$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/2a984cf4-8ed3-3545-8c6e-d930e9904b68.roa File: 2a984cf4-8ed3-3545-8c6e-d930e9904b68.roa (raw, json) Hash identifier: 3ZTdh2WXrKfmmZl8czsnQMCK3NEs8LwE4EynaiPphQA= Subject key identifier: A0:49:11:4A:3D:2A:DE:2C:F0:48:53:E2:8B:2E:24:F3:C7:0A:9A:37 Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3 Certificate serial: 010D0C9F4328584909E69F41A3038B6DF0D5D200 Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/2a984cf4-8ed3-3545-8c6e-d930e9904b68.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 24753 IP address blocks: 64.49.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:9f:41:a3:03:8b:6d:f0:d5:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3 Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=2bd81964-53fe-4b14-94b1-c6240cfab881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e2:89:44:77:86:35:c9:94:98:67:33:d2:b7: 27:f6:96:a7:20:52:d8:9b:cb:d9:a3:b0:58:ba:76: af:e7:18:74:25:97:89:08:d2:05:08:5f:f9:09:97: 65:ea:a8:e9:1f:06:85:6b:f5:f4:f5:9b:7c:3a:27: 57:f0:eb:08:de:6b:17:80:6f:fb:d2:6c:c8:20:b1: 66:1d:fe:f7:a3:7b:26:4d:81:8d:c4:8f:be:fa:af: eb:12:f8:f7:9b:63:6e:96:be:24:51:1a:1b:9c:35: 4e:39:8c:8a:93:fe:82:4b:13:ed:a7:01:8b:98:cc: 4e:2d:74:26:af:2a:51:fa:fb:78:2a:61:d2:86:28: 59:83:cb:23:69:ab:1a:5e:8b:19:28:d8:e7:61:25: 4d:2f:77:24:ca:d8:2f:8e:53:dc:d3:d3:f7:aa:f3: 34:54:8f:7e:47:13:b1:ba:4b:c2:43:ea:d1:7c:84: f4:7c:dd:74:6f:df:c3:ec:6a:ad:82:38:ce:89:8d: a6:22:b0:d5:58:6c:a5:59:e0:73:9c:62:90:12:aa: de:0b:3b:a9:25:40:4d:c8:67:5f:f4:a8:ee:5e:38: 1b:fe:49:f3:c7:bd:e2:50:52:c5:88:86:62:54:68: 43:09:62:c6:81:f0:80:41:40:45:c2:94:42:0c:6c: 5b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:49:11:4A:3D:2A:DE:2C:F0:48:53:E2:8B:2E:24:F3:C7:0A:9A:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/2a984cf4-8ed3-3545-8c6e-d930e9904b68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl X509v3 Authority Key Identifier: keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer sbgp-ipAddrBlock: critical IPv4: 64.49.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:aa:6f:c3:b7:5b:c9:c8:30:e2:b7:65:13:d6:4c:c7:48:8a: 65:50:ef:c7:1d:05:c5:52:69:de:6d:0a:30:d1:99:92:15:99: 2a:d1:97:a8:1d:7b:4d:4c:47:01:d4:53:98:9f:ae:d4:ad:8c: de:86:5c:cd:e0:94:35:01:80:cf:92:b4:62:aa:77:c1:73:79: 8d:08:f3:7f:7c:05:14:52:5f:83:6c:fc:10:11:42:67:e3:f8: c6:40:32:4d:26:3d:02:70:d6:6e:17:c5:1c:eb:81:b9:14:7f: 9b:32:4f:c4:eb:4a:33:1a:18:28:15:a6:c4:5d:a0:a3:bf:fd: f4:89:d6:56:7c:1a:72:12:78:99:94:0f:e5:5c:4a:93:f9:36: 65:da:29:9c:35:5b:12:d4:03:20:98:c3:3a:a3:a9:6b:09:02: 08:53:26:6d:f3:3c:df:3e:19:bd:64:83:8f:d3:bc:93:6a:84: ca:a4:d6:00:9a:cf:62:11:3c:53:ab:9a:3d:8d:06:7c:1a:ed: 16:c8:c1:43:a3:63:51:31:dd:f9:af:35:2d:75:48:6e:12:f9: 02:ea:cd:8d:75:fc:8c:ea:49:21:e8:57:ed:d9:be:e2:79:0d: 71:c6:f6:a7:ea:be:75:39:d8:54:c4:59:34:1d:15:3b:8e:c9: 7d:44:3b:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5p9BowOLbfDV0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx OGUzMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk MmJkODE5NjQtNTNmZS00YjE0LTk0YjEtYzYyNDBjZmFiODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOKJRHeGNcmUmGcz0rcn9panIFLYm8vZo7BY unav5xh0JZeJCNIFCF/5CZdl6qjpHwaFa/X09Zt8OidX8OsI3msXgG/70mzIILFm Hf73o3smTYGNxI+++q/rEvj3m2Nulr4kURobnDVOOYyKk/6CSxPtpwGLmMxOLXQm rypR+vt4KmHShihZg8sjaasaXosZKNjnYSVNL3ckytgvjlPc09P3qvM0VI9+RxOx ukvCQ+rRfIT0fN10b9/D7GqtgjjOiY2mIrDVWGylWeBznGKQEqreCzupJUBNyGdf 9KjuXjgb/knzx73iUFLFiIZiVGhDCWLGgfCAQUBFwpRCDGxbZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBJEUo9Kt4s8EhT4osuJPPHCpo3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvMmE5ODRjZjQtOGVkMy0z NTQ1LThjNmUtZDkzMGU5OTA0YjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4 MzVmYzE4ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQDGcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6qb8O3W8nIMOK3ZRPWTMdIimVQ78cdBcVSad5tCjDRmZIVmSrRl6gd e01MRwHUU5ifrtStjN6GXM3glDUBgM+StGKqd8FzeY0I8398BRRSX4Ns/BARQmfj +MZAMk0mPQJw1m4XxRzrgbkUf5syT8TrSjMaGCgVpsRdoKO//fSJ1lZ8GnISeJmU D+VcSpP5NmXaKZw1WxLUAyCYwzqjqWsJAghTJm3zPN8+Gb1kg4/TvJNqhMqk1gCa z2IRPFOrmj2NBnwa7RbIwUOjY1Ex3fmvNS11SG4S+QLqzY11/IzqSSHoV+3ZvuJ5 DXHG9qfqvnU52FTEWTQdFTuOyX1EOw0= -----END CERTIFICATE-----Generated at Sat Apr 12 15:01:02 2025 by rpki-client