$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/452a8ba2-ade7-3b56-98f5-02f50e546db8.roa File: 452a8ba2-ade7-3b56-98f5-02f50e546db8.roa (raw, json) Hash identifier: Ni+ifawfADjIkJ366vFTFqkuGMvj/PnMMPBp7oRKgGM= Subject key identifier: 11:EE:DD:39:F4:C5:F1:10:78:4A:4D:6A:E3:DC:49:01:CC:AD:CE:46 Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3 Certificate serial: 010D0C9F432858490E16B62F914F148EF77ECD00 Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/452a8ba2-ade7-3b56-98f5-02f50e546db8.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 24753 IP address blocks: 64.49.154.0/23 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:b6:2f:91:4f:14:8e:f7:7e:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=95e0599e-e1dc-4801-a7dc-14fc93ee4605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0e:e3:2a:ad:4e:2c:d5:63:52:1e:58:e2:f6: a4:fd:d9:bd:11:44:ab:a2:61:8f:f7:0a:27:4e:00: 7a:8b:43:6c:69:2e:a0:93:29:fd:7d:a3:a8:ed:f2: 56:ed:ca:11:65:52:a1:5f:0e:33:4e:d4:7c:e8:6b: 68:a9:8f:1b:f8:af:0b:52:f9:08:dd:32:af:3e:54: 3e:6d:ba:e4:a2:fc:e8:9c:e7:e2:2d:ea:49:0e:6f: 76:c5:90:46:6a:ff:85:e2:7e:4f:ae:61:55:62:4a: a6:4a:52:10:f8:bb:7b:4b:46:a6:85:54:2d:39:d4: 48:02:07:49:45:33:7e:17:e1:47:b8:0f:2d:81:12: 4f:97:f8:ee:7b:93:58:f6:7d:37:39:0a:2d:86:3f: f0:85:fb:60:77:bd:c4:9d:6c:a7:44:4c:07:1b:45: 1f:99:b5:ac:0b:7c:c3:bb:25:19:91:e9:3c:78:f8: 75:01:49:25:e4:23:46:ce:84:46:83:b3:1d:3b:4b: b4:99:21:2a:2b:39:be:dc:e1:85:e4:3d:07:b1:d6: 22:ca:00:0c:4c:d0:02:3e:23:f9:2c:67:69:2f:75: 50:a6:40:ba:35:48:21:81:72:6e:a7:69:43:98:c0: d9:ea:bf:51:b6:bb:e9:bb:3f:a1:12:bc:e4:00:4d: 2f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:EE:DD:39:F4:C5:F1:10:78:4A:4D:6A:E3:DC:49:01:CC:AD:CE:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/452a8ba2-ade7-3b56-98f5-02f50e546db8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl X509v3 Authority Key Identifier: keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer sbgp-ipAddrBlock: critical IPv4: 64.49.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f3:55:29:3a:e8:80:d7:22:39:46:8e:66:4f:16:ec:cc:34: b3:7d:fd:8d:89:a0:c4:7c:0a:4b:fc:a4:ba:56:7e:d7:9a:eb: e5:43:30:3e:53:f6:b5:e9:9d:85:84:e6:36:c8:e0:38:bf:78: a3:ad:cb:13:86:e8:04:37:83:55:63:43:04:f9:9b:71:95:8b: 78:e7:0d:86:68:54:a8:88:58:5c:1d:24:bc:74:26:46:d6:0a: 5c:ee:b4:50:f4:cb:89:85:56:c7:30:d9:ac:9f:9f:76:5e:45: 9d:0f:f8:82:e4:f0:41:b3:27:16:1e:ab:38:ae:1c:88:5e:d5: 4a:c3:51:3d:15:16:99:ee:25:ff:cf:cf:63:94:7d:25:b3:55: a2:ae:e7:45:33:ce:29:3f:4e:c4:7d:62:25:39:bd:4f:ee:a4: 0b:9c:4b:28:4d:f8:3c:89:1f:48:59:f7:d1:02:f3:f9:58:68: 7a:1b:34:26:88:55:a2:4c:3b:2f:74:d7:c9:eb:c2:b7:f5:e4: e3:db:d5:2c:cc:98:7d:86:e9:52:f0:97:64:3a:78:8c:b5:57: 47:23:ae:d9:1b:ce:6e:b8:9d:f1:3e:2b:53:0e:f1:55:8c:c3: c4:8f:3d:72:f4:7d:84:f4:72:8f:65:ac:6c:5d:7b:ab:db:a6: 27:7e:6e:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFrYvkU8Ujvd+zQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx OGUzMB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk OTVlMDU5OWUtZTFkYy00ODAxLWE3ZGMtMTRmYzkzZWU0NjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkA7jKq1OLNVjUh5Y4vak/dm9EUSromGP9won TgB6i0NsaS6gkyn9faOo7fJW7coRZVKhXw4zTtR86GtoqY8b+K8LUvkI3TKvPlQ+ bbrkovzonOfiLepJDm92xZBGav+F4n5PrmFVYkqmSlIQ+Lt7S0amhVQtOdRIAgdJ RTN+F+FHuA8tgRJPl/jue5NY9n03OQothj/whftgd73EnWynREwHG0UfmbWsC3zD uyUZkek8ePh1AUkl5CNGzoRGg7MdO0u0mSEqKzm+3OGF5D0HsdYiygAMTNACPiP5 LGdpL3VQpkC6NUghgXJup2lDmMDZ6r9Rtrvpuz+hErzkAE0vBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHu3Tn0xfEQeEpNauPcSQHMrc5GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvNDUyYThiYTItYWRlNy0z YjU2LTk4ZjUtMDJmNTBlNTQ2ZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4 MzVmYzE4ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQDGaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLzVSk66IDXIjlGjmZPFuzMNLN9/Y2JoMR8Ckv8pLpWftea6+VDMD5T 9rXpnYWE5jbI4Di/eKOtyxOG6AQ3g1VjQwT5m3GVi3jnDYZoVKiIWFwdJLx0JkbW ClzutFD0y4mFVscw2ayfn3ZeRZ0P+ILk8EGzJxYeqziuHIhe1UrDUT0VFpnuJf/P z2OUfSWzVaKu50Uzzik/TsR9YiU5vU/upAucSyhN+DyJH0hZ99EC8/lYaHobNCaI VaJMOy9018nrwrf15OPb1SzMmH2G6VLwl2Q6eIy1V0cjrtkbzm64nfE+K1MO8VWM w8SPPXL0fYT0co9lrGxde6vbpid+bhs= -----END CERTIFICATE-----Generated at Fri Mar 14 10:33:33 2025 by rpki-client