$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/452a8ba2-ade7-3b56-98f5-02f50e546db8.roa File: 452a8ba2-ade7-3b56-98f5-02f50e546db8.roa (raw, json) Hash identifier: fg6fnoJadzYXr6WcPc5YBCFCetMSFtx+LCyuQnLjEw8= Subject key identifier: 53:0E:76:22:5D:25:B7:CF:F6:CF:95:8E:0B:B1:90:71:84:A3:BC:80 Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3 Certificate serial: 010D0C9F432858482EBFF9B18B549D0D627E46E0 Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/452a8ba2-ade7-3b56-98f5-02f50e546db8.roa Signing time: Thu 12 Dec 2024 14:00:51 +0000 ROA not before: Thu 12 Dec 2024 14:00:51 +0000 ROA not after: Wed 12 Mar 2025 13:00:51 +0000 asID: 24753 IP address blocks: 64.49.154.0/23 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2e:bf:f9:b1:8b:54:9d:0d:62:7e:46:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3 Validity Not Before: Dec 12 14:00:51 2024 GMT Not After : Mar 12 13:00:51 2025 GMT Subject: CN=ed2b3c33-4e65-4193-a22b-3e553de0cfd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4e:50:a5:f7:cf:e6:39:c6:d1:fd:c9:6b:89: fd:15:4d:bd:e8:66:19:38:d0:6b:45:af:d1:54:65: bc:46:30:9c:c4:af:54:8a:e8:0d:71:87:c7:8f:6b: d8:50:d9:20:67:59:7d:a6:ed:a7:ae:a2:6e:a6:65: 20:e4:ae:24:e6:18:27:d9:e7:46:cb:81:5f:a1:6e: 92:3f:7c:25:ed:32:a0:9c:42:b5:10:f3:21:5c:ae: 6c:e1:96:0b:71:9c:02:ae:ae:36:f2:cd:6e:45:12: 2c:63:6e:ef:38:c7:b3:cb:eb:9b:b8:a8:ef:12:15: f8:6d:11:d1:48:f5:2a:19:da:97:8b:1f:97:b1:d3: eb:03:b8:8d:7b:84:2b:af:95:90:95:2b:49:a0:98: 99:da:2a:74:6b:41:2e:56:61:67:a2:ab:33:70:7b: 72:b7:bb:44:80:cf:3c:ff:6f:5a:92:30:84:34:a7: bb:da:ab:73:4c:fb:01:cd:49:5a:e6:af:ad:d2:13: 4a:56:62:6e:16:e7:e8:02:4b:c0:ca:fb:7e:ff:e3: 11:7d:76:76:6e:50:5e:01:86:f0:21:61:05:5b:f6: 9e:08:60:fc:e3:c4:34:ce:c5:a1:ab:44:92:0d:06: 42:6b:80:8e:c0:53:3a:b9:0e:2b:27:18:24:dd:bb: 06:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:0E:76:22:5D:25:B7:CF:F6:CF:95:8E:0B:B1:90:71:84:A3:BC:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/452a8ba2-ade7-3b56-98f5-02f50e546db8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl X509v3 Authority Key Identifier: keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer sbgp-ipAddrBlock: critical IPv4: 64.49.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:d3:a5:7f:2f:6c:30:ff:88:db:23:d3:0a:51:f7:64:f9:39: b6:02:7e:d3:93:33:51:b5:1e:b2:86:d9:7c:3e:6f:49:c6:b4: bf:cd:91:bb:74:25:1e:21:64:69:dd:8a:94:ee:50:ec:08:05: fa:fe:bd:69:f6:56:53:a3:18:de:56:c0:71:03:70:26:c6:cc: d4:e1:44:26:40:cd:ce:f3:bf:a8:b1:7d:1a:18:81:4a:b6:e3: a9:3b:c0:59:25:c6:10:08:c4:32:ef:00:de:d3:5f:e0:eb:ea: 48:dc:a0:02:e5:6d:c5:4f:4f:b0:7d:9b:0b:7b:63:5d:c3:04: 25:8c:a4:42:eb:a8:d2:5a:03:56:b7:19:64:3f:d4:23:f4:76: 50:1a:8d:bc:29:b6:0a:99:15:6d:48:64:3c:88:41:c0:63:0a: 1c:2f:82:e6:cc:5e:61:65:e2:02:68:af:95:8b:cc:41:72:5b: 6a:92:4c:1e:5c:cb:59:71:7d:d2:b1:12:d5:b4:48:5b:64:3e: 08:e0:d0:13:10:e6:80:c9:d9:fd:9a:53:a2:b8:bf:44:ef:fd: 65:1b:e7:f6:12:51:93:8a:8d:ce:89:ea:d8:f0:bc:99:64:e8: 83:cd:77:34:ab:54:fb:16:91:33:9e:bf:1a:83:ca:ac:1b:fa: 7c:81:23:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEguv/mxi1SdDWJ+RuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx OGUzMB4XDTI0MTIxMjE0MDA1MVoXDTI1MDMxMjEzMDA1MVowLzEtMCsGA1UEAxMk ZWQyYjNjMzMtNGU2NS00MTkzLWEyMmItM2U1NTNkZTBjZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo05QpffP5jnG0f3Ja4n9FU296GYZONBrRa/R VGW8RjCcxK9UiugNcYfHj2vYUNkgZ1l9pu2nrqJupmUg5K4k5hgn2edGy4FfoW6S P3wl7TKgnEK1EPMhXK5s4ZYLcZwCrq428s1uRRIsY27vOMezy+ubuKjvEhX4bRHR SPUqGdqXix+XsdPrA7iNe4Qrr5WQlStJoJiZ2ip0a0EuVmFnoqszcHtyt7tEgM88 /29akjCENKe72qtzTPsBzUla5q+t0hNKVmJuFufoAkvAyvt+/+MRfXZ2blBeAYbw IWEFW/aeCGD848Q0zsWhq0SSDQZCa4COwFM6uQ4rJxgk3bsGiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMOdiJdJbfP9s+VjguxkHGEo7yAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvNDUyYThiYTItYWRlNy0z YjU2LTk4ZjUtMDJmNTBlNTQ2ZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4 MzVmYzE4ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQDGaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfTpX8vbDD/iNsj0wpR92T5ObYCftOTM1G1HrKG2Xw+b0nGtL/Nkbt0 JR4hZGndipTuUOwIBfr+vWn2VlOjGN5WwHEDcCbGzNThRCZAzc7zv6ixfRoYgUq2 46k7wFklxhAIxDLvAN7TX+Dr6kjcoALlbcVPT7B9mwt7Y13DBCWMpELrqNJaA1a3 GWQ/1CP0dlAajbwptgqZFW1IZDyIQcBjChwvgubMXmFl4gJor5WLzEFyW2qSTB5c y1lxfdKxEtW0SFtkPgjg0BMQ5oDJ2f2aU6K4v0Tv/WUb5/YSUZOKjc6J6tjwvJlk 6IPNdzSrVPsWkTOevxqDyqwb+nyBI1Y= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:09 2025 by rpki-client