$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d21c32e8-3ced-3b69-b6d5-4931d70dced3.roa File: d21c32e8-3ced-3b69-b6d5-4931d70dced3.roa (raw, json) Hash identifier: KmPwnV2oRqrlQivZA5m0LApvoVZE83R1GupBX9ZdsZU= Subject key identifier: 38:D2:7C:51:92:B4:54:3D:9F:83:83:17:7A:A2:7E:08:18:9B:B2:2C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21131D9F0A4DA240C7376F0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d21c32e8-3ced-3b69-b6d5-4931d70dced3.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 393258 IP address blocks: 64.61.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:31:d9:f0:a4:da:24:0c:73:76:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=6e0de705-51df-4511-a47b-5db3e336e347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:30:e1:51:74:69:9c:37:72:9c:74:80:e5:9c: 9d:09:02:9d:5b:fd:e3:9c:52:90:cf:83:86:e8:05: 67:b3:fa:03:53:03:54:fc:a0:2c:f0:61:a2:c0:4e: 37:1f:4d:8e:91:41:00:bd:d9:b9:46:ed:12:13:be: 1b:e0:ee:fb:a0:bd:e5:9c:ec:78:28:17:b8:c9:b7: a7:28:40:81:56:fa:72:eb:e9:9c:6c:31:0a:98:2e: 38:2f:f8:ef:df:16:4e:dc:ec:f0:54:ab:1d:f1:51: c0:d6:41:1b:63:b2:d9:f6:67:a6:26:6a:10:3d:cb: 4d:98:8c:c7:61:30:0a:c5:19:69:7c:7a:7f:cc:68: 77:05:e6:81:91:a7:91:18:4f:82:20:12:ae:b2:f8: 69:00:28:2e:c4:db:f2:67:8b:09:9d:ed:42:1e:9b: ef:03:4d:c5:cd:dd:83:bf:ef:e2:0b:96:f5:63:9a: 7c:05:3a:bb:7e:4c:0c:6f:49:98:9d:39:0e:00:47: a0:32:14:2d:ed:79:4d:ee:c0:a0:99:24:dd:66:c0: 51:b2:fa:38:ae:6e:92:72:f3:34:e4:66:17:98:f4: f1:69:1b:d8:7c:79:a0:04:1f:b3:92:a5:e2:ab:77: 7f:6c:08:ef:80:8e:4f:56:ac:b8:0f:89:cb:7e:3b: 92:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D2:7C:51:92:B4:54:3D:9F:83:83:17:7A:A2:7E:08:18:9B:B2:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d21c32e8-3ced-3b69-b6d5-4931d70dced3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.61.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:ef:83:42:73:98:da:1f:d7:fe:db:98:da:cb:8b:dd:c1:84: 7f:53:33:1d:78:ff:9e:6f:6b:37:eb:aa:ac:e5:e1:f8:77:22: ef:a4:07:ef:32:d3:55:03:8f:79:1b:bb:ee:1c:7d:ce:63:6e: 24:cb:b1:1b:c2:39:b9:c6:fe:7a:5d:bf:95:3f:f2:57:06:f3: a3:3a:70:cb:7c:be:82:9f:56:1b:a1:41:fe:f8:95:cf:db:ce: fa:96:7e:c3:e2:74:66:d8:bb:52:e9:37:d9:3d:af:5a:9f:c9: af:a8:80:ed:ba:fb:a1:b7:7f:a0:e1:57:00:b1:e3:ac:d5:04: ab:52:7e:a1:da:cc:f8:36:49:10:02:db:00:af:c9:11:21:9e: 95:28:c0:e8:e6:15:2a:9a:84:53:af:30:a0:80:25:3f:a8:4d: aa:0b:6d:68:0b:9a:6a:d7:19:c3:2c:a0:2a:f3:b1:c4:3f:bd: 09:09:5c:72:7f:18:e6:6b:0b:6c:5f:23:4f:4f:6d:cd:1d:95: b6:f2:37:41:13:05:39:bd:f6:15:2b:f2:12:97:b3:9b:5f:8f: c1:ed:2d:90:61:1e:c5:b1:9c:28:2e:ce:d4:ef:a6:98:e8:fc: b7:61:77:df:63:38:8c:40:ac:05:47:b5:cb:35:85:e4:ba:22: 19:4d:04:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSETHZ8KTaJAxzdvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NmUwZGU3MDUtNTFkZi00NTExLWE0N2ItNWRiM2UzMzZlMzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDDhUXRpnDdynHSA5ZydCQKdW/3jnFKQz4OG 6AVns/oDUwNU/KAs8GGiwE43H02OkUEAvdm5Ru0SE74b4O77oL3lnOx4KBe4yben KECBVvpy6+mcbDEKmC44L/jv3xZO3OzwVKsd8VHA1kEbY7LZ9memJmoQPctNmIzH YTAKxRlpfHp/zGh3BeaBkaeRGE+CIBKusvhpACguxNvyZ4sJne1CHpvvA03Fzd2D v+/iC5b1Y5p8BTq7fkwMb0mYnTkOAEegMhQt7XlN7sCgmSTdZsBRsvo4rm6ScvM0 5GYXmPTxaRvYfHmgBB+zkqXiq3d/bAjvgI5PVqy4D4nLfjuSWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjSfFGStFQ9n4ODF3qifggYm7IsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDIxYzMyZTgtM2NlZC0z YjY5LWI2ZDUtNDkzMWQ3MGRjZWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQD1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3vg0JzmNof1/7bmNrLi93BhH9TMx14/55vazfrqqzl4fh3Iu+kB+8y 01UDj3kbu+4cfc5jbiTLsRvCObnG/npdv5U/8lcG86M6cMt8voKfVhuhQf74lc/b zvqWfsPidGbYu1LpN9k9r1qfya+ogO26+6G3f6DhVwCx46zVBKtSfqHazPg2SRAC 2wCvyREhnpUowOjmFSqahFOvMKCAJT+oTaoLbWgLmmrXGcMsoCrzscQ/vQkJXHJ/ GOZrC2xfI09Pbc0dlbbyN0ETBTm99hUr8hKXs5tfj8HtLZBhHsWxnCguztTvppjo /Ldhd99jOIxArAVHtcs1heS6IhlNBGo= -----END CERTIFICATE-----Generated at Mon Apr 7 11:47:52 2025 by rpki-client