$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d68e4f8f-a57d-3259-a6de-a47dab3fe003.roa File: d68e4f8f-a57d-3259-a6de-a47dab3fe003.roa (raw, json) Hash identifier: RzQCGSFzrSci7RN9ino7ZiWz1BKj/is9i00j+PUjlcc= Subject key identifier: DE:F3:E2:39:9E:91:48:33:6D:99:6B:17:25:A2:A9:F6:55:72:4E:22 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21119A16827E462DD2FE480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d68e4f8f-a57d-3259-a6de-a47dab3fe003.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 64.61.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:19:a1:68:27:e4:62:dd:2f:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=0aeed6eb-d30d-4854-bdcc-5beb0e374e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e1:f7:f3:02:5a:88:ee:1b:d3:83:31:01:a6: ff:70:08:e1:25:1d:42:6d:41:87:28:65:81:88:11: a9:9f:79:19:f9:6c:55:e5:ed:83:ba:de:ef:7f:75: 94:8a:e0:ff:ba:c2:13:3a:a0:a2:d8:71:63:01:50: 80:88:eb:bb:90:7c:aa:72:c4:af:cd:b6:18:9a:c9: 0f:0b:fa:a5:98:5e:35:d4:f5:b7:46:6f:01:a1:50: ff:21:90:a6:40:fb:a1:f3:ad:b8:3b:4c:16:7b:d9: 10:e0:dd:84:e0:7d:ef:ca:f0:d3:9c:6b:27:62:f4: ce:c9:2c:ed:e3:92:79:27:67:b6:eb:cb:ab:5b:b7: 0b:95:f3:81:81:85:01:10:28:a6:87:24:5c:5c:31: 71:d7:a9:f1:24:21:d2:c1:43:7c:b0:6e:81:08:83: d3:88:7a:78:c5:dc:74:a6:be:48:33:d5:ab:74:d5: 18:cd:1b:71:a5:a8:c4:64:da:86:4d:ba:47:1a:ef: 27:05:f6:04:72:57:5e:f8:8e:15:81:1c:9b:82:a0: 06:8e:0e:ba:57:b4:8c:b5:cc:6e:ca:01:36:74:7b: 3a:90:58:a2:96:e7:09:7b:f9:b3:b7:f6:5c:ae:c6: 26:53:ef:ed:de:c0:4e:e7:ab:96:37:55:04:d2:6b: 27:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F3:E2:39:9E:91:48:33:6D:99:6B:17:25:A2:A9:F6:55:72:4E:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d68e4f8f-a57d-3259-a6de-a47dab3fe003.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.61.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:3b:c5:a7:c0:4a:e4:e7:3e:31:3c:1c:05:bc:52:cb:98:ff: ce:59:3f:46:fd:5b:78:32:e5:45:17:4f:e0:1b:89:13:a8:99: 1d:ce:ff:de:f5:cb:20:e2:32:a8:ba:82:79:c6:99:b8:1f:d5: 9f:30:35:df:1f:1d:25:4f:c4:04:c3:d3:12:b8:82:b4:28:a3: 34:90:40:20:61:ce:89:ae:16:93:d7:e0:27:6d:3e:5a:d0:1d: 7c:af:5b:4a:b9:05:8e:9d:05:4d:83:60:f8:4b:26:da:a4:86: ef:3b:a4:17:93:a3:c2:1b:9e:42:09:be:21:f1:83:c4:e4:a6: f4:94:8e:bc:a0:69:c7:76:6b:e7:40:59:54:27:11:56:7d:33: 70:50:9f:2e:6e:58:84:c2:a1:4a:0a:4e:f8:cf:71:b3:4f:ba: 09:f0:d8:34:f6:ea:5c:ae:e4:e8:10:56:71:1f:d2:53:12:b8: 5a:b5:d0:ff:6b:1f:3b:db:8c:96:c6:84:76:05:3c:e2:e6:a5: 27:0d:2e:e9:0c:65:e2:1d:2d:f4:0e:f7:b7:a5:16:4b:5c:2d: 9b:bf:25:aa:a9:32:e4:5e:39:50:99:f0:66:37:70:46:11:6a: dd:8b:02:89:93:d5:48:b0:51:1a:d7:08:83:d1:84:48:f5:40: 9d:35:93:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSERmhaCfkYt0v5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MGFlZWQ2ZWItZDMwZC00ODU0LWJkY2MtNWJlYjBlMzc0ZTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+H38wJaiO4b04MxAab/cAjhJR1CbUGHKGWB iBGpn3kZ+WxV5e2Dut7vf3WUiuD/usITOqCi2HFjAVCAiOu7kHyqcsSvzbYYmskP C/qlmF411PW3Rm8BoVD/IZCmQPuh8624O0wWe9kQ4N2E4H3vyvDTnGsnYvTOySzt 45J5J2e268urW7cLlfOBgYUBECimhyRcXDFx16nxJCHSwUN8sG6BCIPTiHp4xdx0 pr5IM9WrdNUYzRtxpajEZNqGTbpHGu8nBfYEclde+I4VgRybgqAGjg66V7SMtcxu ygE2dHs6kFiilucJe/mzt/ZcrsYmU+/t3sBO56uWN1UE0msnIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7z4jmekUgzbZlrFyWiqfZVck4iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDY4ZTRmOGYtYTU3ZC0z MjU5LWE2ZGUtYTQ3ZGFiM2ZlMDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQD2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG87xafASuTnPjE8HAW8UsuY/85ZP0b9W3gy5UUXT+AbiROomR3O/971 yyDiMqi6gnnGmbgf1Z8wNd8fHSVPxATD0xK4grQoozSQQCBhzomuFpPX4CdtPlrQ HXyvW0q5BY6dBU2DYPhLJtqkhu87pBeTo8IbnkIJviHxg8TkpvSUjrygacd2a+dA WVQnEVZ9M3BQny5uWITCoUoKTvjPcbNPugnw2DT26lyu5OgQVnEf0lMSuFq10P9r HzvbjJbGhHYFPOLmpScNLukMZeIdLfQO97elFktcLZu/JaqpMuReOVCZ8GY3cEYR at2LAomT1UiwURrXCIPRhEj1QJ01k6g= -----END CERTIFICATE-----Generated at Sat Apr 5 22:28:03 2025 by rpki-client