5NDItMWJiNy0z ZjM4LTg2MDYtNDFhNWIzNzk1NzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQHaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZCf6WsQkHfx//nL7B3Uq4vAdIRsAdiiFSlRQm1tyxu69x8dB78YnXs PKlVyVjcOeMwFcs91ODJ22CsvDg6ey1VBHlslmbUb1tNCr4s8vMe6GdF0YcxW4bj Zrf7uJof3KUeaYJl1poEQwBLCjX8JeaT04nZJm0pkMMwm45YDtHK8fW2FQsr4tzp sffRUjBZrleYM6ZFi6qy9leZubB7m1kgixaY/MrsHASWCWEk0R4CRNG0442iGIv1 wH8w28x4aDep2O08uk9aQhU0FJUiSKoygKluy8Sk5m6J5RRx4+F8rChzVrp89qq9 1MFsnBK6/5IAN6OxWiIaHdZoqGd37M4= -----END CERTIFICATE-----Generated at Fri Mar 14 13:34:05 2025 by rpki-client