$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5258eb7-60a5-35ed-bc55-73c39ba0302e.roa File: b5258eb7-60a5-35ed-bc55-73c39ba0302e.roa (raw, json) Hash identifier: lMC8FvKdKOrq88oiWl6nlm2fN3FeSuDNB3YBnD+T478= Subject key identifier: 97:D0:17:4B:94:D8:B9:E3:6A:C6:EC:62:0F:B1:3C:50:7C:0F:D9:6B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21100CE5E0FD4A13F48C780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5258eb7-60a5-35ed-bc55-73c39ba0302e.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 17325 IP address blocks: 74.10.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:00:ce:5e:0f:d4:a1:3f:48:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=b2b62040-4ddc-4099-9aca-ac0ea1da01e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:47:35:0a:a1:71:48:fe:59:fc:cc:1e:ec:80: 9f:da:61:6a:42:4a:b9:aa:b8:74:24:63:a7:1e:84: 1a:9d:8c:11:36:62:e1:63:bc:d7:53:3a:66:2a:06: 94:8f:2e:2c:cc:a9:76:fa:9d:de:b0:22:b4:a8:51: e1:80:dd:e0:67:bb:26:a7:54:a3:b8:5b:fa:e4:ed: 8c:47:5f:0c:0a:a3:19:b8:1f:a5:a5:5b:2e:73:3b: 0b:72:04:39:b2:46:6b:68:ac:e3:47:1d:dc:81:bc: 7d:4f:9c:e7:da:1d:8e:b0:eb:4c:e2:17:c1:07:ab: 6f:46:44:b0:53:fe:e2:b4:4b:aa:2e:cc:28:5a:dc: 24:70:d9:9c:46:fc:6d:c2:b4:4b:e9:f0:51:45:f2: fe:60:50:b4:d5:38:48:0f:e6:5c:3c:bf:b5:93:ad: 86:0f:e4:cc:34:34:59:ae:e8:13:9a:18:1f:4c:69: 13:33:20:39:9c:a3:55:e2:40:58:78:82:12:69:35: a9:4d:ea:86:0e:83:02:4b:3a:11:db:d9:36:3b:33: 6c:bf:7f:40:e9:12:0b:c4:6e:1c:4e:ab:0e:f8:6d: f3:ed:07:7a:ad:7b:88:e6:c7:85:80:1a:e6:88:bd: e5:aa:64:7d:59:81:20:2c:33:55:df:d4:93:15:4b: 7c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D0:17:4B:94:D8:B9:E3:6A:C6:EC:62:0F:B1:3C:50:7C:0F:D9:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5258eb7-60a5-35ed-bc55-73c39ba0302e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.10.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:18:18:87:62:ab:b6:c4:8f:f7:fa:2c:96:26:87:c5:a7:0a: 77:a0:0d:59:c3:b7:0a:89:44:42:61:66:7f:ed:44:d6:ce:a4: 97:f7:b1:e0:e9:f7:28:55:23:fc:84:dd:70:89:ae:a2:4e:2d: 06:dd:18:93:1d:df:05:96:39:74:7b:5f:ba:ab:85:87:b7:2b: 88:c5:e8:49:fa:b6:4e:d3:40:fc:c4:c8:45:4c:ba:36:06:7f: 44:9c:c2:b2:2e:39:f1:6a:d4:0e:f3:6c:bc:dd:d5:54:b6:78: 01:7d:4b:44:02:1f:0a:a6:7a:e3:2e:43:6b:bc:e8:61:f5:7a: 5f:48:de:ee:7a:39:27:56:8f:51:2a:b0:2c:62:cb:07:8b:35: ec:41:48:af:79:23:fa:ae:c9:0e:f8:75:fa:81:05:27:e1:e7: 7a:33:d5:1f:0f:b8:5e:2e:10:44:91:56:01:49:bb:5f:af:2e: 3e:81:40:8c:21:6e:73:e4:52:26:4c:aa:30:98:23:6e:72:12: 9d:07:3a:55:ae:ab:8f:a8:a9:da:d5:11:4a:64:42:08:78:8b: 1f:69:7c:12:6d:21:75:44:db:d3:0b:01:0f:4a:10:c4:7b:da: 05:92:78:c8:d4:9c:b9:cc:c3:57:3e:18:91:c7:40:9c:26:fe: 94:83:8a:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEQDOXg/UoT9Ix4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YjJiNjIwNDAtNGRkYy00MDk5LTlhY2EtYWMwZWExZGEwMWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkc1CqFxSP5Z/Mwe7ICf2mFqQkq5qrh0JGOn HoQanYwRNmLhY7zXUzpmKgaUjy4szKl2+p3esCK0qFHhgN3gZ7smp1SjuFv65O2M R18MCqMZuB+lpVsuczsLcgQ5skZraKzjRx3cgbx9T5zn2h2OsOtM4hfBB6tvRkSw U/7itEuqLswoWtwkcNmcRvxtwrRL6fBRRfL+YFC01ThID+ZcPL+1k62GD+TMNDRZ rugTmhgfTGkTMyA5nKNV4kBYeIISaTWpTeqGDoMCSzoR29k2OzNsv39A6RILxG4c TqsO+G3z7Qd6rXuI5seFgBrmiL3lqmR9WYEgLDNV39STFUt8iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfQF0uU2LnjasbsYg+xPFB8D9lrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjUyNThlYjctNjBhNS0z NWVkLWJjNTUtNzNjMzliYTAzMDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgqiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUYGIdiq7bEj/f6LJYmh8WnCnegDVnDtwqJREJhZn/tRNbOpJf3seDp 9yhVI/yE3XCJrqJOLQbdGJMd3wWWOXR7X7qrhYe3K4jF6En6tk7TQPzEyEVMujYG f0ScwrIuOfFq1A7zbLzd1VS2eAF9S0QCHwqmeuMuQ2u86GH1el9I3u56OSdWj1Eq sCxiyweLNexBSK95I/quyQ74dfqBBSfh53oz1R8PuF4uEESRVgFJu1+vLj6BQIwh bnPkUiZMqjCYI25yEp0HOlWuq4+oqdrVEUpkQgh4ix9pfBJtIXVE29MLAQ9KEMR7 2gWSeMjUnLnMw1c+GJHHQJwm/pSDijw= -----END CERTIFICATE-----Generated at Mon Apr 7 11:55:43 2025 by rpki-client