$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f181286-8858-3f98-a10e-686c757b5b7f.roa File: 9f181286-8858-3f98-a10e-686c757b5b7f.roa (raw, json) Hash identifier: cGjpqGLe/F40iSlEW45QQol5JglQ62F2hJjyCBiqv4k= Subject key identifier: AE:CA:64:85:A2:1C:E9:FE:BE:00:AC:6E:F8:AE:79:6A:0B:2C:C4:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D211194A25875A6D512BFD00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f181286-8858-3f98-a10e-686c757b5b7f.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 64.16.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:19:4a:25:87:5a:6d:51:2b:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=222bf259-dc9e-44ac-8bb8-1f30e6c79392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:51:1a:7b:92:0b:72:ae:11:90:7c:f7:5d:6e: 70:2f:a3:3b:72:c6:34:bb:ba:a2:64:60:df:a3:bd: e2:7a:25:dc:3b:a2:74:ca:9f:8e:1e:e8:fe:d2:0e: ef:50:30:79:17:ba:c5:47:5c:15:47:2c:59:70:f4: 59:5e:bb:5f:db:53:b4:fd:62:80:4c:3a:9f:89:95: d0:53:d8:ec:7c:68:0b:cc:d8:69:da:b0:a2:31:b2: b9:17:2c:05:74:94:f5:37:e4:d1:2c:02:c3:ac:99: 0b:5b:87:34:bb:6e:bc:eb:70:4e:17:4b:96:84:30: 31:2f:0a:39:0a:f5:24:8a:64:3e:fc:56:8c:cf:fd: a8:9b:06:f9:5c:a6:db:9a:c3:d2:b6:f4:d8:e6:14: e5:8a:4e:35:12:10:7f:97:f7:85:03:c3:0c:81:74: 24:2d:27:4e:d1:a7:eb:6b:81:4b:ae:52:41:6e:5e: ba:f7:3c:6f:89:62:24:f5:ac:e2:0a:fd:20:6d:57: ea:04:c6:50:bf:d9:2f:2f:55:65:c7:df:26:5e:66: 58:49:83:ec:d3:56:e6:14:87:36:03:67:07:1b:89: 19:76:60:b3:80:90:b1:4b:44:37:d0:74:6f:cf:2e: 30:63:28:76:95:8f:92:6c:97:89:19:57:bc:9c:8c: d8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:CA:64:85:A2:1C:E9:FE:BE:00:AC:6E:F8:AE:79:6A:0B:2C:C4:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f181286-8858-3f98-a10e-686c757b5b7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.16.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:91:2f:e7:1c:24:6e:4c:ba:7c:12:5b:ba:02:68:48:d0:f8: fe:5b:88:7b:12:15:9d:ab:c7:d8:80:7d:71:d4:fb:a7:7c:1c: c7:ac:8d:84:97:9b:90:e0:f1:fe:1f:8a:d1:c3:ad:33:05:49: a1:87:b4:1d:95:ff:8c:11:ea:25:fc:0d:7d:5b:08:24:bf:37: 5f:aa:33:c5:d8:bd:ea:ef:50:10:2b:9c:a9:2c:8e:ba:a1:d8: 9f:fc:0a:3b:1f:ec:32:2d:a5:1d:44:27:8f:0c:92:38:69:4e: e4:54:b9:c4:10:d9:d2:07:16:67:d1:bb:28:31:64:6d:9b:63: fd:5e:e7:e8:5c:47:ac:3c:9e:65:b7:55:be:e7:1c:68:9e:11: 35:c3:b2:8f:da:94:08:34:26:53:bc:05:95:d4:c5:a1:8f:fc: e4:af:69:48:44:04:47:ca:cd:54:b1:ce:54:9d:0c:f7:84:ad: b1:fc:e9:2b:df:65:3d:26:70:68:3c:67:14:74:e7:ca:65:fa: 74:cd:0b:e8:3e:55:63:90:70:82:d8:2c:af:90:7f:dc:a2:c5: df:83:f7:fb:a7:62:d6:2a:9a:8a:70:38:6b:1f:62:7f:82:f2: a4:40:12:6f:0a:12:43:f4:79:0a:7c:25:28:a1:67:d0:b3:22: c4:e1:95:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSERlKJYdabVEr/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MjIyYmYyNTktZGM5ZS00NGFjLThiYjgtMWYzMGU2Yzc5MzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklEae5ILcq4RkHz3XW5wL6M7csY0u7qiZGDf o73ieiXcO6J0yp+OHuj+0g7vUDB5F7rFR1wVRyxZcPRZXrtf21O0/WKATDqfiZXQ U9jsfGgLzNhp2rCiMbK5FywFdJT1N+TRLALDrJkLW4c0u26863BOF0uWhDAxLwo5 CvUkimQ+/FaMz/2omwb5XKbbmsPStvTY5hTlik41EhB/l/eFA8MMgXQkLSdO0afr a4FLrlJBbl669zxviWIk9aziCv0gbVfqBMZQv9kvL1Vlx98mXmZYSYPs01bmFIc2 A2cHG4kZdmCzgJCxS0Q30HRvzy4wYyh2lY+SbJeJGVe8nIzY8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7KZIWiHOn+vgCsbviueWoLLMRbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWYxODEyODYtODg1OC0z Zjk4LWExMGUtNjg2Yzc1N2I1YjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6RL+ccJG5MunwSW7oCaEjQ+P5biHsSFZ2rx9iAfXHU+6d8HMesjYSX m5Dg8f4fitHDrTMFSaGHtB2V/4wR6iX8DX1bCCS/N1+qM8XYvervUBArnKksjrqh 2J/8Cjsf7DItpR1EJ48MkjhpTuRUucQQ2dIHFmfRuygxZG2bY/1e5+hcR6w8nmW3 Vb7nHGieETXDso/alAg0JlO8BZXUxaGP/OSvaUhEBEfKzVSxzlSdDPeErbH86Svf ZT0mcGg8ZxR058pl+nTNC+g+VWOQcILYLK+Qf9yixd+D9/unYtYqmopwOGsfYn+C 8qRAEm8KEkP0eQp8JSihZ9CzIsThlaE= -----END CERTIFICATE-----Generated at Sat Apr 5 18:27:23 2025 by rpki-client