$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/930572d4-e45d-364b-ba9f-6ab1d5034994.roa File: 930572d4-e45d-364b-ba9f-6ab1d5034994.roa (raw, json) Hash identifier: nfPXd4hSQkAo+9mbUu9SVXfxbYXMvbNWM5dY7T7gTQ8= Subject key identifier: 59:96:C1:AB:AB:69:B6:82:7C:1B:3E:46:9F:1D:4F:DB:67:E5:18:32 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D7166F9E2C97DD49F675DE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/930572d4-e45d-364b-ba9f-6ab1d5034994.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 64.24.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:66:f9:e2:c9:7d:d4:9f:67:5d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=34fc371e-67c3-4d6d-b6ec-7fb022a8ab89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3f:ba:7c:f3:b3:c8:98:1f:c5:c8:b2:8a:03: 17:30:d8:7f:22:22:bf:bd:20:d5:ac:34:ad:1f:16: 60:d4:23:41:54:4c:27:78:37:0c:f3:a6:9d:5c:ee: 00:9b:56:75:5b:93:70:a6:7b:6e:a8:08:ff:f6:d1: 42:6b:05:26:f9:58:86:1e:e5:61:38:30:5b:45:96: fa:d0:4f:54:c5:40:4c:73:ff:75:5b:c4:1b:c1:ec: fa:0d:64:a0:8a:fb:20:b5:84:46:35:13:65:ff:59: 81:7c:d5:09:be:45:a3:f3:71:52:1b:65:d0:b0:a1: ab:02:7e:ea:fa:5f:27:0d:51:78:35:97:7d:7b:1b: 0a:8b:10:13:e2:46:5e:12:3c:af:26:94:b8:ca:73: 7c:5b:8d:b1:67:7e:86:05:77:f4:7a:53:7b:5a:d8: ca:70:d9:79:0c:31:a5:80:c3:3c:00:d0:0a:37:e8: 2d:43:9b:c5:9b:36:89:c3:b6:19:e8:73:fc:7b:08: 7b:0d:ee:b1:b6:aa:ea:b2:1b:6f:13:d5:4c:f5:ee: 1c:88:da:5c:30:9a:b9:a4:28:d9:19:59:b1:e2:af: 13:4b:f2:94:e8:33:e7:2d:7a:c2:17:07:94:fe:77: 9d:37:95:32:5a:13:1e:4d:32:22:41:33:8f:42:15: 23:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:96:C1:AB:AB:69:B6:82:7C:1B:3E:46:9F:1D:4F:DB:67:E5:18:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/930572d4-e45d-364b-ba9f-6ab1d5034994.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.24.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:2c:0f:4e:97:fe:3c:55:76:1a:dc:de:2f:37:d1:75:ef:cf: df:78:c7:a4:b4:26:a6:bd:b9:c3:30:62:5c:26:4d:cc:ec:c7: 3b:17:3c:f2:6b:6e:63:a7:02:9a:4e:b0:e8:20:c4:35:dc:15: a7:be:4f:f8:23:ac:0b:95:ad:ad:01:59:ae:f1:36:83:44:a8: a0:e0:03:50:b0:54:f2:0c:06:3e:8f:42:a2:05:31:cd:31:c4: 8e:39:d7:10:d5:fa:84:36:77:fa:e0:5b:25:e0:7d:3d:ee:83: 5a:a9:79:31:3c:06:a7:b8:6f:f7:b7:35:bb:a8:a8:9e:17:17: f0:97:7a:fc:86:02:35:05:fa:62:10:79:6b:11:a1:29:2b:25: 40:e7:d7:8a:7b:e9:c0:ac:76:17:a3:47:9f:fd:60:df:09:38: ec:34:9b:c5:a2:3d:d2:79:4e:99:4b:9d:71:88:51:0c:42:36: ac:85:b4:2f:c0:21:ca:04:33:0b:76:da:55:72:3e:d9:39:ff: 86:78:7d:db:d8:a2:87:f6:7d:82:d7:13:1f:d6:62:c3:bb:fb: 18:e0:a4:d5:84:03:23:20:32:27:ca:43:c5:11:4e:ae:ea:48: 83:23:67:2d:b0:ca:c1:d0:e3:ba:15:0e:bf:ee:63:1b:41:32: 94:ea:52:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWb54sl91J9nXeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk MzRmYzM3MWUtNjdjMy00ZDZkLWI2ZWMtN2ZiMDIyYThhYjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0T+6fPOzyJgfxciyigMXMNh/IiK/vSDVrDSt HxZg1CNBVEwneDcM86adXO4Am1Z1W5NwpntuqAj/9tFCawUm+ViGHuVhODBbRZb6 0E9UxUBMc/91W8Qbwez6DWSgivsgtYRGNRNl/1mBfNUJvkWj83FSG2XQsKGrAn7q +l8nDVF4NZd9exsKixAT4kZeEjyvJpS4ynN8W42xZ36GBXf0elN7WtjKcNl5DDGl gMM8ANAKN+gtQ5vFmzaJw7YZ6HP8ewh7De6xtqrqshtvE9VM9e4ciNpcMJq5pCjZ GVmx4q8TS/KU6DPnLXrCFweU/nedN5UyWhMeTTIiQTOPQhUjiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmWwaurabaCfBs+Rp8dT9tn5RgyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTMwNTcyZDQtZTQ1ZC0z NjRiLWJhOWYtNmFiMWQ1MDM0OTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQBj8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQsD06X/jxVdhrc3i830XXvz994x6S0Jqa9ucMwYlwmTczsxzsXPPJr bmOnAppOsOggxDXcFae+T/gjrAuVra0BWa7xNoNEqKDgA1CwVPIMBj6PQqIFMc0x xI451xDV+oQ2d/rgWyXgfT3ug1qpeTE8Bqe4b/e3NbuoqJ4XF/CXevyGAjUF+mIQ eWsRoSkrJUDn14p76cCsdhejR5/9YN8JOOw0m8WiPdJ5TplLnXGIUQxCNqyFtC/A IcoEMwt22lVyPtk5/4Z4fdvYoof2fYLXEx/WYsO7+xjgpNWEAyMgMifKQ8URTq7q SIMjZy2wysHQ47oVDr/uYxtBMpTqUg8= -----END CERTIFICATE-----Generated at Fri Mar 14 09:57:50 2025 by rpki-client