$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/e45b06bb-d0e8-39ad-b347-ad4de7d5eafe.roa File: e45b06bb-d0e8-39ad-b347-ad4de7d5eafe.roa (raw, json) Hash identifier: baJhidg+MeQTwCLOFvaJwOzoUHG3HfF2n0n+93o2fZ8= Subject key identifier: 09:9B:D6:79:E9:86:18:91:20:09:20:A0:B8:71:D2:E2:5E:42:7A:14 Certificate issuer: /CN=17c52074-58cb-4941-b609-0f5d1e4bca32 Certificate serial: 010D0C9F43285849E2253EC70F5161568FADE200 Authority key identifier: 81:63:71:9C:94:98:34:07:0F:1F:64:E2:0E:C9:FF:79:D1:AB:DF:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/e45b06bb-d0e8-39ad-b347-ad4de7d5eafe.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 399772 IP address blocks: 64.49.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/17c52074-58cb-4941-b609-0f5d1e4bca32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/17c52074-58cb-4941-b609-0f5d1e4bca32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:3e:c7:0f:51:61:56:8f:ad:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17c52074-58cb-4941-b609-0f5d1e4bca32 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=98cd393a-888a-4362-8c75-c8765a44fefa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d8:73:32:52:59:17:12:11:1a:24:ce:fa:f8: 6d:13:6d:95:23:3d:be:64:58:09:22:9b:88:7a:91: 00:71:85:8e:03:a5:28:70:13:e1:43:3a:f8:ca:68: f6:1d:e9:8a:ba:86:fb:ed:90:61:b4:0b:0a:f7:83: 71:53:28:3f:d8:bb:6c:dd:f6:5f:98:14:b3:36:b3: 40:db:80:7e:86:8d:64:8b:4e:21:12:9d:7a:53:6e: 31:dd:a1:bb:ab:9f:52:71:d3:b7:59:f3:58:03:de: 60:0c:fc:d0:f8:25:39:e8:9e:8f:60:19:c3:f7:d6: 82:0a:cc:30:61:e7:a6:b0:cb:cd:73:d3:be:1c:a8: eb:d6:ef:30:c4:a8:33:c5:9a:0d:c0:dd:70:b4:24: 2d:0f:be:c9:d4:9e:84:40:b3:c8:89:27:13:63:07: b8:f3:26:79:01:a5:64:73:a6:b2:d6:7f:b8:49:e8: 5a:a3:31:7a:62:0f:c3:94:33:05:94:17:57:59:c9: f0:e7:25:33:0a:84:2d:93:50:4c:47:98:2d:dc:8b: b7:c3:c7:39:d3:f5:63:49:ed:5d:e9:7b:bc:3b:80: 0f:be:1e:81:22:2d:95:63:f6:a0:15:63:8e:df:a5: 0e:fe:11:23:af:06:2c:40:5b:08:a0:d8:35:99:4b: e4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:9B:D6:79:E9:86:18:91:20:09:20:A0:B8:71:D2:E2:5E:42:7A:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/e45b06bb-d0e8-39ad-b347-ad4de7d5eafe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/17c52074-58cb-4941-b609-0f5d1e4bca32.crl X509v3 Authority Key Identifier: keyid:81:63:71:9C:94:98:34:07:0F:1F:64:E2:0E:C9:FF:79:D1:AB:DF:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32.cer sbgp-ipAddrBlock: critical IPv4: 64.49.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:7e:dc:14:ce:07:a5:72:7d:f7:06:fa:ad:f4:e8:a7:8c:38: 0f:b5:2f:70:18:f7:93:42:f9:24:a9:78:f4:27:2d:66:b1:54: 0b:a4:3c:ba:d4:95:0e:db:a7:36:94:aa:33:8d:d0:f9:1c:68: ab:cf:01:c9:f4:5c:84:57:48:2c:96:7e:9c:1f:99:42:0b:c2: d4:ea:0e:7c:b2:be:aa:86:d7:04:5d:aa:3c:db:10:1e:6c:b3: 54:b9:b0:03:57:4a:17:af:c2:bd:5d:f0:17:4b:ca:26:c4:ef: ab:ff:27:49:1a:15:7d:ca:ac:05:d4:e3:f7:4a:68:cd:38:8b: 68:0d:4f:20:35:62:87:db:d9:fb:fc:c4:8a:1f:f1:5e:fd:15: 7a:c5:7a:c0:93:27:5b:6c:e8:3b:ca:9c:ab:40:f5:44:c6:1b: c5:8e:dc:be:42:cd:fd:90:fe:8a:18:27:2b:ed:bf:c0:14:9c: 4d:c1:a3:b4:f9:33:d2:60:ed:b3:c0:e9:4b:c8:d8:67:6e:5e: 64:6f:bf:f9:31:87:29:b7:10:a2:38:2e:06:7f:c7:98:55:b9: e7:eb:5c:f7:01:1e:df:f3:d2:50:7e:e4:e0:24:19:ec:98:44: fa:da:ee:41:80:9f:1e:c8:26:eb:fb:3c:9d:61:d5:58:8a:4e: 9d:64:2a:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJT7HD1FhVo+t4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdjNTIwNzQtNThjYi00OTQxLWI2MDktMGY1ZDFlNGJj YTMyMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk OThjZDM5M2EtODg4YS00MzYyLThjNzUtYzg3NjVhNDRmZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9hzMlJZFxIRGiTO+vhtE22VIz2+ZFgJIpuI epEAcYWOA6UocBPhQzr4ymj2HemKuob77ZBhtAsK94NxUyg/2Lts3fZfmBSzNrNA 24B+ho1ki04hEp16U24x3aG7q59ScdO3WfNYA95gDPzQ+CU56J6PYBnD99aCCsww YeemsMvNc9O+HKjr1u8wxKgzxZoNwN1wtCQtD77J1J6EQLPIiScTYwe48yZ5AaVk c6ay1n+4SehaozF6Yg/DlDMFlBdXWcnw5yUzCoQtk1BMR5gt3Iu3w8c50/VjSe1d 6Xu8O4APvh6BIi2VY/agFWOO36UO/hEjrwYsQFsIoNg1mUvkpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmb1nnphhiRIAkgoLhx0uJeQnoUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xN2M1 MjA3NC01OGNiLTQ5NDEtYjYwOS0wZjVkMWU0YmNhMzIvZTQ1YjA2YmItZDBlOC0z OWFkLWIzNDctYWQ0ZGU3ZDVlYWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTdjNTIwNzQtNThjYi00OTQxLWI2 MDktMGY1ZDFlNGJjYTMyLzE3YzUyMDc0LTU4Y2ItNDk0MS1iNjA5LTBmNWQxZTRi Y2EzMi5jcmwwHwYDVR0jBBgwFoAUgWNxnJSYNAcPH2TiDsn/edGr36QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xN2M1MjA3NC01OGNiLTQ5NDEtYjYwOS0wZjVk MWU0YmNhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDEdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJR+3BTOB6VyffcG+q306KeMOA+1L3AY95NC+SSpePQnLWaxVAukPLrU lQ7bpzaUqjON0PkcaKvPAcn0XIRXSCyWfpwfmUILwtTqDnyyvqqG1wRdqjzbEB5s s1S5sANXShevwr1d8BdLyibE76v/J0kaFX3KrAXU4/dKaM04i2gNTyA1Yofb2fv8 xIof8V79FXrFesCTJ1ts6DvKnKtA9UTGG8WO3L5Czf2Q/ooYJyvtv8AUnE3Bo7T5 M9Jg7bPA6UvI2GduXmRvv/kxhym3EKI4LgZ/x5hVuefrXPcBHt/z0lB+5OAkGeyY RPra7kGAnx7IJuv7PJ1h1ViKTp1kKog= -----END CERTIFICATE-----Generated at Tue Jul 1 00:46:45 2025 by rpki-client