$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/e45b06bb-d0e8-39ad-b347-ad4de7d5eafe.roa File: e45b06bb-d0e8-39ad-b347-ad4de7d5eafe.roa (raw, json) Hash identifier: DxNuir8JT3rW7cddTXKWz3OF1HrlMqdt2mGvRVgy5mk= Subject key identifier: 31:46:F4:07:5F:94:D8:EB:E2:E9:83:E4:66:BC:99:C2:F7:18:4A:0D Certificate issuer: /CN=17c52074-58cb-4941-b609-0f5d1e4bca32 Certificate serial: 010D0C9F4328584902EC30E26EDAB9B0EDC93C40 Authority key identifier: 81:63:71:9C:94:98:34:07:0F:1F:64:E2:0E:C9:FF:79:D1:AB:DF:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/e45b06bb-d0e8-39ad-b347-ad4de7d5eafe.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 399772 IP address blocks: 64.49.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/17c52074-58cb-4941-b609-0f5d1e4bca32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/17c52074-58cb-4941-b609-0f5d1e4bca32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:30:e2:6e:da:b9:b0:ed:c9:3c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17c52074-58cb-4941-b609-0f5d1e4bca32 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=1de78ea0-45e9-47bf-bfae-4b87b662104e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fc:21:a1:51:56:e8:0c:3b:4b:07:a1:f7:1d: 39:6d:48:00:b8:ed:a8:b1:14:c8:01:f0:83:28:b8: 69:34:b0:dc:7a:2b:a3:47:2b:56:eb:76:49:fa:7b: 16:43:e3:27:d6:95:69:93:97:22:9a:d8:0d:d6:b2: 58:8b:1e:94:bc:2f:ce:4e:7a:0c:fa:61:43:fb:58: 98:db:08:16:7c:cf:2a:d0:ac:f3:d0:9a:10:d3:8f: ab:e9:98:b2:41:27:03:6d:b1:60:c4:d5:4f:28:54: 58:91:1f:34:0d:b2:70:48:ee:90:ee:d0:d9:ad:9d: 4b:00:37:09:b4:64:65:a1:eb:9f:ae:3e:62:3c:48: c8:9c:dc:95:80:51:45:86:a3:07:00:f2:f4:c8:d9: a9:a3:6a:be:e7:9c:2c:52:84:7d:c4:d1:c2:1d:33: 8a:3e:24:02:e0:ff:7e:19:bf:71:1d:89:8a:8a:99: 9b:46:00:f5:cf:b4:6d:43:f7:b0:f6:ab:b9:48:1f: 0c:45:af:04:f4:9f:de:1e:3e:34:27:a1:e4:c4:5d: 09:a2:43:44:dd:ae:d7:d9:dd:6b:72:09:32:78:50: f3:7f:95:52:30:6c:65:6d:b5:8b:7e:ec:8e:8f:7e: 02:11:49:2e:4c:41:fa:11:fa:3d:15:b4:d5:49:3f: 7b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:46:F4:07:5F:94:D8:EB:E2:E9:83:E4:66:BC:99:C2:F7:18:4A:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/e45b06bb-d0e8-39ad-b347-ad4de7d5eafe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/17c52074-58cb-4941-b609-0f5d1e4bca32.crl X509v3 Authority Key Identifier: keyid:81:63:71:9C:94:98:34:07:0F:1F:64:E2:0E:C9:FF:79:D1:AB:DF:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32.cer sbgp-ipAddrBlock: critical IPv4: 64.49.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:5a:48:cc:ec:73:d5:29:88:14:b2:ac:ee:75:cb:34:36:09: e8:97:f8:30:7a:4c:dc:5c:a3:b9:57:1a:c2:73:49:44:ce:88: ce:1c:41:57:9f:be:18:56:0b:59:62:65:f3:ab:67:33:a2:a6: 93:ee:64:99:10:02:75:e3:a7:2f:0a:98:f1:a5:1f:1e:79:cb: bb:b8:03:f5:a4:c0:c2:a1:3b:f1:22:f1:7b:ef:c0:5e:75:c1: 51:8e:6b:2b:f1:6d:ed:b6:94:0e:4e:99:b2:88:c3:e4:57:cd: 46:c6:15:bc:64:27:93:df:b6:19:56:db:24:b4:21:2f:7e:35: bf:5e:07:ed:30:dc:a3:c3:9a:38:4e:1c:01:6b:a7:ea:ca:36: aa:c9:ce:75:00:70:a7:32:4b:3c:7c:6a:7c:24:05:68:88:db: d0:10:0c:ba:cc:be:4c:4b:c1:74:e0:c4:2a:55:7d:c2:28:93: f1:3e:36:fa:84:00:a0:b3:55:dd:55:20:9c:bb:bb:66:d1:f3: 16:45:c5:4c:d7:61:75:43:f1:1f:4c:c5:69:e6:ac:cb:dd:ee: c0:f2:25:0f:39:95:ac:79:94:93:9e:b8:16:4c:f0:a2:21:3e: 5e:eb:28:e6:97:39:95:34:72:32:a4:cf:d4:e9:01:09:52:90: 54:ff:13:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7DDibtq5sO3JPEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdjNTIwNzQtNThjYi00OTQxLWI2MDktMGY1ZDFlNGJj YTMyMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk MWRlNzhlYTAtNDVlOS00N2JmLWJmYWUtNGI4N2I2NjIxMDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvwhoVFW6Aw7Sweh9x05bUgAuO2osRTIAfCD KLhpNLDceiujRytW63ZJ+nsWQ+Mn1pVpk5cimtgN1rJYix6UvC/OTnoM+mFD+1iY 2wgWfM8q0Kzz0JoQ04+r6ZiyQScDbbFgxNVPKFRYkR80DbJwSO6Q7tDZrZ1LADcJ tGRloeufrj5iPEjInNyVgFFFhqMHAPL0yNmpo2q+55wsUoR9xNHCHTOKPiQC4P9+ Gb9xHYmKipmbRgD1z7RtQ/ew9qu5SB8MRa8E9J/eHj40J6HkxF0JokNE3a7X2d1r cgkyeFDzf5VSMGxlbbWLfuyOj34CEUkuTEH6Efo9FbTVST978QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFG9AdflNjr4umD5Ga8mcL3GEoNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xN2M1 MjA3NC01OGNiLTQ5NDEtYjYwOS0wZjVkMWU0YmNhMzIvZTQ1YjA2YmItZDBlOC0z OWFkLWIzNDctYWQ0ZGU3ZDVlYWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTdjNTIwNzQtNThjYi00OTQxLWI2 MDktMGY1ZDFlNGJjYTMyLzE3YzUyMDc0LTU4Y2ItNDk0MS1iNjA5LTBmNWQxZTRi Y2EzMi5jcmwwHwYDVR0jBBgwFoAUgWNxnJSYNAcPH2TiDsn/edGr36QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xN2M1MjA3NC01OGNiLTQ5NDEtYjYwOS0wZjVk MWU0YmNhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDEdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZaSMzsc9UpiBSyrO51yzQ2CeiX+DB6TNxco7lXGsJzSUTOiM4cQVef vhhWC1liZfOrZzOippPuZJkQAnXjpy8KmPGlHx55y7u4A/WkwMKhO/Ei8XvvwF51 wVGOayvxbe22lA5OmbKIw+RXzUbGFbxkJ5PfthlW2yS0IS9+Nb9eB+0w3KPDmjhO HAFrp+rKNqrJznUAcKcySzx8anwkBWiI29AQDLrMvkxLwXTgxCpVfcIok/E+NvqE AKCzVd1VIJy7u2bR8xZFxUzXYXVD8R9MxWnmrMvd7sDyJQ85lax5lJOeuBZM8KIh Pl7rKOaXOZU0cjKkz9TpAQlSkFT/E30= -----END CERTIFICATE-----Generated at Sat Apr 12 00:12:21 2025 by rpki-client