$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4c77906-cf54-3238-9b43-d1a9cc331c60.roa File: c4c77906-cf54-3238-9b43-d1a9cc331c60.roa (raw, json) Hash identifier: NQGYyCu+Nt7M5wwQZ+5FFWejvFAG1qOM0iVlxtaUHqE= Subject key identifier: FD:BC:11:96:3B:81:89:81:A9:A2:98:C0:EA:30:BC:C6:67:BC:42:33 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2111A29FF5B1F7323B42BD0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4c77906-cf54-3238-9b43-d1a9cc331c60.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 64.115.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:1a:29:ff:5b:1f:73:23:b4:2b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=b623268f-2947-4bbb-9916-04fbc853659c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:01:dc:9f:f3:1d:d5:1d:ad:9e:93:ba:1d:d0: ac:e2:c3:5a:2c:4a:c2:0a:ed:6a:43:bf:25:0a:3f: 15:14:86:1f:3e:99:7e:ee:70:5d:4e:92:3c:25:21: 00:9b:3e:07:41:20:b0:3c:7e:c4:c5:18:47:f1:c6: 21:bb:c2:a4:58:c9:dd:bf:0e:95:7d:e3:61:26:85: 5d:87:fb:28:e5:cc:5b:c7:28:c0:f5:6f:3f:16:fb: c5:18:7f:3a:04:c4:5e:01:a4:e6:9e:47:9e:0c:78: 6f:3d:bf:9b:5b:c4:7c:39:de:95:b0:24:2e:9e:13: fa:71:10:8d:7b:79:31:d8:20:8f:64:94:ad:86:ee: 5e:ce:e1:84:ac:4b:9f:0c:59:38:c9:22:b5:3f:32: 88:c2:92:0b:d6:5f:e7:e5:43:14:9d:2d:58:f2:24: e7:f1:96:a5:ea:2f:29:02:68:e5:35:2a:e3:78:3c: 9a:2e:93:44:77:ff:eb:f3:9b:c8:e0:52:e7:a4:66: 82:e2:bc:6d:8e:e8:6d:59:e6:7d:9d:52:bb:b7:1b: 59:37:d2:75:bf:c3:66:fe:aa:f0:bf:10:83:13:1a: 96:50:e4:3a:48:24:0c:38:d9:28:06:c4:b3:7a:75: 9f:9f:3a:de:bd:8a:aa:87:cc:4b:8f:11:46:e8:e4: 3c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BC:11:96:3B:81:89:81:A9:A2:98:C0:EA:30:BC:C6:67:BC:42:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4c77906-cf54-3238-9b43-d1a9cc331c60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.115.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:35:54:06:8a:82:45:7e:15:3f:d2:12:4b:57:96:c3:b6:4c: 37:11:50:29:34:da:ea:a5:4b:4b:1d:3c:68:e5:a0:02:30:16: 63:3c:3c:1b:00:16:db:12:48:0c:c1:5b:34:0c:ce:78:05:61: 8e:24:ec:a0:8c:84:80:f0:96:2e:42:c0:4e:08:84:0f:0b:aa: d4:4e:43:06:7e:d6:09:ad:3f:9d:c9:c4:0f:63:43:71:69:7b: d6:f1:70:2a:cd:ee:78:ec:ac:55:e3:67:1f:04:3b:d6:34:5b: 6f:c7:1e:af:04:dd:bd:10:ac:db:dd:a0:35:5f:38:c6:e1:c1: 53:c5:e4:5f:04:a1:2c:9c:8e:64:b4:00:fa:b5:05:fe:f2:7c: e7:55:a7:3d:0d:4b:c1:ec:d5:a7:79:c6:3d:f7:53:ab:b3:d9: d6:13:03:f1:77:02:a4:60:3a:73:d6:f7:b6:f0:69:ea:93:85: 19:12:5f:71:51:2a:b2:39:9e:d4:7d:ad:5b:b8:12:12:31:28: 0d:4f:b9:53:bd:47:6a:9e:a6:ed:66:b8:c8:82:01:6f:98:3c: 3a:13:ed:14:b4:4a:0a:67:4f:b3:c9:e5:18:82:f1:67:6e:a7: 9f:9a:8b:ac:ea:c0:71:bc:b9:63:02:65:d9:13:97:f5:d5:30: c5:bb:d7:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSERop/1sfcyO0K9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YjYyMzI2OGYtMjk0Ny00YmJiLTk5MTYtMDRmYmM4NTM2NTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gHcn/Md1R2tnpO6HdCs4sNaLErCCu1qQ78l Cj8VFIYfPpl+7nBdTpI8JSEAmz4HQSCwPH7ExRhH8cYhu8KkWMndvw6VfeNhJoVd h/so5cxbxyjA9W8/FvvFGH86BMReAaTmnkeeDHhvPb+bW8R8Od6VsCQunhP6cRCN e3kx2CCPZJSthu5ezuGErEufDFk4ySK1PzKIwpIL1l/n5UMUnS1Y8iTn8Zal6i8p AmjlNSrjeDyaLpNEd//r85vI4FLnpGaC4rxtjuhtWeZ9nVK7txtZN9J1v8Nm/qrw vxCDExqWUOQ6SCQMONkoBsSzenWfnzrevYqqh8xLjxFG6OQ84wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP28EZY7gYmBqaKYwOowvMZnvEIzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzRjNzc5MDYtY2Y1NC0z MjM4LTliNDMtZDFhOWNjMzMxYzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHOKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAE1VAaKgkV+FT/SEktXlsO2TDcRUCk02uqlS0sdPGjloAIwFmM8PBsA FtsSSAzBWzQMzngFYY4k7KCMhIDwli5CwE4IhA8LqtROQwZ+1gmtP53JxA9jQ3Fp e9bxcCrN7njsrFXjZx8EO9Y0W2/HHq8E3b0QrNvdoDVfOMbhwVPF5F8EoSycjmS0 APq1Bf7yfOdVpz0NS8Hs1ad5xj33U6uz2dYTA/F3AqRgOnPW97bwaeqThRkSX3FR KrI5ntR9rVu4EhIxKA1PuVO9R2qepu1muMiCAW+YPDoT7RS0SgpnT7PJ5RiC8Wdu p5+ai6zqwHG8uWMCZdkTl/XVMMW7154= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:39 2025 by rpki-client